$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f623fa40-cf63-3db8-8789-7998b4a8e3e8.roa File: f623fa40-cf63-3db8-8789-7998b4a8e3e8.roa (raw, json) Hash identifier: T0OHn7cQt67ZRZ2zg9swu8pxSl7qcHxkS/BvmVL3Q98= Subject key identifier: 75:D5:41:A4:61:84:5F:05:97:40:9B:90:D9:AF:57:E8:48:E1:65:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB83A3EA183732BF451380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f623fa40-cf63-3db8-8789-7998b4a8e3e8.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 174.174.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:83:a3:ea:18:37:32:bf:45:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a7fae3e2-9c78-4b75-b9a8-b177aee9a9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:98:cb:9f:dc:84:77:f0:48:02:02:a5:ea:21: 78:03:28:43:2a:4c:98:99:44:ed:fc:9a:be:65:68: 34:ce:5a:c7:62:aa:ba:0b:3a:04:62:6e:8f:bd:05: 2c:1b:a9:40:7e:a1:b1:73:6c:d2:fe:51:93:9f:77: b3:84:36:54:3d:da:d3:83:cc:3c:a4:c2:ae:89:49: ed:74:f3:1f:69:4a:b5:a0:23:27:6f:3b:40:48:c2: 00:1a:af:11:9e:42:ae:c9:bf:48:31:32:ec:e1:e8: e2:44:b8:ac:2d:3e:03:eb:00:7d:ea:ad:ea:00:e7: f1:b5:7f:a8:5a:69:78:90:73:2d:db:82:47:67:c6: d3:92:cf:f7:8c:4a:a9:08:d2:54:77:7d:1c:f1:0a: c1:46:2b:1d:a2:a1:42:0c:3d:6d:1b:a9:4c:9b:50: bf:3d:34:ec:c2:50:ed:ac:14:e0:b6:e1:5e:27:d2: 63:03:db:8f:2a:09:4d:ae:a0:0b:e5:77:89:e8:04: fb:b2:ef:d9:c5:78:aa:33:d1:38:16:43:f1:dc:2f: 3b:3d:8c:f7:cf:70:ad:38:0f:a4:9c:ee:d8:98:1e: 88:4f:67:04:f4:ab:49:a5:5b:92:b8:60:e2:7c:e5: 90:0a:b1:45:00:e1:1d:c4:8e:d0:90:3f:fd:77:fd: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D5:41:A4:61:84:5F:05:97:40:9B:90:D9:AF:57:E8:48:E1:65:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f623fa40-cf63-3db8-8789-7998b4a8e3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:fb:13:7f:45:83:97:a5:93:fa:e7:26:a5:aa:25:f4:fc:16: 41:ca:4d:60:c6:d8:a0:4d:9e:77:1e:09:91:93:1c:c7:de:5f: 49:31:9b:66:10:6e:e8:8b:50:0c:59:88:20:fd:84:21:6a:30: af:60:18:69:05:49:f6:f0:3a:d0:e4:a8:3d:3d:2d:d3:b4:52: 6d:89:52:f1:a4:57:5c:7a:80:a0:e2:5a:9c:ce:d8:75:d9:85: 87:78:a8:af:f3:8d:cb:6f:62:36:c0:04:14:c2:6a:44:a1:50: 53:56:18:35:2f:63:24:e9:05:43:0b:eb:70:cb:69:61:b2:d9: 2f:6d:e1:f8:f5:30:ce:96:16:61:a1:ba:58:b8:e3:9f:1f:53: 16:81:4d:ad:7a:d5:69:36:b7:e0:7d:b5:48:41:87:60:e9:ce: ff:00:c7:25:d4:79:ee:42:b5:32:ea:bf:32:6a:26:62:24:5a: d7:87:72:8d:71:73:80:e0:88:d4:fc:39:f8:9b:2e:75:d6:dd: 58:a8:52:a6:e9:7d:05:93:dd:53:8c:7f:7a:97:00:a0:fb:59: 92:22:5f:fb:5b:7b:60:f7:15:c4:c8:41:dd:fd:af:6d:fd:81: e9:00:27:43:b6:59:1f:ac:7a:00:5a:f8:19:af:64:d6:ad:f5: e6:e6:e7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064Oj6hg3Mr9FE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTdmYWUzZTItOWM3OC00Yjc1LWI5YTgtYjE3N2FlZTlhOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipjLn9yEd/BIAgKl6iF4AyhDKkyYmUTt/Jq+ ZWg0zlrHYqq6CzoEYm6PvQUsG6lAfqGxc2zS/lGTn3ezhDZUPdrTg8w8pMKuiUnt dPMfaUq1oCMnbztASMIAGq8RnkKuyb9IMTLs4ejiRLisLT4D6wB96q3qAOfxtX+o Wml4kHMt24JHZ8bTks/3jEqpCNJUd30c8QrBRisdoqFCDD1tG6lMm1C/PTTswlDt rBTgtuFeJ9JjA9uPKglNrqAL5XeJ6AT7su/ZxXiqM9E4FkPx3C87PYz3z3CtOA+k nO7YmB6IT2cE9KtJpVuSuGDifOWQCrFFAOEdxI7QkD/9d/0lBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXVQaRhhF8Fl0CbkNmvV+hI4WWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjYyM2ZhNDAtY2Y2My0z ZGI4LTg3ODktNzk5OGI0YThlM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrq5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANj7E39Fg5elk/rnJqWqJfT8FkHKTWDG2KBNnnceCZGTHMfeX0kxm2YQ buiLUAxZiCD9hCFqMK9gGGkFSfbwOtDkqD09LdO0Um2JUvGkV1x6gKDiWpzO2HXZ hYd4qK/zjctvYjbABBTCakShUFNWGDUvYyTpBUML63DLaWGy2S9t4fj1MM6WFmGh uli4458fUxaBTa161Wk2t+B9tUhBh2Dpzv8AxyXUee5CtTLqvzJqJmIkWteHco1x c4DgiNT8OfibLnXW3VioUqbpfQWT3VOMf3qXAKD7WZIiX/tbe2D3FcTIQd39r239 gekAJ0O2WR+segBa+BmvZNat9ebm544= -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:50 2025 by rpki-client