$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4539af44-b1d7-3831-874b-da0f8ea61018.roa File: 4539af44-b1d7-3831-874b-da0f8ea61018.roa (raw, json) Hash identifier: OpmyOvHezwOLJzxy7J6zTGyvrlNSO8ljciqaLFG+nUg= Subject key identifier: B3:C5:93:A0:EC:18:DF:59:E4:4E:B9:AB:B7:77:01:71:71:4B:79:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9955FB9673573D61F0A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4539af44-b1d7-3831-874b-da0f8ea61018.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 174.168.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:95:5f:b9:67:35:73:d6:1f:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d860a6d3-024f-4b44-be63-bfd1e40e0f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:7d:b4:11:d6:ad:7b:21:04:d7:5a:8a:1b: da:3d:dc:e1:e7:4d:5c:36:01:e0:d8:e8:50:cc:6d: bc:af:c3:35:d3:4a:25:c6:93:27:4f:45:c6:55:8a: 58:7a:b5:01:55:4e:29:04:56:02:97:73:f0:aa:90: 84:34:c6:e1:10:cc:6f:61:62:ce:8f:7e:39:c6:7a: 48:73:55:f3:59:a9:b3:5f:ad:2f:74:9e:9b:7b:30: 28:cc:c2:66:9a:d1:63:9c:a7:dc:98:41:4b:aa:41: 71:9a:9e:f1:92:a5:3d:58:00:51:89:95:fc:c3:4d: da:6d:73:e4:da:18:48:66:52:61:92:50:30:c0:ad: df:d2:c1:80:ad:4e:3b:ac:5f:99:4c:86:cd:1f:2a: be:6c:ff:5d:73:dc:69:5c:89:69:10:f0:d1:b5:02: bc:98:5e:14:72:35:93:db:4a:db:86:0f:2c:a2:01: f4:76:b7:65:0a:51:94:71:28:d9:d7:8d:71:0c:84: 12:28:bd:50:b0:eb:99:0e:44:e3:26:0d:d2:ac:77: ca:6d:45:f0:80:48:52:ec:fe:a5:8f:a6:ba:c2:90: 41:a6:e4:9f:0d:e8:e4:28:f2:f1:f7:9f:3a:0b:62: 02:09:4c:70:54:c0:13:8a:c0:d0:44:80:1f:4b:fb: b0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C5:93:A0:EC:18:DF:59:E4:4E:B9:AB:B7:77:01:71:71:4B:79:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4539af44-b1d7-3831-874b-da0f8ea61018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:72:98:6b:30:05:ef:34:4b:36:b3:8d:71:de:0a:cf:a0:be: e1:78:20:bc:58:13:63:ff:b3:d2:cd:7f:60:7f:a8:f2:94:29: 72:90:42:34:bd:8e:fe:e0:0e:ac:a4:19:48:dc:47:92:f9:15: 06:52:b9:39:a5:79:57:0b:5a:3d:2e:fe:a1:99:f0:79:90:3e: a4:ce:f5:32:4d:56:8b:9b:2b:98:25:7e:80:36:11:8e:b8:26: 7f:ae:8a:f4:7f:b4:9b:a1:be:ca:bf:5a:2c:88:8d:02:84:22: 92:1d:d3:d9:0b:ff:02:6e:f5:8f:c8:05:94:4c:29:a4:75:04: 8c:14:36:60:d8:a4:00:8c:df:8c:ad:7f:93:36:cc:17:d4:53: 73:ce:cb:ed:4f:be:49:5f:a5:c9:89:a2:32:72:b6:ba:da:06: 1f:0b:95:ca:80:1d:54:d1:3e:d5:ed:25:16:ae:82:fa:b0:a4: 8f:0f:e6:9d:56:45:73:11:f6:ab:10:b9:d1:a2:62:d1:af:23: 72:b2:93:7f:3d:24:cf:fe:c4:1b:37:1a:2d:e7:fa:5c:2f:5b: b4:3e:90:f2:57:30:88:21:53:8a:4a:58:2b:78:96:17:e0:13: ab:46:00:6b:58:27:af:a0:34:36:28:c9:72:d6:39:62:aa:2b: a5:7f:18:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqZVfuWc1c9YfCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDg2MGE2ZDMtMDI0Zi00YjQ0LWJlNjMtYmZkMWU0MGUwZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy59tBHWrXshBNdaihvaPdzh501cNgHg2OhQ zG28r8M100olxpMnT0XGVYpYerUBVU4pBFYCl3PwqpCENMbhEMxvYWLOj345xnpI c1XzWamzX60vdJ6bezAozMJmmtFjnKfcmEFLqkFxmp7xkqU9WABRiZX8w03abXPk 2hhIZlJhklAwwK3f0sGArU47rF+ZTIbNHyq+bP9dc9xpXIlpEPDRtQK8mF4UcjWT 20rbhg8sogH0drdlClGUcSjZ141xDIQSKL1QsOuZDkTjJg3SrHfKbUXwgEhS7P6l j6a6wpBBpuSfDejkKPLx9586C2ICCUxwVMATisDQRIAfS/uwCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPFk6DsGN9Z5E65q7d3AXFxS3keMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDUzOWFmNDQtYjFkNy0z ODMxLTg3NGItZGEwZjhlYTYxMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5ymGswBe80SzazjXHeCs+gvuF4ILxYE2P/s9LNf2B/qPKUKXKQQjS9 jv7gDqykGUjcR5L5FQZSuTmleVcLWj0u/qGZ8HmQPqTO9TJNVoubK5glfoA2EY64 Jn+uivR/tJuhvsq/WiyIjQKEIpId09kL/wJu9Y/IBZRMKaR1BIwUNmDYpACM34yt f5M2zBfUU3POy+1PvklfpcmJojJytrraBh8LlcqAHVTRPtXtJRaugvqwpI8P5p1W RXMR9qsQudGiYtGvI3Kyk389JM/+xBs3Gi3n+lwvW7Q+kPJXMIghU4pKWCt4lhfg E6tGAGtYJ6+gNDYoyXLWOWKqK6V/GAc= -----END CERTIFICATE-----Generated at Tue Oct 21 19:45:44 2025 by rpki-client