$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa File: 8527687a-07fc-3f1c-a99c-a60850d64434.roa (raw, json) Hash identifier: /Z9slwu5k+JPM936brG7hoM7UpE7ONkrS5lHhvmHFis= Subject key identifier: 49:2E:EC:2D:2F:43:50:B9:3C:74:73:63:5F:4D:17:CE:91:25:FE:A6 Certificate issuer: /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1 Certificate serial: 010D0C9F4328584AA42B8995D4CC6A79179B639B Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 18451 IP address blocks: 174.34.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:89:95:d4:cc:6a:79:17:9b:63:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=39338a3a-d41c-4b53-a0e6-96100d706bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:a7:60:a3:75:e6:45:33:f7:f5:5f:a3:ff: 38:01:0b:1c:4b:56:78:aa:9b:38:2f:90:a4:60:04: 31:b3:2f:01:91:6f:82:7c:b6:cf:5e:6c:6f:0e:cc: fa:51:0d:fd:18:69:0c:a0:9c:76:8d:11:22:a8:dc: d6:e1:43:b4:f4:01:fa:d2:eb:33:89:f1:53:39:46: b1:90:a9:69:d3:d7:9f:5f:04:87:ae:86:c5:c9:36: 12:74:d2:a5:d2:34:85:a7:11:fd:e3:ec:65:4b:2e: f1:5d:ed:ad:ac:a0:7e:d7:f6:32:28:50:0f:61:a2: 98:af:18:e3:b9:fa:21:19:ef:61:f3:10:b9:78:56: da:1a:b0:5f:d3:d6:2e:e1:18:10:bf:62:60:1f:d2: 31:bb:a3:8d:04:64:b1:40:3e:89:38:da:c1:0b:50: 30:c7:89:c0:b7:60:97:e3:3f:fd:9a:78:ad:f3:38: 26:5d:29:dd:d3:c3:f1:0a:9c:5f:b7:05:78:9d:3e: 25:8b:52:64:19:62:6a:0c:de:c0:b1:29:ac:a4:f7: 86:de:6b:47:31:45:cd:ec:49:a2:e2:05:9a:0c:05: 91:13:6e:bf:10:a1:56:2a:2a:68:5e:1b:77:5e:12: bd:80:f6:0a:4b:78:57:02:55:fa:d2:d6:c2:75:77: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2E:EC:2D:2F:43:50:B9:3C:74:73:63:5F:4D:17:CE:91:25:FE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl X509v3 Authority Key Identifier: keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer sbgp-ipAddrBlock: critical IPv4: 174.34.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:71:ff:52:2c:7f:0c:e0:a0:d6:10:4b:f8:c2:36:22:da:77: 75:9f:37:b0:31:e1:05:77:98:fe:e9:e8:3b:1f:ac:cd:bd:54: 0a:c8:84:e1:4e:54:68:96:92:fb:b7:6e:b8:0c:1e:02:07:df: be:25:8d:37:4f:90:bc:cf:a3:00:8b:84:ba:6a:1d:c1:45:fa: 3c:52:76:64:06:05:88:58:a6:e3:16:19:27:ae:93:90:1e:65: e1:9f:b4:d8:51:8b:3e:3d:5a:f4:64:e7:f4:21:6f:3d:fa:75: 68:4e:af:17:29:9e:44:87:da:d1:82:a9:91:00:64:b6:ba:14: ac:98:2c:0f:67:35:ab:a4:ef:fc:74:72:a1:55:be:d3:ef:90: 48:55:8d:c8:90:89:30:8b:e0:e0:49:95:cb:ff:5a:94:79:12: 8f:65:42:72:a3:73:13:b8:bc:2d:43:17:42:bd:43:4c:b3:62: ed:04:5e:e2:1f:ed:f0:e8:39:3c:3a:e9:9e:4c:a7:fe:8a:e5: 15:89:3c:3f:05:ec:2e:a5:cc:a9:88:cb:0c:39:be:a9:c3:f0: e0:f1:fd:7d:ef:c8:5c:2e:40:08:42:6e:c5:9c:02:0c:0f:14: 92:e0:56:92:9d:ad:bd:5c:c8:21:cb:b0:36:90:88:74:76:98: 04:1b:09:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4mV1MxqeRebY5swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0M2RjMjEtZTFiMy00N2JiLWJmNDItNDRmZTU1ZTUy N2YxMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MzkzMzhhM2EtZDQxYy00YjUzLWEwZTYtOTYxMDBkNzA2YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+unYKN15kUz9/Vfo/84AQscS1Z4qps4L5Ck YAQxsy8BkW+CfLbPXmxvDsz6UQ39GGkMoJx2jREiqNzW4UO09AH60uszifFTOUax kKlp09efXwSHrobFyTYSdNKl0jSFpxH94+xlSy7xXe2trKB+1/YyKFAPYaKYrxjj ufohGe9h8xC5eFbaGrBf09Yu4RgQv2JgH9Ixu6ONBGSxQD6JONrBC1Awx4nAt2CX 4z/9mnit8zgmXSnd08PxCpxftwV4nT4li1JkGWJqDN7AsSmspPeG3mtHMUXN7Emi 4gWaDAWRE26/EKFWKipoXht3XhK9gPYKS3hXAlX60tbCdXfx5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEku7C0vQ1C5PHRzY19NF86RJf6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YjQz ZGMyMS1lMWIzLTQ3YmItYmY0Mi00NGZlNTVlNTI3ZjEvODUyNzY4N2EtMDdmYy0z ZjFjLWE5OWMtYTYwODUwZDY0NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmI0M2RjMjEtZTFiMy00N2JiLWJm NDItNDRmZTU1ZTUyN2YxLzZiNDNkYzIxLWUxYjMtNDdiYi1iZjQyLTQ0ZmU1NWU1 MjdmMS5jcmwwHwYDVR0jBBgwFoAUB64YrfJryPrmWzLNhHyxbwenyaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YjQzZGMyMS1lMWIzLTQ3YmItYmY0Mi00NGZl NTVlNTI3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVx/1IsfwzgoNYQS/jCNiLad3WfN7Ax4QV3mP7p6DsfrM29VArIhOFO VGiWkvu3brgMHgIH374ljTdPkLzPowCLhLpqHcFF+jxSdmQGBYhYpuMWGSeuk5Ae ZeGftNhRiz49WvRk5/Qhbz36dWhOrxcpnkSH2tGCqZEAZLa6FKyYLA9nNauk7/x0 cqFVvtPvkEhVjciQiTCL4OBJlcv/WpR5Eo9lQnKjcxO4vC1DF0K9Q0yzYu0EXuIf 7fDoOTw66Z5Mp/6K5RWJPD8F7C6lzKmIyww5vqnD8ODx/X3vyFwuQAhCbsWcAgwP FJLgVpKdrb1cyCHLsDaQiHR2mAQbCW4= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:25 2025 by rpki-client