$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e63c2fd1-c901-35a9-af8c-ecc39da75b90.roa File: e63c2fd1-c901-35a9-af8c-ecc39da75b90.roa (raw, json) Hash identifier: lIL5bWftf9HQgXN6biMJpDw13EkYeDwpxUxevaUyWWY= Subject key identifier: C9:97:02:F2:25:14:E0:72:BB:CE:DE:82:8E:9D:77:F3:0F:20:F8:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B65604D1DA8A8F54E1360 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e63c2fd1-c901-35a9-af8c-ecc39da75b90.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 174.163.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:65:60:4d:1d:a8:a8:f5:4e:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=d0d7c657-c8b4-468f-a3b7-dbf8e145ad13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:6f:50:91:08:d0:61:c9:96:b7:5f:28:80: 63:1f:04:fa:5c:2b:fe:26:7f:a1:e3:09:5a:c8:bf: 81:62:b6:67:f8:dd:98:e3:f9:bf:23:99:6a:7f:1c: ea:16:b6:cc:aa:a4:8a:85:4c:c4:49:d8:fe:a3:c5: a0:34:7e:2c:3a:85:93:dc:1a:ee:62:50:7c:33:44: 4d:65:31:0e:5c:8d:a0:c3:85:d5:ff:b3:fc:fc:ad: bd:23:82:3b:cd:c9:f6:b8:40:f8:0a:3c:49:89:a5: 99:1f:e9:f4:ef:4e:07:8d:4b:55:01:7f:62:4d:86: a0:c7:62:92:7b:73:d5:40:df:e9:71:6a:f7:3e:f6: 54:5b:f4:98:e7:dc:60:4f:87:62:7a:7d:f9:58:64: 45:e4:85:2f:41:fc:ac:d6:9e:d1:b7:b4:a1:40:c2: ad:f6:30:b5:56:48:0f:a5:e7:60:0d:2d:f3:df:c8: 31:1c:95:28:7b:cd:08:36:e4:22:3a:1f:4d:81:b5: 96:e0:79:23:aa:11:04:61:56:f1:76:a5:33:5c:7c: cb:c7:a3:54:ce:8a:a8:12:91:e9:e0:e4:6f:61:9e: f0:8d:c0:3f:9b:68:f0:92:26:0f:4d:08:a3:c9:30: e2:b0:6e:36:94:39:1e:4d:7b:4e:d3:8d:3a:74:e1: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:02:F2:25:14:E0:72:BB:CE:DE:82:8E:9D:77:F3:0F:20:F8:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e63c2fd1-c901-35a9-af8c-ecc39da75b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.163.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:46:23:7e:23:db:b8:2a:bd:9a:08:bf:36:c9:2e:55:ac:3b: 9a:0a:ea:0a:e2:07:b2:4e:f8:78:74:84:4e:5a:18:1b:b6:63: 9b:99:7d:fe:6b:c5:5f:db:f8:89:62:d0:bc:2a:41:4b:cb:79: a7:cc:a4:c5:d0:c0:a5:5f:be:3d:11:fd:81:a3:af:2d:93:42: f3:4a:45:da:d3:0a:ac:e1:2f:95:d3:51:2f:45:0a:b2:16:60: 5a:5b:89:35:46:e3:0b:28:3a:ff:7a:53:1d:29:df:c7:ec:ee: 25:35:67:6e:df:31:da:96:e4:84:5e:7f:5e:cb:0f:81:2c:02: 84:c7:a3:2d:fa:9a:94:34:7e:80:e3:f9:b5:85:c4:63:b2:34: 39:39:79:e8:5d:ca:44:63:21:72:d0:6b:1d:32:e3:54:25:c1: 3c:62:41:f2:bc:fd:ae:e1:e5:e4:3d:95:93:03:d8:42:61:d2: ce:35:38:27:67:a4:96:ed:21:4a:fd:cb:78:44:07:fd:f9:9a: ea:a3:0f:85:16:28:41:a1:4d:60:81:1a:3b:c5:e8:f6:27:e7: ae:b8:6c:54:32:b0:0d:fe:f1:2d:6a:17:a1:f4:cb:c2:79:34: f2:f4:56:58:80:f0:22:28:a7:12:24:9d:d0:ba:8e:c5:c9:74: 8d:a9:35:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC2VgTR2oqPVOE2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZDBkN2M2NTctYzhiNC00NjhmLWEzYjctZGJmOGUxNDVhZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+JvUJEI0GHJlrdfKIBjHwT6XCv+Jn+h4wla yL+BYrZn+N2Y4/m/I5lqfxzqFrbMqqSKhUzESdj+o8WgNH4sOoWT3BruYlB8M0RN ZTEOXI2gw4XV/7P8/K29I4I7zcn2uED4CjxJiaWZH+n0704HjUtVAX9iTYagx2KS e3PVQN/pcWr3PvZUW/SY59xgT4dien35WGRF5IUvQfys1p7Rt7ShQMKt9jC1VkgP pedgDS3z38gxHJUoe80INuQiOh9NgbWW4HkjqhEEYVbxdqUzXHzLx6NUzoqoEpHp 4ORvYZ7wjcA/m2jwkiYPTQijyTDisG42lDkeTXtO0406dOHLpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmXAvIlFOByu87ego6dd/MPIPgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTYzYzJmZDEtYzkwMS0z NWE5LWFmOGMtZWNjMzlkYTc1YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdGI34j27gqvZoIvzbJLlWsO5oK6griB7JO+Hh0hE5aGBu2Y5uZff5r xV/b+Ili0LwqQUvLeafMpMXQwKVfvj0R/YGjry2TQvNKRdrTCqzhL5XTUS9FCrIW YFpbiTVG4wsoOv96Ux0p38fs7iU1Z27fMdqW5IRef17LD4EsAoTHoy36mpQ0foDj +bWFxGOyNDk5eehdykRjIXLQax0y41QlwTxiQfK8/a7h5eQ9lZMD2EJh0s41OCdn pJbtIUr9y3hEB/35muqjD4UWKEGhTWCBGjvF6PYn5664bFQysA3+8S1qF6H0y8J5 NPL0VliA8CIopxIkndC6jsXJdI2pNYM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:42 2025 by rpki-client