$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb578f60-b5e5-3cab-ba99-a677bd033c5e.roa File: cb578f60-b5e5-3cab-ba99-a677bd033c5e.roa (raw, json) Hash identifier: wEpwFpfyoNGi6vzq9OLm+iy8v4aiWoHB12q9H0T7xFM= Subject key identifier: 83:C5:CB:02:AF:91:05:13:CE:8B:CC:CF:2F:5C:23:91:92:3B:53:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3BB68DF21BB61B1726600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb578f60-b5e5-3cab-ba99-a677bd033c5e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 174.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:bb:68:df:21:bb:61:b1:72:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b136d474-2b3e-4725-aef0-69b64e88115b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:07:59:bd:57:95:80:57:60:00:7e:a6:d5: 1c:a9:12:f4:f6:13:7c:de:c0:83:3b:0f:3d:3f:24: 2e:c8:e9:d6:32:cb:c3:65:7a:47:f1:03:84:c3:64: d1:3b:83:7c:83:ec:b1:47:b2:71:97:67:69:eb:eb: 7b:43:23:60:a0:b4:fb:cc:95:ce:c4:07:5e:18:42: 79:02:f4:94:ef:a6:01:69:0a:61:55:ff:cc:36:1d: 27:37:0c:c8:39:ae:00:ab:5c:88:01:88:d5:8d:af: 44:60:31:dd:2f:26:b9:3d:1a:9a:60:2a:49:e5:60: 35:eb:5d:e2:42:03:98:7c:be:6e:e7:a4:b5:8c:d0: 48:c7:a8:05:2e:9b:cb:aa:47:57:51:3d:0e:b5:b7: 05:6a:66:74:7d:03:16:4f:96:d1:12:85:ab:d9:ec: 01:04:e3:8c:92:49:dc:9c:df:63:cb:03:fd:82:c2: 7e:ea:a3:67:ee:08:6e:ef:21:67:ea:df:c7:73:f1: f7:d9:40:7b:94:0a:82:01:eb:4b:78:7a:af:f7:9f: 48:7e:fb:07:b9:06:81:80:be:ea:9e:6d:f0:b4:eb: 89:04:94:3e:b6:d9:a7:21:4c:d4:c7:4d:a8:4d:2d: 72:40:2f:f9:35:7e:7c:e8:07:c2:82:ba:9d:03:4d: 64:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:CB:02:AF:91:05:13:CE:8B:CC:CF:2F:5C:23:91:92:3B:53:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb578f60-b5e5-3cab-ba99-a677bd033c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:da:92:f6:81:53:c9:00:32:3b:b0:49:ee:c7:f9:63:58:54: ed:63:f8:11:4e:33:50:c2:81:a7:19:3f:50:61:97:94:22:52: 0d:d3:0c:f5:89:6e:b9:cb:d1:bb:32:03:35:9c:3b:bc:53:43: 44:93:a5:1c:28:82:d6:2a:79:f3:a2:7e:77:47:a9:a7:f5:85: 1f:d1:51:a9:38:c1:d0:4d:56:74:36:fc:ac:2e:48:de:e7:55: 4e:05:79:c1:6d:a5:7a:65:53:f7:aa:2a:95:f4:63:a9:f6:31: 49:be:1b:58:73:38:57:8c:58:c5:76:5c:e0:7d:91:a6:bd:fd: bf:2f:59:d5:ff:8f:50:da:63:83:0a:32:09:55:2a:57:e7:77: 7e:88:e5:41:3a:a4:80:73:ea:78:a9:06:7b:fc:c3:b6:c9:eb: 31:82:6e:f1:9c:f5:6c:fe:7f:77:69:52:82:1e:0b:8e:ea:48: c4:45:9e:a6:49:81:91:6e:7b:82:a8:67:a4:61:6a:fb:ed:9d: a9:3d:9b:7a:7e:23:df:2b:53:6a:90:6d:77:4a:38:2c:d5:ad: c1:de:15:c8:bb:0c:65:23:2f:53:cf:74:5a:ed:dc:0e:d6:e6: 98:5a:8d:80:3b:83:01:3d:0d:74:07:0d:74:c4:fb:52:0f:19: 3e:1a:f1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw7to3yG7YbFyZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjEzNmQ0NzQtMmIzZS00NzI1LWFlZjAtNjliNjRlODgxMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCQHWb1XlYBXYAB+ptUcqRL09hN83sCDOw89 PyQuyOnWMsvDZXpH8QOEw2TRO4N8g+yxR7Jxl2dp6+t7QyNgoLT7zJXOxAdeGEJ5 AvSU76YBaQphVf/MNh0nNwzIOa4Aq1yIAYjVja9EYDHdLya5PRqaYCpJ5WA1613i QgOYfL5u56S1jNBIx6gFLpvLqkdXUT0OtbcFamZ0fQMWT5bREoWr2ewBBOOMkknc nN9jywP9gsJ+6qNn7ghu7yFn6t/Hc/H32UB7lAqCAetLeHqv959IfvsHuQaBgL7q nm3wtOuJBJQ+ttmnIUzUx02oTS1yQC/5NX586AfCgrqdA01kCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPFywKvkQUTzovMzy9cI5GSO1P4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I1NzhmNjAtYjVlNS0z Y2FiLWJhOTktYTY3N2JkMDMzYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrjmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLakvaBU8kAMjuwSe7H+WNYVO1j+BFOM1DCgacZP1Bhl5QiUg3TDPWJ brnL0bsyAzWcO7xTQ0STpRwogtYqefOifndHqaf1hR/RUak4wdBNVnQ2/KwuSN7n VU4FecFtpXplU/eqKpX0Y6n2MUm+G1hzOFeMWMV2XOB9kaa9/b8vWdX/j1DaY4MK MglVKlfnd36I5UE6pIBz6nipBnv8w7bJ6zGCbvGc9Wz+f3dpUoIeC47qSMRFnqZJ gZFue4KoZ6Rhavvtnak9m3p+I98rU2qQbXdKOCzVrcHeFci7DGUjL1PPdFrt3A7W 5phajYA7gwE9DXQHDXTE+1IPGT4a8eg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:49 2025 by rpki-client