$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd62e10b-d1d7-34a0-b385-25da2197ed0a.roa File: fd62e10b-d1d7-34a0-b385-25da2197ed0a.roa (raw, json) Hash identifier: lpkeLrvr+Ofl9Kohdb2Fhrt5auySAbVsk5rJTO7qct8= Subject key identifier: D5:39:4C:1A:A7:4D:9A:4A:14:1C:F7:58:50:95:CC:93:F0:19:2B:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC17A02B06E5BBD944F26C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd62e10b-d1d7-34a0-b385-25da2197ed0a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 174.162.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:7a:02:b0:6e:5b:bd:94:4f:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f13f37b3-3844-4f06-a730-0ac578b1bb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:40:63:33:47:41:6c:d7:87:cc:ce:b6:a5: b2:9d:2f:59:8b:77:2a:87:cd:5a:a6:bf:d0:22:a5: 3b:5a:fe:f6:dc:89:91:61:36:09:59:a0:14:dc:77: 86:26:c3:e1:8f:57:ad:4b:67:b7:a9:0c:7d:97:23: 68:43:a9:30:2d:ea:ed:8d:0a:d7:42:15:93:47:a5: a6:4c:ed:0c:ef:ca:69:84:3b:8e:0d:e6:42:d9:82: 07:b0:17:40:9a:a1:7c:ec:cd:54:6d:36:77:94:5c: 37:b9:4d:de:ef:4e:47:b0:1f:07:41:fc:b0:85:67: ea:90:86:8f:1e:5c:49:62:aa:b7:c1:04:0c:e5:3c: 96:d4:11:34:87:33:2f:0c:fc:b9:2f:59:21:5a:08: fc:67:82:f1:1b:7a:73:d8:0d:4e:fb:ed:6e:46:63: b7:48:c2:fa:81:6f:f3:e6:98:e8:d3:d4:4d:0e:e8: 00:c3:00:c1:bd:69:e2:3b:06:3a:83:1f:7d:6a:fd: 6a:49:82:28:cf:6c:2d:4f:29:75:dc:1b:57:02:fe: 8c:dd:ff:b0:41:ee:68:d2:14:b4:ff:da:09:b1:ad: f8:3d:54:13:da:18:eb:83:d7:39:c4:3e:06:dc:bc: 56:d0:8b:10:67:d7:15:51:dd:ad:4d:ab:50:df:65: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:4C:1A:A7:4D:9A:4A:14:1C:F7:58:50:95:CC:93:F0:19:2B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd62e10b-d1d7-34a0-b385-25da2197ed0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.162.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f4:e6:0f:52:4c:ec:93:30:e0:a5:05:f4:93:c5:77:71:b7: 51:f9:1f:b3:05:bb:06:4b:c7:7e:9e:52:35:ff:81:dd:d3:79: cd:4e:ef:bb:c9:c1:6b:92:57:e3:95:1d:65:21:6b:41:93:5f: 92:44:ca:c6:45:4b:c6:b0:ce:28:3b:b4:0e:b4:53:8a:7c:e0: 29:07:0a:7f:2b:7d:2b:62:eb:ad:37:29:c8:eb:5f:de:9b:41: 40:1a:47:99:3b:bf:0e:69:25:c0:01:67:92:83:a3:e7:09:7d: 84:9d:0e:bc:e5:cf:38:0f:dd:a8:74:47:0a:a7:00:d5:19:cf: 01:71:26:9c:21:3e:37:e2:dc:d9:24:51:e2:b8:1e:9b:b1:a3: 73:fe:e2:95:12:a5:ce:25:5e:23:34:63:ee:4b:43:99:3a:0f: 80:16:68:d4:fc:3d:8a:ba:eb:a8:14:03:5e:29:7d:e2:c8:51: 8f:39:cb:e7:a8:3a:46:79:45:67:cd:9b:1c:5a:3d:d8:db:82: e8:d4:8d:ee:5f:c7:d8:9c:3c:08:88:60:7c:ce:85:78:e6:08: 7a:4d:03:62:97:5a:f6:84:81:ee:fd:a4:ca:c3:34:6e:04:d0: 56:05:3d:d9:8d:c4:cc:d6:ce:f2:43:57:20:2a:95:1d:36:ec: 8a:bc:15:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswXoCsG5bvZRPJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjEzZjM3YjMtMzg0NC00ZjA2LWE3MzAtMGFjNTc4YjFiYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcNAYzNHQWzXh8zOtqWynS9Zi3cqh81apr/Q IqU7Wv723ImRYTYJWaAU3HeGJsPhj1etS2e3qQx9lyNoQ6kwLertjQrXQhWTR6Wm TO0M78pphDuODeZC2YIHsBdAmqF87M1UbTZ3lFw3uU3e705HsB8HQfywhWfqkIaP HlxJYqq3wQQM5TyW1BE0hzMvDPy5L1khWgj8Z4LxG3pz2A1O++1uRmO3SML6gW/z 5pjo09RNDugAwwDBvWniOwY6gx99av1qSYIoz2wtTyl13BtXAv6M3f+wQe5o0hS0 /9oJsa34PVQT2hjrg9c5xD4G3LxW0IsQZ9cVUd2tTatQ32WEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU5TBqnTZpKFBz3WFCVzJPwGSuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ2MmUxMGItZDFkNy0z NGEwLWIzODUtMjVkYTIxOTdlZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH05g9STOyTMOClBfSTxXdxt1H5H7MFuwZLx36eUjX/gd3Tec1O77vJ wWuSV+OVHWUha0GTX5JEysZFS8awzig7tA60U4p84CkHCn8rfSti6603KcjrX96b QUAaR5k7vw5pJcABZ5KDo+cJfYSdDrzlzzgP3ah0RwqnANUZzwFxJpwhPjfi3Nkk UeK4Hpuxo3P+4pUSpc4lXiM0Y+5LQ5k6D4AWaNT8PYq666gUA14pfeLIUY85y+eo OkZ5RWfNmxxaPdjbgujUje5fx9icPAiIYHzOhXjmCHpNA2KXWvaEge79pMrDNG4E 0FYFPdmNxMzWzvJDVyAqlR027Iq8FWk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:42:34 2025 by rpki-client