$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a138dd9c-6c57-3400-b784-16498c74dbe1.roa File: a138dd9c-6c57-3400-b784-16498c74dbe1.roa (raw, json) Hash identifier: G2fTLMVEWlsv1bvLk4HpQb5VcT0eco+/ORYp07/uR3Y= Subject key identifier: BE:18:53:7A:D6:03:E6:6C:92:23:28:40:FF:CC:85:F8:BC:CC:D6:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7EA2BB20EA271E1729A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a138dd9c-6c57-3400-b784-16498c74dbe1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 174.169.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ea:2b:b2:0e:a2:71:e1:72:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6613cfff-6d41-45d0-9ceb-4f5740ed8976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:5c:80:ce:c3:73:41:c4:4c:5d:f7:45:15: 88:cb:bb:03:aa:9c:83:f5:0b:58:ef:34:ea:0d:16: b3:5c:6b:9a:27:c1:86:bd:5c:e9:1a:d3:94:c6:29: 63:19:8b:ff:0f:54:12:ae:81:14:d8:8f:71:93:31: e0:5a:91:17:ab:d0:d7:be:fb:12:c6:fa:e4:24:b1: 31:8b:64:29:6a:f9:28:bb:50:c1:85:5a:8d:7f:40: d1:c6:84:2f:04:4d:91:00:64:8e:c9:f9:2f:4c:7d: ea:5c:dc:27:72:4b:52:ea:ec:04:0a:f6:de:c4:08: eb:48:70:42:cb:cf:8a:ad:e8:2d:11:d6:92:65:12: b2:cf:b3:0d:f3:6c:ca:a8:a0:16:d5:b9:4e:d6:8f: 2b:96:d2:8c:23:d3:92:5e:fc:7e:19:4a:09:de:84: 4c:b3:3c:12:79:cd:80:8f:d4:37:a9:1d:52:2c:59: f4:4f:59:20:7b:2c:11:6e:3f:2b:4e:26:00:1e:dc: 54:99:27:0d:8c:90:82:3b:19:fa:b1:77:52:68:22: c7:49:f7:08:af:c3:73:fa:75:db:90:58:f4:24:c3: ff:70:09:fe:54:17:8d:cf:a9:29:e5:28:0f:0d:28: 0f:09:d6:56:95:21:af:74:9b:87:75:39:f6:4a:55: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:18:53:7A:D6:03:E6:6C:92:23:28:40:FF:CC:85:F8:BC:CC:D6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a138dd9c-6c57-3400-b784-16498c74dbe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:41:72:b7:77:bc:86:07:e8:a6:16:90:0c:92:ed:a6:0f:69: 29:e7:35:94:ba:40:14:a8:e4:48:98:06:9f:2e:76:c5:c7:99: dc:c5:51:78:da:42:55:1b:66:60:be:ee:ac:aa:40:a3:0e:7d: ea:30:63:64:53:cc:23:0b:35:a1:c8:d7:97:8c:7e:85:17:bc: 2b:a7:59:a5:fa:8e:33:88:c2:92:49:29:35:7a:18:59:2f:17: 51:4c:7a:34:c7:32:75:b8:e6:aa:e1:9a:27:da:24:08:04:66: 5b:40:a7:85:3e:98:f0:ff:11:cf:cc:33:fd:36:38:18:87:f9: 6b:02:40:d3:ac:9a:e7:13:88:9f:a9:a7:a3:f2:97:82:2a:d8: 5a:93:e7:6e:66:bf:18:6c:2c:da:4b:29:e3:e9:e4:e5:f0:66: ba:ec:13:cb:b9:5d:3e:b2:bf:40:f0:7b:92:49:6c:47:2c:db: 17:11:dd:3c:91:ca:28:75:d7:cc:29:74:3e:91:3c:fb:d0:2d: 8a:32:0d:2e:85:bc:cb:7a:27:b1:b9:0a:26:cf:4c:07:88:f1: 1a:13:81:18:69:88:e4:88:aa:f3:6c:fe:67:57:88:54:13:32: 30:32:8b:87:64:7a:09:7c:4f:09:ad:a8:b5:c3:02:d6:1d:de: 26:b1:8f:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+orsg6iceFymkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjYxM2NmZmYtNmQ0MS00NWQwLTljZWItNGY1NzQwZWQ4OTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsVcgM7Dc0HETF33RRWIy7sDqpyD9QtY7zTq DRazXGuaJ8GGvVzpGtOUxiljGYv/D1QSroEU2I9xkzHgWpEXq9DXvvsSxvrkJLEx i2Qpavkou1DBhVqNf0DRxoQvBE2RAGSOyfkvTH3qXNwncktS6uwECvbexAjrSHBC y8+KregtEdaSZRKyz7MN82zKqKAW1blO1o8rltKMI9OSXvx+GUoJ3oRMszwSec2A j9Q3qR1SLFn0T1kgeywRbj8rTiYAHtxUmScNjJCCOxn6sXdSaCLHSfcIr8Nz+nXb kFj0JMP/cAn+VBeNz6kp5SgPDSgPCdZWlSGvdJuHdTn2SlUh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4YU3rWA+ZskiMoQP/Mhfi8zNbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTEzOGRkOWMtNmM1Ny0z NDAwLWI3ODQtMTY0OThjNzRkYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqm6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNBcrd3vIYH6KYWkAyS7aYPaSnnNZS6QBSo5EiYBp8udsXHmdzFUXja QlUbZmC+7qyqQKMOfeowY2RTzCMLNaHI15eMfoUXvCunWaX6jjOIwpJJKTV6GFkv F1FMejTHMnW45qrhmifaJAgEZltAp4U+mPD/Ec/MM/02OBiH+WsCQNOsmucTiJ+p p6Pyl4Iq2FqT525mvxhsLNpLKePp5OXwZrrsE8u5XT6yv0Dwe5JJbEcs2xcR3TyR yih118wpdD6RPPvQLYoyDS6FvMt6J7G5CibPTAeI8RoTgRhpiOSIqvNs/mdXiFQT MjAyi4dkegl8TwmtqLXDAtYd3iaxj0Y= -----END CERTIFICATE-----Generated at Tue Oct 21 19:28:28 2025 by rpki-client