$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d6d4f7e-7424-329f-a051-d527bf179e36.roa File: 1d6d4f7e-7424-329f-a051-d527bf179e36.roa (raw, json) Hash identifier: FErOxUD1N/t3yXxvCY4PzPi4hUzH+FkoMGV0j+q4hgc= Subject key identifier: 55:65:67:36:50:3A:CA:17:91:53:06:48:5B:07:56:D2:DA:9A:88:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA9AF3DD5FC07495AC3E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d6d4f7e-7424-329f-a051-d527bf179e36.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 174.171.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:9a:f3:dd:5f:c0:74:95:ac:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ae58c3fa-7e94-4f70-8c31-84b12743d3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:64:29:17:51:79:ea:65:3c:6b:a8:7c:85: 3f:e6:61:6d:8b:14:45:fb:66:d7:3c:7a:f8:9f:96: 99:a9:cc:f7:f2:fa:86:de:ff:c5:24:61:86:b5:cd: 15:79:a6:d2:f2:ce:5a:31:08:22:68:a7:17:5f:8f: 18:90:9b:35:aa:71:92:97:a2:4c:de:7b:b1:3d:4f: 71:00:eb:34:5e:66:ca:1d:af:82:90:18:1e:1b:41: a1:02:ff:a7:f8:da:16:f1:0a:64:36:38:02:9b:54: 81:70:e6:5e:6b:e1:5d:c9:23:6d:54:e7:83:d6:c9: 11:31:de:77:36:2f:82:0d:4e:d1:ea:38:93:d9:2e: 64:2a:c1:ba:5e:ee:03:d4:ca:6a:7c:da:39:d7:68: 9b:5c:03:a0:4f:e1:69:c7:b4:35:ac:e8:f1:e8:f4: 7b:43:0b:3d:1b:a4:4c:a0:b9:e0:56:61:89:bb:65: 57:55:67:62:e0:37:49:5c:29:69:e5:ee:d9:00:1c: b5:35:75:de:6a:f0:0d:ae:25:05:c2:3f:15:a8:e2: 4e:3d:39:20:f4:fc:4f:fb:44:c0:6e:29:30:04:8c: c3:76:8f:41:d6:92:c0:a1:d0:53:a3:15:ea:2d:b7: 22:a8:63:ea:c4:2d:cb:85:1e:11:9f:42:8d:31:a0: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:65:67:36:50:3A:CA:17:91:53:06:48:5B:07:56:D2:DA:9A:88:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d6d4f7e-7424-329f-a051-d527bf179e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:da:74:a0:52:5c:63:b2:7a:25:01:b8:a1:dd:9e:c8:20: e5:9d:3c:45:19:2a:03:32:e1:70:a3:62:61:cc:da:3f:27:ab: 9c:72:1f:db:f0:c9:a8:8b:7b:1f:24:04:81:9f:9b:67:14:3a: da:70:16:81:07:9a:b9:c7:ee:29:c6:81:2b:72:c8:95:3f:5f: ba:d7:9b:c7:2b:69:8b:2d:15:bb:34:05:6e:b2:3e:38:35:bf: 2a:a4:08:1f:25:bb:a1:08:18:60:93:18:02:ee:89:8d:7c:56: d2:0f:db:3d:fa:87:cc:65:0a:0e:ee:1f:04:d2:8a:f3:a3:d7: 6e:1c:e2:c3:4f:34:44:d6:44:0c:d6:5b:e4:8d:0a:72:a8:cf: fd:a8:ce:b8:89:f9:57:b6:ff:5a:19:60:84:a8:8d:a1:b6:5a: b4:8c:be:4a:33:e6:87:9d:78:46:9f:2a:ba:cb:cd:fc:7b:96: 5b:5e:23:ea:78:ab:9f:97:2d:32:5f:f5:88:4a:b7:8d:b3:f6: 6e:1f:3f:38:0d:61:89:aa:96:a6:8b:ce:bb:99:22:1f:53:7f: 3f:82:f9:b7:a4:8f:a4:a6:96:af:85:50:0c:6d:10:68:20:dd: d8:3a:6f:e4:64:c1:85:9a:9d:c4:54:55:91:8c:82:a6:8e:b4: 71:70:d5:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqprz3V/AdJWsPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YWU1OGMzZmEtN2U5NC00ZjcwLThjMzEtODRiMTI3NDNkM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNBkKRdReeplPGuofIU/5mFtixRF+2bXPHr4 n5aZqcz38vqG3v/FJGGGtc0VeabS8s5aMQgiaKcXX48YkJs1qnGSl6JM3nuxPU9x AOs0XmbKHa+CkBgeG0GhAv+n+NoW8QpkNjgCm1SBcOZea+FdySNtVOeD1skRMd53 Ni+CDU7R6jiT2S5kKsG6Xu4D1MpqfNo512ibXAOgT+Fpx7Q1rOjx6PR7Qws9G6RM oLngVmGJu2VXVWdi4DdJXClp5e7ZABy1NXXeavANriUFwj8VqOJOPTkg9PxP+0TA bikwBIzDdo9B1pLAodBToxXqLbciqGPqxC3LhR4Rn0KNMaCsfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVlZzZQOsoXkVMGSFsHVtLamojFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQ2ZDRmN2UtNzQyNC0z MjlmLWEwNTEtZDUyN2JmMTc5ZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9u2nSgUlxjsnolAbih3Z7IIOWdPEUZKgMy4XCjYmHM2j8nq5xyH9vw yaiLex8kBIGfm2cUOtpwFoEHmrnH7inGgStyyJU/X7rXm8craYstFbs0BW6yPjg1 vyqkCB8lu6EIGGCTGALuiY18VtIP2z36h8xlCg7uHwTSivOj124c4sNPNETWRAzW W+SNCnKoz/2ozriJ+Ve2/1oZYISojaG2WrSMvkoz5oedeEafKrrLzfx7llteI+p4 q5+XLTJf9YhKt42z9m4fPzgNYYmqlqaLzruZIh9Tfz+C+bekj6Smlq+FUAxtEGgg 3dg6b+RkwYWancRUVZGMgqaOtHFw1bA= -----END CERTIFICATE-----Generated at Wed Oct 22 02:27:17 2025 by rpki-client