$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa File: 3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa (raw, json) Hash identifier: YgoJoUDjyQEB5mQrDVDlwa63zEYpu2UvLiDNNRFXGXI= Subject key identifier: AE:36:CF:77:55:49:FB:01:33:A5:CF:24:A9:5B:7F:33:EC:B0:88:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA99F9600C8788216387A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 174.170.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:99:f9:60:0c:87:88:21:63:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1a744de3-90f8-450f-887e-4908ff7f3fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:62:94:cd:18:9d:d6:cd:8b:93:39:45:96:c0: b1:d1:ac:80:80:77:25:09:1f:60:dc:95:57:38:30: b5:47:36:1f:6d:16:3c:aa:13:8c:df:49:3e:16:7e: 39:ca:46:61:80:81:15:f9:f5:9f:ad:bf:bb:f1:53: 33:29:03:cc:ef:69:e3:33:cf:f9:b5:e6:3d:12:0f: 26:14:62:ff:10:a2:ca:98:04:6b:49:aa:d6:eb:fc: 52:65:fe:ab:53:5b:26:c5:20:3d:5a:bd:1d:42:d2: 49:ef:ee:3c:c4:19:c2:73:d3:54:be:fc:70:12:d9: d4:09:e3:4e:82:6d:cc:81:60:56:71:52:37:ae:9d: 3a:dc:78:69:2c:bd:53:50:75:b3:69:9b:10:4c:e1: f8:45:af:54:53:8f:5e:21:55:b1:e0:5a:cc:16:35: 5a:42:ac:ad:cf:7c:00:31:20:73:97:59:47:32:de: ef:e7:a8:aa:a0:d3:98:d0:49:a0:6c:ae:ff:94:65: 9a:87:af:50:79:8f:16:e7:d1:c9:70:3a:c2:4f:78: bf:84:24:0b:d5:7d:60:30:ef:63:ee:7c:af:84:a0: d4:0e:f0:a3:b4:c8:70:0a:ed:53:d9:d9:49:4a:74: 08:09:b2:76:fd:88:a3:b8:0e:99:cb:c6:4c:2a:f8: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:CF:77:55:49:FB:01:33:A5:CF:24:A9:5B:7F:33:EC:B0:88:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a4:34:93:e3:1a:83:89:b2:90:6b:ba:bf:e6:e6:2b:50:ce: 01:92:35:dd:bd:ba:ea:1e:fc:55:e8:ac:da:ed:97:f0:c1:60: 62:a4:c5:8d:18:eb:24:51:ef:07:26:38:d6:6a:8d:98:d0:e7: 5f:76:02:52:53:1b:cc:c5:ac:89:6b:c2:d8:26:79:87:e4:f3: 98:1f:c2:8f:d8:4f:29:13:7f:4c:45:84:b5:de:ee:1d:fe:da: 63:89:11:14:d4:10:5e:c9:4d:c0:c2:74:dc:09:fe:a4:a7:48: e1:da:47:35:5f:02:12:a7:e0:02:64:40:b1:d3:f4:57:e8:b0: 6c:d4:fc:37:8d:74:34:5c:28:66:c0:f0:54:f6:2f:3e:81:a8: d6:06:a3:25:6b:a6:8f:42:d9:23:10:ee:89:af:51:9b:df:01: 77:75:9e:f4:e7:16:4e:ab:6b:46:64:6d:a4:2c:8f:37:09:b3: e3:4e:4a:35:57:39:a2:51:c2:73:f8:41:b6:33:78:ce:68:1f: ab:54:5a:85:f8:ce:3c:d0:30:c0:64:b3:f4:03:9f:78:66:09: 06:ff:89:ea:a0:2f:14:35:b6:e2:59:47:62:b0:8d:30:fc:60: 3b:50:01:9d:10:cc:01:bd:23:03:a4:1c:ca:82:b5:11:a5:23: 6f:bb:6f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqpn5YAyHiCFjh6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWE3NDRkZTMtOTBmOC00NTBmLTg4N2UtNDkwOGZmN2YzZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32KUzRid1s2LkzlFlsCx0ayAgHclCR9g3JVX ODC1RzYfbRY8qhOM30k+Fn45ykZhgIEV+fWfrb+78VMzKQPM72njM8/5teY9Eg8m FGL/EKLKmARrSarW6/xSZf6rU1smxSA9Wr0dQtJJ7+48xBnCc9NUvvxwEtnUCeNO gm3MgWBWcVI3rp063HhpLL1TUHWzaZsQTOH4Ra9UU49eIVWx4FrMFjVaQqytz3wA MSBzl1lHMt7v56iqoNOY0EmgbK7/lGWah69QeY8W59HJcDrCT3i/hCQL1X1gMO9j 7nyvhKDUDvCjtMhwCu1T2dlJSnQICbJ2/YijuA6Zy8ZMKvgnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK42z3dVSfsBM6XPJKlbfzPssIiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I3ZDQ1MTEtYWM3Zi0z NGM1LTkwOTQtNDUzOGE4YjIxYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJakNJPjGoOJspBrur/m5itQzgGSNd29uuoe/FXorNrtl/DBYGKkxY0Y 6yRR7wcmONZqjZjQ5192AlJTG8zFrIlrwtgmeYfk85gfwo/YTykTf0xFhLXe7h3+ 2mOJERTUEF7JTcDCdNwJ/qSnSOHaRzVfAhKn4AJkQLHT9FfosGzU/DeNdDRcKGbA 8FT2Lz6BqNYGoyVrpo9C2SMQ7omvUZvfAXd1nvTnFk6ra0ZkbaQsjzcJs+NOSjVX OaJRwnP4QbYzeM5oH6tUWoX4zjzQMMBks/QDn3hmCQb/ieqgLxQ1tuJZR2KwjTD8 YDtQAZ0QzAG9IwOkHMqCtRGlI2+7b+4= -----END CERTIFICATE-----Generated at Wed Oct 22 05:03:30 2025 by rpki-client