$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/816b3c2c-b392-3bbc-be64-be5fbb6618e5.roa File: 816b3c2c-b392-3bbc-be64-be5fbb6618e5.roa (raw, json) Hash identifier: y8GVxbLc/Q9LcwbwRIrcCmDFNRHXLMpjn3MDTYgR65A= Subject key identifier: 04:C0:AB:7E:5B:3E:44:B4:42:16:F3:3C:6C:13:B5:D5:2B:05:4D:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7EA5EA4874B805E65B540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/816b3c2c-b392-3bbc-be64-be5fbb6618e5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 174.169.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ea:5e:a4:87:4b:80:5e:65:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7d84c3e2-439d-4387-80d7-26bac156ee74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:f7:02:1c:26:72:65:6e:5d:b0:2d:ed:cd: cc:6a:bb:ad:09:b6:62:13:2b:2a:fb:f9:72:5f:59: e9:41:0a:02:44:8b:bc:ab:ec:75:aa:1d:1f:99:e4: a0:72:95:84:5f:ef:10:6d:fa:ef:06:9b:21:7e:68: ba:b7:bb:39:fb:18:7f:d4:9a:cb:8c:df:34:3c:d1: d4:16:27:ca:e2:03:cc:22:73:be:0b:59:c9:dc:91: 54:78:21:38:ac:9c:e0:72:cc:3c:46:ac:8d:5e:59: 97:6c:fe:80:bf:b1:65:8a:ae:4e:9e:34:2a:70:aa: f0:fd:5f:2c:d4:fb:a7:9e:ca:c9:98:5f:29:0a:bc: 95:fb:d8:4c:46:af:e3:5c:37:8c:72:4a:81:46:83: a8:37:8b:d2:ef:84:98:19:2e:5b:ad:ed:38:4e:f3: b8:b7:1c:7c:7c:70:26:78:45:4c:a1:b9:6b:dd:40: 5b:41:12:f0:af:42:c6:a8:07:ed:a7:76:43:77:a2: 8c:f4:54:a0:cb:cb:00:0b:d5:ea:62:68:65:74:f8: 7a:68:05:24:a8:f5:de:0f:d1:fb:c3:26:7d:87:0c: 0c:49:08:f4:7c:5a:ad:82:46:40:48:af:ba:a6:04: 64:f4:36:05:d8:5a:46:6f:1d:a4:7a:a4:5b:df:69: 0c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:AB:7E:5B:3E:44:B4:42:16:F3:3C:6C:13:B5:D5:2B:05:4D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/816b3c2c-b392-3bbc-be64-be5fbb6618e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2a:de:38:11:43:12:14:7f:c1:66:fd:23:66:93:11:63:15: 30:88:f9:54:a4:8f:3b:b1:41:79:6f:2d:da:85:34:f9:66:9e: 87:60:c7:a5:4d:4f:c4:10:d1:75:d4:40:31:57:f7:23:16:f9: 11:fe:f0:9f:11:cd:e1:58:2e:6d:fc:fd:9d:72:97:d3:20:67: b7:9d:02:cc:12:9f:64:b4:7f:fe:fe:2a:cb:f0:33:c7:f2:4b: 12:b7:ef:f3:1f:34:57:b2:c8:4b:55:3f:03:f2:b1:78:77:bc: d9:40:7b:b0:21:c8:ca:f3:ac:48:9c:c6:e1:ed:ef:57:2e:66: 61:4d:52:b8:e6:45:c0:b4:f5:77:74:ab:11:b6:07:b2:bc:ae: 48:b2:c0:16:59:20:98:31:52:b3:b5:64:4d:83:ed:78:58:33: 81:24:08:e6:ec:6c:4f:58:8c:75:27:0f:be:00:bd:64:41:72: 7c:2f:87:be:72:84:68:0b:fe:70:70:79:44:98:51:5e:94:d4: 8a:db:bf:31:49:f9:5c:0b:47:cd:97:02:88:33:d7:e3:c6:a9: a3:9b:55:c0:ea:c2:41:db:35:d0:37:c2:3a:3d:b7:db:f5:4e: 43:72:98:c9:10:99:76:5e:02:e0:c3:bb:f7:97:ab:37:6d:c5: b1:66:a2:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+pepIdLgF5ltUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2Q4NGMzZTItNDM5ZC00Mzg3LTgwZDctMjZiYWMxNTZlZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3L3AhwmcmVuXbAt7c3MarutCbZiEysq+/ly X1npQQoCRIu8q+x1qh0fmeSgcpWEX+8QbfrvBpshfmi6t7s5+xh/1JrLjN80PNHU FifK4gPMInO+C1nJ3JFUeCE4rJzgcsw8RqyNXlmXbP6Av7Fliq5OnjQqcKrw/V8s 1PunnsrJmF8pCryV+9hMRq/jXDeMckqBRoOoN4vS74SYGS5bre04TvO4txx8fHAm eEVMoblr3UBbQRLwr0LGqAftp3ZDd6KM9FSgy8sAC9XqYmhldPh6aAUkqPXeD9H7 wyZ9hwwMSQj0fFqtgkZASK+6pgRk9DYF2FpGbx2keqRb32kMCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATAq35bPkS0QhbzPGwTtdUrBU3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE2YjNjMmMtYjM5Mi0z YmJjLWJlNjQtYmU1ZmJiNjYxOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQq3jgRQxIUf8Fm/SNmkxFjFTCI+VSkjzuxQXlvLdqFNPlmnodgx6VN T8QQ0XXUQDFX9yMW+RH+8J8RzeFYLm38/Z1yl9MgZ7edAswSn2S0f/7+KsvwM8fy SxK37/MfNFeyyEtVPwPysXh3vNlAe7AhyMrzrEicxuHt71cuZmFNUrjmRcC09Xd0 qxG2B7K8rkiywBZZIJgxUrO1ZE2D7XhYM4EkCObsbE9YjHUnD74AvWRBcnwvh75y hGgL/nBweUSYUV6U1IrbvzFJ+VwLR82XAogz1+PGqaObVcDqwkHbNdA3wjo9t9v1 TkNymMkQmXZeAuDDu/eXqzdtxbFmouk= -----END CERTIFICATE-----Generated at Wed Oct 22 02:37:40 2025 by rpki-client