$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa File: 8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa (raw, json) Hash identifier: yVslfrnFLGyasL4IikmaCLNM/RXcOfcBo3FUD9hNLrc= Subject key identifier: 81:5B:7C:06:91:9E:81:C2:54:2D:3E:3E:D9:5F:94:22:15:71:37:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB69DD87546CCF402CC020 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 174.161.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:69:dd:87:54:6c:cf:40:2c:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=6e0db44f-b801-485f-ae12-90ed1d5e76c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:20:b2:35:df:ca:c5:7f:75:ad:02:01:77: 92:9b:35:b1:de:c7:13:71:35:cf:de:8f:6e:a5:14: 5c:ae:7a:d8:3f:7e:ed:a4:53:18:e8:d6:b8:22:1b: 6f:8d:3c:01:13:64:93:b1:19:fa:9a:af:00:db:26: 1f:fa:42:ee:f5:6c:a8:0b:2a:cf:fb:18:64:5d:30: df:0f:02:28:94:21:18:b1:fb:5d:22:89:6e:42:09: 1b:48:ea:74:8b:cf:dc:6c:cd:1b:3e:92:b3:1a:04: 1c:3e:f4:d2:17:86:9e:e8:b8:be:e6:b3:d1:34:97: c4:bc:91:52:dd:b3:7a:13:b3:8b:0f:ac:bf:3b:6f: 01:dc:f9:e3:ae:18:7f:61:93:3e:17:b2:e7:e0:1b: 0a:f1:8d:3b:48:a3:4d:7f:9d:4f:06:34:6b:94:cc: c7:ce:26:b9:a5:0f:b2:a1:85:9e:72:09:14:59:a1: f7:7b:9e:8f:90:93:e5:8c:6f:17:01:a4:05:ee:48: 18:57:02:94:39:37:4b:50:32:7d:a4:12:d5:d8:54: 33:78:fc:05:b3:4c:2c:50:fb:59:f6:18:08:eb:b7: 04:61:b9:d3:94:d0:e4:12:b5:04:6b:cf:1d:eb:6e: 0e:38:6a:23:79:9e:80:ff:ea:7a:59:7b:ea:7e:f4: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5B:7C:06:91:9E:81:C2:54:2D:3E:3E:D9:5F:94:22:15:71:37:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:85:ed:23:9a:19:5e:0a:b2:d5:81:9f:08:ac:2b:20:52:e3: dc:21:e4:68:7b:eb:4a:fc:c1:a3:ef:74:7c:eb:74:a4:5d:56: b4:50:17:01:a8:40:b2:68:80:33:3e:20:42:6e:1e:3c:29:1a: 2f:a9:c6:48:c9:c2:79:40:95:07:af:aa:fd:70:3d:b4:6f:fa: 93:db:f9:ba:1e:7a:46:ed:1e:c6:4d:55:4a:6b:e0:1d:14:06: a7:96:e8:5b:5c:9f:66:60:d3:c2:28:cd:24:42:eb:15:d9:3c: d1:b3:f2:58:48:bb:54:7c:ac:ca:72:2e:dd:dd:2e:d2:00:64: a5:b3:18:dc:48:ca:bf:4c:f7:b4:94:f9:d9:5b:20:34:e5:2d: b4:45:07:c9:e5:cd:75:36:ce:a0:0c:ba:57:84:f4:9f:82:c1: 5f:1e:c5:69:5b:1f:26:cb:c1:33:e8:0c:7a:61:b1:15:0f:85: 28:e4:dc:86:10:b0:98:76:8f:cf:1e:a8:dd:ea:59:84:2b:3f: a1:18:3d:89:31:fe:31:9e:9c:9c:05:d6:ea:52:45:6b:d4:8b: 3c:f7:bf:bf:65:2d:77:93:c7:20:44:ba:c4:88:e5:3d:d3:ad: e1:df:de:74:7f:24:d0:a3:c5:86:3d:76:c6:b8:92:a0:3f:29: 0b:f9:5e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+2ndh1Rsz0AswCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NmUwZGI0NGYtYjgwMS00ODVmLWFlMTItOTBlZDFkNWU3NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QEgsjXfysV/da0CAXeSmzWx3scTcTXP3o9u pRRcrnrYP37tpFMY6Na4IhtvjTwBE2STsRn6mq8A2yYf+kLu9WyoCyrP+xhkXTDf DwIolCEYsftdIoluQgkbSOp0i8/cbM0bPpKzGgQcPvTSF4ae6Li+5rPRNJfEvJFS 3bN6E7OLD6y/O28B3Pnjrhh/YZM+F7Ln4BsK8Y07SKNNf51PBjRrlMzHzia5pQ+y oYWecgkUWaH3e56PkJPljG8XAaQF7kgYVwKUOTdLUDJ9pBLV2FQzePwFs0wsUPtZ 9hgI67cEYbnTlNDkErUEa88d624OOGojeZ6A/+p6WXvqfvQl1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFbfAaRnoHCVC0+PtlflCIVcTcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ1NGE2NGItNzQyYS0z M2E3LThmMDEtNGZjOGMyNWU2NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+F7SOaGV4KstWBnwisKyBS49wh5Gh760r8waPvdHzrdKRdVrRQFwGo QLJogDM+IEJuHjwpGi+pxkjJwnlAlQevqv1wPbRv+pPb+boeekbtHsZNVUpr4B0U BqeW6Ftcn2Zg08IozSRC6xXZPNGz8lhIu1R8rMpyLt3dLtIAZKWzGNxIyr9M97SU +dlbIDTlLbRFB8nlzXU2zqAMuleE9J+CwV8exWlbHybLwTPoDHphsRUPhSjk3IYQ sJh2j88eqN3qWYQrP6EYPYkx/jGenJwF1upSRWvUizz3v79lLXeTxyBEusSI5T3T reHf3nR/JNCjxYY9dsa4kqA/KQv5Xog= -----END CERTIFICATE-----Generated at Sun Jul 20 17:17:34 2025 by rpki-client