$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac24609-9d8c-3ae4-a17a-2d2a5ca1d2bd.roa File: aac24609-9d8c-3ae4-a17a-2d2a5ca1d2bd.roa (raw, json) Hash identifier: kaqcwlCVYkZx3e4fIw3vJUbUcZ/FyQTPBXGPuCRMojw= Subject key identifier: 4A:19:EF:14:CE:23:E2:F0:BB:4A:88:30:20:53:02:D7:42:C9:59:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD8139E37C712A85AE09E4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac24609-9d8c-3ae4-a17a-2d2a5ca1d2bd.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 174.53.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:81:39:e3:7c:71:2a:85:ae:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=e80cbd93-8daa-4303-8727-3bd6003da71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:28:f4:53:08:90:7e:e3:c1:d3:09:ea:bb: 5e:aa:a8:53:81:9e:f0:57:84:37:53:65:6a:d3:fe: d3:f0:19:f3:06:d1:eb:b2:35:d1:33:b7:b1:bf:f0: 0c:96:37:26:18:23:3a:45:90:6d:88:b1:9c:e0:b8: c3:f9:a2:58:25:17:19:06:10:91:f3:13:50:6c:44: 51:8b:03:51:b4:ea:be:4a:3a:a9:58:20:ab:14:b1: 88:ed:71:f2:86:24:68:e3:91:a9:29:ad:43:5d:23: 69:80:e2:96:c9:84:79:a7:79:20:e2:ac:c5:7b:5f: b4:e2:40:9a:44:30:1c:75:d5:88:7c:d7:83:2f:74: ec:e8:d5:0c:af:00:8c:27:c6:d2:2a:da:c4:78:56: f6:c1:ff:aa:5c:2d:3e:17:46:f5:15:05:72:8d:f1: e3:ea:18:31:31:3e:f6:04:e0:37:89:b7:f1:cd:23: f6:25:62:c1:cf:2d:70:12:32:00:57:77:e7:23:c2: 5f:13:9a:8c:79:17:f6:1a:c4:52:0e:7c:0c:4a:c0: ec:01:3d:1f:cd:dd:4b:9e:a2:69:21:26:ca:15:52: 4e:4f:c4:1f:40:55:37:17:38:4d:5c:c3:76:15:9d: b0:d4:f7:99:4c:e7:18:68:0b:ec:62:83:83:8d:a1: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:EF:14:CE:23:E2:F0:BB:4A:88:30:20:53:02:D7:42:C9:59:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac24609-9d8c-3ae4-a17a-2d2a5ca1d2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.53.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:27:0e:d3:b3:c0:93:5d:34:dc:e2:26:f3:ef:73:29:e8:8d: fb:22:62:05:2e:3c:6a:a1:90:a6:16:29:37:e6:33:2d:44:c1: 28:d1:79:5d:ce:d0:ab:8a:38:ad:11:0c:e6:c1:c8:1b:9a:80: 92:67:d5:d4:94:ce:69:e5:4a:63:e6:c1:f0:b3:e6:9c:4f:04: 59:34:04:e5:86:69:81:08:1d:1a:b2:71:6c:af:c7:71:59:42: da:4b:84:73:b9:81:0a:03:7f:42:4e:7a:44:4a:f7:b4:7a:26: 0c:1d:f4:32:c3:3f:3a:9b:76:55:56:1b:28:74:58:df:1c:95: f8:ae:cd:13:e2:dc:2d:1c:93:eb:e2:3b:18:7e:17:39:88:e5: 92:b1:c0:4a:42:90:00:47:a6:f2:d4:f5:10:90:47:a5:47:4c: bf:60:49:a8:f4:34:ab:a2:70:ab:68:46:f8:ed:1e:c5:e6:d1: a7:62:74:2d:dc:9b:4a:a1:30:10:d4:f9:89:c2:92:a6:1d:d9: b5:a1:7d:67:76:80:6c:3b:2a:2b:ba:6b:09:35:2a:f5:40:99: 4c:b0:98:d7:23:ec:98:ad:62:49:69:45:71:2f:17:82:b8:c2: 70:9e:90:a3:c3:0c:a7:59:00:84:fb:ea:26:8a:8d:07:c0:5f: 71:4b:0f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/YE543xxKoWuCeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZTgwY2JkOTMtOGRhYS00MzAzLTg3MjctM2JkNjAwM2RhNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsEo9FMIkH7jwdMJ6rteqqhTgZ7wV4Q3U2Vq 0/7T8BnzBtHrsjXRM7exv/AMljcmGCM6RZBtiLGc4LjD+aJYJRcZBhCR8xNQbERR iwNRtOq+SjqpWCCrFLGI7XHyhiRo45GpKa1DXSNpgOKWyYR5p3kg4qzFe1+04kCa RDAcddWIfNeDL3Ts6NUMrwCMJ8bSKtrEeFb2wf+qXC0+F0b1FQVyjfHj6hgxMT72 BOA3ibfxzSP2JWLBzy1wEjIAV3fnI8JfE5qMeRf2GsRSDnwMSsDsAT0fzd1LnqJp ISbKFVJOT8QfQFU3FzhNXMN2FZ2w1PeZTOcYaAvsYoODjaGzdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoZ7xTOI+Lwu0qIMCBTAtdCyVmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFjMjQ2MDktOWQ4Yy0z YWU0LWExN2EtMmQyYTVjYTFkMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrjWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0nDtOzwJNdNNziJvPvcynojfsiYgUuPGqhkKYWKTfmMy1EwSjReV3O 0KuKOK0RDObByBuagJJn1dSUzmnlSmPmwfCz5pxPBFk0BOWGaYEIHRqycWyvx3FZ QtpLhHO5gQoDf0JOekRK97R6Jgwd9DLDPzqbdlVWGyh0WN8clfiuzRPi3C0ck+vi Oxh+FzmI5ZKxwEpCkABHpvLU9RCQR6VHTL9gSaj0NKuicKtoRvjtHsXm0adidC3c m0qhMBDU+YnCkqYd2bWhfWd2gGw7Kiu6awk1KvVAmUywmNcj7JitYklpRXEvF4K4 wnCekKPDDKdZAIT76iaKjQfAX3FLD5A= -----END CERTIFICATE-----Generated at Sun Jul 20 16:56:08 2025 by rpki-client