$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b707ed01-ec3f-39b8-aa58-037f5f34f0e1.roa File: b707ed01-ec3f-39b8-aa58-037f5f34f0e1.roa (raw, json) Hash identifier: EjQQMRLSyoXzCuRJjk+kGxBPAhvHsiwNlDa6yB/E6bQ= Subject key identifier: 90:94:8F:02:1F:69:29:F2:C7:C3:98:D2:3E:92:FC:DF:D4:15:37:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A900EDE3E984142D1346C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b707ed01-ec3f-39b8-aa58-037f5f34f0e1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 174.171.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:00:ed:e3:e9:84:14:2d:13:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=22507c99-759c-4ba0-83d4-800cd92592c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:34:8f:c8:c6:84:21:a2:f0:f7:61:34:02:70: e0:0a:88:05:78:28:83:d6:58:12:16:05:a9:9e:7f: 57:f6:d4:91:8a:86:5a:15:57:95:d9:d6:3c:08:d5: 88:36:93:92:bc:c6:08:80:9d:9b:c9:e5:e2:4a:11: 56:dd:3b:06:6e:a0:e5:67:9e:79:27:1f:8e:eb:ca: b0:14:ea:dd:d3:a8:18:5f:b1:d2:45:e1:ec:a1:b5: 06:6b:0e:64:e2:6a:42:59:7a:c8:b9:4c:51:a2:97: 73:88:10:bd:9a:e7:98:7e:12:83:63:4c:c2:f8:31: 0b:bd:69:d8:ed:c2:a5:64:ca:8c:45:00:71:65:75: 62:bf:b4:27:d2:8e:90:34:29:37:cc:46:54:92:72: 20:80:9f:0d:93:48:b5:1f:a7:ea:e7:1e:a2:5b:cf: 01:54:97:f9:3f:20:6a:8a:f4:30:b0:17:bb:23:cd: 19:fa:b5:8c:45:29:54:0f:eb:32:6c:f7:59:0b:11: f3:06:e7:e3:bf:4b:1d:6f:19:30:cf:71:b6:ae:a4: 1a:d3:03:aa:1a:a8:6a:c3:a3:a1:bf:7d:82:7a:24: af:10:cd:1a:04:e7:43:71:2e:bc:5e:1c:1e:c2:0f: 5f:2f:0e:c1:e3:1f:b9:04:5a:b1:ab:4e:3e:d0:9e: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:94:8F:02:1F:69:29:F2:C7:C3:98:D2:3E:92:FC:DF:D4:15:37:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b707ed01-ec3f-39b8-aa58-037f5f34f0e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d7:3e:5a:0a:cc:e0:00:59:8b:a8:d0:c9:67:15:76:73:c6: de:7c:4b:68:00:9a:76:5f:30:f0:d8:d1:c1:db:c6:8b:ec:00: ae:30:66:e9:c8:5c:a3:7b:97:ce:69:b7:2f:8a:08:bb:e2:3b: bd:3e:b7:65:9f:52:e2:54:a2:01:d7:fe:89:0b:da:2f:74:ec: eb:8c:a1:6a:f6:ac:c0:c5:a0:35:fb:3e:8c:c1:90:65:8c:98: 20:67:8e:08:6b:06:69:5c:be:ff:ae:de:eb:27:6c:0f:1b:c3: 47:60:17:ff:ed:82:5e:08:1c:04:59:b4:69:40:b8:f9:89:83: bf:35:bf:c0:eb:14:91:e7:32:05:c2:8d:6a:5e:41:24:36:2f: 81:82:0e:99:4b:06:ca:af:c5:6a:5e:23:16:e1:81:f2:0f:28: 69:71:2c:6a:b3:39:b9:8f:e1:e9:a9:1f:f4:41:23:4a:e7:2c: 9f:45:1c:1c:4e:4c:86:bc:1a:4e:82:2f:49:bc:28:03:35:5e: 20:30:96:5b:b5:23:98:5d:8c:8f:44:e7:d2:af:03:cf:e7:e2: e8:7b:8c:fa:8a:a7:0f:9c:ac:12:50:85:35:77:6b:14:bd:bc: 17:aa:cd:b6:91:f1:06:da:e3:7d:b4:68:3a:a7:4f:f7:b4:42: 6d:9c:08:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqQDt4+mEFC0TRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjI1MDdjOTktNzU5Yy00YmEwLTgzZDQtODAwY2Q5MjU5MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijSPyMaEIaLw92E0AnDgCogFeCiD1lgSFgWp nn9X9tSRioZaFVeV2dY8CNWINpOSvMYIgJ2byeXiShFW3TsGbqDlZ555Jx+O68qw FOrd06gYX7HSReHsobUGaw5k4mpCWXrIuUxRopdziBC9mueYfhKDY0zC+DELvWnY 7cKlZMqMRQBxZXViv7Qn0o6QNCk3zEZUknIggJ8Nk0i1H6fq5x6iW88BVJf5PyBq ivQwsBe7I80Z+rWMRSlUD+sybPdZCxHzBufjv0sdbxkwz3G2rqQa0wOqGqhqw6Oh v32CeiSvEM0aBOdDcS68Xhwewg9fLw7B4x+5BFqxq04+0J7BHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCUjwIfaSnyx8OY0j6S/N/UFTcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjcwN2VkMDEtZWMzZi0z OWI4LWFhNTgtMDM3ZjVmMzRmMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqtMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInXPloKzOAAWYuo0MlnFXZzxt58S2gAmnZfMPDY0cHbxovsAK4wZunI XKN7l85pty+KCLviO70+t2WfUuJUogHX/okL2i907OuMoWr2rMDFoDX7PozBkGWM mCBnjghrBmlcvv+u3usnbA8bw0dgF//tgl4IHARZtGlAuPmJg781v8DrFJHnMgXC jWpeQSQ2L4GCDplLBsqvxWpeIxbhgfIPKGlxLGqzObmP4empH/RBI0rnLJ9FHBxO TIa8Gk6CL0m8KAM1XiAwllu1I5hdjI9E59KvA8/n4uh7jPqKpw+crBJQhTV3axS9 vBeqzbaR8Qba4320aDqnT/e0Qm2cCDo= -----END CERTIFICATE-----Generated at Tue Oct 21 19:18:03 2025 by rpki-client