$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40be5689-9c5b-3742-b389-d1a425f36c3b.roa File: 40be5689-9c5b-3742-b389-d1a425f36c3b.roa (raw, json) Hash identifier: aedNO7ZQsjYcv556+iB4KlBd+mOkcZ1EpKyx3vnlYeI= Subject key identifier: 66:C4:65:08:D0:80:3E:7D:53:E9:0E:35:B1:89:6C:22:80:EB:4A:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA982AF7CFEC45F98BF640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40be5689-9c5b-3742-b389-d1a425f36c3b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 174.170.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:98:2a:f7:cf:ec:45:f9:8b:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3c81884c-1a57-46c1-9380-f65684cc9792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:37:74:ca:4c:43:97:c7:28:49:17:a6:4b: e3:2c:9e:a5:8f:40:cd:28:ad:13:f3:97:7e:25:6e: a3:73:2f:82:4c:b8:60:17:c8:18:fc:ed:7f:4e:27: 9b:c0:52:09:c1:fa:01:d4:3e:a9:13:e8:7f:77:84: d1:f0:38:05:b2:15:24:7b:18:b1:d2:79:13:df:8b: 70:79:0a:8a:c9:2a:74:28:85:fd:c4:49:f0:a9:f4: bb:ba:ef:65:9a:01:85:d9:37:39:a3:11:da:4b:bb: 4b:ec:d9:d8:c0:2b:49:05:1c:f6:e3:93:f0:24:75: 63:a6:5c:d7:d5:c7:f5:dc:d7:1f:19:e7:44:4c:77: 51:ca:45:d4:52:b9:66:f4:4d:31:e5:7d:e3:6e:d9: 9a:05:29:ce:51:e8:c7:cb:11:7a:66:45:6f:16:2a: e6:52:55:88:58:08:9b:b3:37:db:3b:1f:4d:55:ad: 67:be:75:88:ff:3e:90:7a:f1:d3:41:c4:06:37:27: 28:06:13:17:6c:90:ad:34:bb:d0:bb:2d:43:80:aa: 43:0e:a3:f6:a9:07:f0:82:e7:63:81:b9:62:81:a0: 07:18:aa:7b:0e:4b:4e:08:a2:3a:eb:c2:ce:b2:99: 4c:91:cd:f7:85:6a:fe:41:a5:9d:b0:fe:8f:db:07: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C4:65:08:D0:80:3E:7D:53:E9:0E:35:B1:89:6C:22:80:EB:4A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40be5689-9c5b-3742-b389-d1a425f36c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ae:52:4b:7b:12:3d:90:88:38:27:12:3f:29:2c:df:89:9f: b2:e4:7d:ee:f5:70:7f:d4:7b:1b:56:f9:72:05:3e:e2:3f:5b: c5:a0:1a:de:f9:ab:7c:1e:1d:04:f6:c4:a3:4a:7c:88:46:e7: 6f:0d:43:0e:82:a0:8d:44:2a:1b:fa:fd:c8:82:d0:92:a5:c8: 8c:31:1f:51:a5:4b:6d:62:46:89:0c:33:cb:d6:7e:da:41:18: 9f:32:aa:69:b6:4a:d1:aa:91:67:ac:03:88:73:8e:09:f8:e6: 02:93:26:1a:7a:40:2a:4f:c7:e8:2a:41:14:31:c2:a9:69:5b: 88:ba:05:30:ec:53:00:9a:d9:07:4a:30:c5:9a:60:62:c2:ba: c4:ff:9f:61:f8:63:e6:d6:71:39:5f:f4:e1:6a:e8:83:38:e2: 41:b6:67:2f:d4:8e:77:1e:02:c7:08:1d:a2:3c:13:77:fd:a4: 67:3e:f9:bd:84:f1:c8:6a:1e:27:20:34:98:00:1b:4f:dc:7d: 35:71:bf:1c:b8:92:8b:8c:52:0f:d6:72:68:1b:32:d8:c9:e8: 8a:77:4d:b1:5a:e8:55:2d:f6:db:48:dc:1d:6e:ae:94:e4:8f: 9d:08:2c:0b:b0:c2:08:d1:5e:26:4c:a1:c8:1b:a6:bb:c6:10: 13:01:67:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqpgq98/sRfmL9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2M4MTg4NGMtMWE1Ny00NmMxLTkzODAtZjY1Njg0Y2M5NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkU3dMpMQ5fHKEkXpkvjLJ6lj0DNKK0T85d+ JW6jcy+CTLhgF8gY/O1/TiebwFIJwfoB1D6pE+h/d4TR8DgFshUkexix0nkT34tw eQqKySp0KIX9xEnwqfS7uu9lmgGF2Tc5oxHaS7tL7NnYwCtJBRz245PwJHVjplzX 1cf13NcfGedETHdRykXUUrlm9E0x5X3jbtmaBSnOUejHyxF6ZkVvFirmUlWIWAib szfbOx9NVa1nvnWI/z6QevHTQcQGNycoBhMXbJCtNLvQuy1DgKpDDqP2qQfwgudj gbligaAHGKp7DktOCKI668LOsplMkc33hWr+QaWdsP6P2wf45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbEZQjQgD59U+kONbGJbCKA60owMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBiZTU2ODktOWM1Yi0z NzQyLWIzODktZDFhNDI1ZjM2YzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+uUkt7Ej2QiDgnEj8pLN+Jn7Lkfe71cH/UextW+XIFPuI/W8WgGt75 q3weHQT2xKNKfIhG528NQw6CoI1EKhv6/ciC0JKlyIwxH1GlS21iRokMM8vWftpB GJ8yqmm2StGqkWesA4hzjgn45gKTJhp6QCpPx+gqQRQxwqlpW4i6BTDsUwCa2QdK MMWaYGLCusT/n2H4Y+bWcTlf9OFq6IM44kG2Zy/UjnceAscIHaI8E3f9pGc++b2E 8chqHicgNJgAG0/cfTVxvxy4kouMUg/WcmgbMtjJ6Ip3TbFa6FUt9ttI3B1urpTk j50ILAuwwgjRXiZMocgbprvGEBMBZ+0= -----END CERTIFICATE-----Generated at Tue Oct 21 22:08:43 2025 by rpki-client