$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41ae3939-3473-3fde-bcea-6527e89f3587.roa File: 41ae3939-3473-3fde-bcea-6527e89f3587.roa (raw, json) Hash identifier: uQiz1IEg9PUsMVMq4NDx7b6id0Ru4aSZXqTT06Ke1QE= Subject key identifier: DA:B4:E3:B0:4F:A9:E5:7F:B2:6E:86:D5:DF:84:0F:B5:64:A2:94:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7E992DAAF2A55AC92B280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41ae3939-3473-3fde-bcea-6527e89f3587.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 174.169.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:e9:92:da:af:2a:55:ac:92:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=075a897f-2cda-47c0-bb07-20d269867858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:fb:1b:c0:a4:03:a6:f3:80:7f:b5:34:5a: 45:fd:76:c4:ea:27:3b:32:5d:aa:9f:c0:6b:c9:83: ab:9b:31:d1:cb:6b:81:0b:37:75:e8:2f:77:f0:ab: 37:77:40:0f:bd:7e:85:60:1e:b8:ae:9f:63:e3:8d: f3:7d:29:4f:83:59:d0:19:bc:52:fa:28:68:56:c8: 4f:b3:88:ca:6e:22:27:1a:e9:63:d2:06:9c:0c:e6: 4d:5e:cb:39:39:17:1a:99:1e:4b:a8:74:14:9b:10: 86:59:69:a4:e4:a6:09:27:5b:fd:c3:54:31:c1:c1: 9a:1b:09:d0:e0:0b:44:79:51:12:61:9c:08:d0:4c: ca:b2:f5:39:8a:07:91:0c:fe:08:b8:84:08:42:d2: 99:ca:55:52:04:95:0e:f0:47:b9:8b:95:48:b3:c9: f1:97:76:f8:99:78:b6:4c:d7:fa:de:e3:72:e6:e5: 13:ee:7d:04:3a:36:69:96:c5:00:eb:00:c9:39:ce: 13:aa:a8:2c:95:2d:fb:97:06:d3:80:89:c8:71:ac: 3c:ed:42:4f:25:6c:fe:28:c6:19:35:59:ba:b3:b7: 89:6c:8b:a5:2f:15:a0:e6:2e:96:78:e9:46:6c:e9: fb:14:cf:03:bb:b9:22:fc:3f:45:6a:ab:43:93:f7: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B4:E3:B0:4F:A9:E5:7F:B2:6E:86:D5:DF:84:0F:B5:64:A2:94:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41ae3939-3473-3fde-bcea-6527e89f3587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:af:02:da:6e:22:09:0d:59:1e:51:9c:2f:47:d9:da:55:aa: 7a:1d:ea:4f:3a:3d:7a:e6:e5:97:be:b4:fd:3a:59:1a:8e:1a: a7:7b:be:61:6e:23:c4:f6:ea:c0:19:c3:6c:cf:6f:ca:91:b7: fe:59:1d:5e:bf:13:ae:8f:3a:4a:03:36:a8:59:be:09:b1:85: e2:db:18:8d:3d:04:21:7b:cf:f1:fc:33:f3:c6:0d:34:52:13: c3:01:a8:cb:2a:72:7b:9a:fd:60:19:77:b8:56:da:e1:e5:8e: 22:58:9f:28:70:a5:e9:e8:12:e4:94:79:45:fb:02:0e:3b:6c: 28:78:77:72:8d:6e:98:83:07:40:f8:90:6f:be:1a:e5:c2:3b: b7:4d:39:63:c2:df:04:d5:8e:62:ce:c7:5e:53:ba:c0:a2:6b: 33:e9:76:01:39:68:e1:09:23:df:5a:2f:77:e0:c5:48:88:84: 90:c4:be:93:9f:83:06:35:11:30:f4:35:c8:42:b6:49:ea:b5: 04:87:4d:59:40:d7:04:79:3c:bb:69:73:b3:12:a7:25:2f:70: 5d:70:64:37:b4:b7:0d:56:96:ed:cd:35:48:92:be:6b:82:af: 3c:2b:24:30:e8:5d:0b:28:d6:94:51:76:93:68:17:46:c3:ab: cf:cf:cb:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+mS2q8qVaySsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDc1YTg5N2YtMmNkYS00N2MwLWJiMDctMjBkMjY5ODY3ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+z7G8CkA6bzgH+1NFpF/XbE6ic7Ml2qn8Br yYOrmzHRy2uBCzd16C938Ks3d0APvX6FYB64rp9j443zfSlPg1nQGbxS+ihoVshP s4jKbiInGulj0gacDOZNXss5ORcamR5LqHQUmxCGWWmk5KYJJ1v9w1QxwcGaGwnQ 4AtEeVESYZwI0EzKsvU5igeRDP4IuIQIQtKZylVSBJUO8Ee5i5VIs8nxl3b4mXi2 TNf63uNy5uUT7n0EOjZplsUA6wDJOc4TqqgslS37lwbTgInIcaw87UJPJWz+KMYZ NVm6s7eJbIulLxWg5i6WeOlGbOn7FM8Du7ki/D9FaqtDk/fG6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq047BPqeV/sm6G1d+ED7VkopTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDFhZTM5MzktMzQ3My0z ZmRlLWJjZWEtNjUyN2U4OWYzNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6vAtpuIgkNWR5RnC9H2dpVqnod6k86PXrm5Ze+tP06WRqOGqd7vmFu I8T26sAZw2zPb8qRt/5ZHV6/E66POkoDNqhZvgmxheLbGI09BCF7z/H8M/PGDTRS E8MBqMsqcnua/WAZd7hW2uHljiJYnyhwpenoEuSUeUX7Ag47bCh4d3KNbpiDB0D4 kG++GuXCO7dNOWPC3wTVjmLOx15TusCiazPpdgE5aOEJI99aL3fgxUiIhJDEvpOf gwY1ETD0NchCtknqtQSHTVlA1wR5PLtpc7MSpyUvcF1wZDe0tw1Wlu3NNUiSvmuC rzwrJDDoXQso1pRRdpNoF0bDq8/Py1k= -----END CERTIFICATE-----Generated at Tue Oct 21 22:17:55 2025 by rpki-client