$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa File: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (raw, json) Hash identifier: h+uJh2oa35LfnRQW/yt80keQUbHJ0nHBBZ89OXHFxF4= Subject key identifier: 3A:57:2E:40:3A:7F:34:4A:0C:78:E7:95:4A:2B:D9:B4:93:6B:EA:C9 Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F4328584AFEE6CC1C5C5383D6F45798D4 Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 25968 IP address blocks: 147.174.0.0/16 maxlen: 16 147.174.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cc:1c:5c:53:83:d6:f4:57:98:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=8456382f-ff5a-43a6-8238-2257b891d4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:fa:e7:2d:4a:a2:f8:f7:da:b8:28:20:70: bd:7b:93:98:4f:eb:33:60:f3:fa:cb:bc:ae:5d:7e: b2:14:48:0a:da:57:8c:8a:e0:65:2a:38:8d:48:60: 01:f6:be:07:dc:08:68:15:8b:15:98:eb:75:c0:8b: fa:1f:79:3e:34:cf:7f:a8:a1:4d:8d:42:5e:6a:b0: 38:e5:54:78:5e:de:49:5f:a8:89:0e:fd:7a:3a:2a: 5a:ca:13:14:9d:b8:de:7b:8c:f9:e2:bd:d4:5b:2d: 88:5c:7b:fb:67:47:7e:72:eb:44:9c:6a:bc:ef:a6: 6e:1f:01:73:b1:e1:47:a9:ae:14:a1:95:5c:23:a7: 71:96:05:18:0e:2a:a9:c2:77:91:26:f2:74:0a:d3: ed:bf:e7:39:d1:91:45:c1:07:b9:5a:0b:7d:43:a2: 6a:fd:52:e6:c4:e3:df:00:02:57:08:1c:fe:83:e2: de:13:fd:1b:06:ba:b1:89:24:45:55:92:ef:97:36: f2:ab:bf:16:87:10:39:9a:f4:c9:93:94:87:48:ab: 15:60:70:27:ab:41:64:f6:04:06:6b:32:12:d0:ca: fd:72:69:62:cc:0e:16:8c:66:c0:4b:7e:97:83:3f: d5:1d:00:da:77:58:2a:b7:f6:bd:16:0f:d3:13:60: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:57:2E:40:3A:7F:34:4A:0C:78:E7:95:4A:2B:D9:B4:93:6B:EA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: 147.174.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:13:5d:1f:0b:20:fd:82:62:37:34:7f:a9:89:c7:3d:75:b7: e9:a3:f7:54:c6:ae:64:30:4f:69:93:e9:73:a1:65:bf:74:cd: 66:34:16:7a:b1:bb:21:c8:b1:2c:f5:72:d7:4a:0e:3b:9c:ea: 31:c1:ef:7d:2b:cc:a2:8e:51:da:49:72:a8:3c:0c:0d:c5:8f: 33:f6:75:90:67:2f:5c:86:0d:09:cd:6c:ff:ac:0d:2f:b8:91: 14:3b:b8:2a:86:e6:74:55:4e:05:a8:18:62:63:5a:a9:5c:f2: ab:20:60:45:4f:e0:d5:b9:29:5e:e8:71:d1:64:d7:7d:76:28: d6:00:0e:02:58:99:fa:bd:7a:88:ab:62:0a:36:6b:c0:ba:7c: 1d:9f:bf:b9:90:42:92:84:bd:87:f7:c6:7a:95:73:3e:20:77: e3:2b:f7:2e:68:71:e4:9d:3f:83:bf:7a:a6:6f:37:e7:3c:a2: da:2f:b7:d3:77:af:31:e5:bf:63:bc:14:f1:52:17:09:c2:cd: ea:fc:95:fe:96:41:5a:4a:f5:5b:df:0b:75:39:bb:e1:0a:d3: 26:d0:9a:8e:c4:22:ed:80:72:3a:a9:29:af:67:ad:2a:36:94: 3f:05:d5:24:5f:35:a4:d9:11:37:dd:61:97:38:e5:31:63:9b: 73:9c:bb:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr+5swcXFOD1vRXmNQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ODQ1NjM4MmYtZmY1YS00M2E2LTgyMzgtMjI1N2I4OTFkNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnun65y1Kovj32rgoIHC9e5OYT+szYPP6y7yu XX6yFEgK2leMiuBlKjiNSGAB9r4H3AhoFYsVmOt1wIv6H3k+NM9/qKFNjUJearA4 5VR4Xt5JX6iJDv16OipayhMUnbjee4z54r3UWy2IXHv7Z0d+cutEnGq876ZuHwFz seFHqa4UoZVcI6dxlgUYDiqpwneRJvJ0CtPtv+c50ZFFwQe5Wgt9Q6Jq/VLmxOPf AAJXCBz+g+LeE/0bBrqxiSRFVZLvlzbyq78WhxA5mvTJk5SHSKsVYHAnq0Fk9gQG azIS0Mr9cmlizA4WjGbAS36Xgz/VHQDad1gqt/a9Fg/TE2DeCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDpXLkA6fzRKDHjnlUor2bSTa+rJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvODVmNmIxZTEtODM0NS0z M2IyLTljMmEtNGM1OWVjOWQ0NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk64wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJhNdHwsg/YJiNzR/qYnHPXW36aP3VMauZDBPaZPpc6Flv3TNZjQWerG7 IcixLPVy10oOO5zqMcHvfSvMoo5R2klyqDwMDcWPM/Z1kGcvXIYNCc1s/6wNL7iR FDu4KobmdFVOBagYYmNaqVzyqyBgRU/g1bkpXuhx0WTXfXYo1gAOAliZ+r16iKti CjZrwLp8HZ+/uZBCkoS9h/fGepVzPiB34yv3Lmhx5J0/g796pm835zyi2i+303ev MeW/Y7wU8VIXCcLN6vyV/pZBWkr1W98LdTm74QrTJtCajsQi7YByOqkpr2etKjaU PwXVJF81pNkRN91hlzjlMWObc5y7Jg== -----END CERTIFICATE-----Generated at Sat Oct 11 04:23:33 2025 by rpki-client