$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa File: d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa (raw, json) Hash identifier: 4S6GLC2YRws3IMpsAiGPoRF8/5NrV293S/yAI/vC21U= Subject key identifier: E3:D9:E4:57:2E:0E:A5:ED:47:FB:7B:D2:D1:9B:C0:8E:8F:B9:25:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7EB8D25D5BAD40C4556C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 174.169.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:eb:8d:25:d5:ba:d4:0c:45:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7167d470-be52-4f62-8230-bdd5a529da67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:ab:f4:83:26:b1:de:d6:d4:55:67:bf:02: 8d:b4:e4:c9:ed:71:a2:98:20:9e:f1:7f:e6:b8:08: 81:79:0f:7d:2a:e6:59:44:b6:bd:a5:98:9a:45:1f: 1f:c6:e8:7f:1e:d4:64:71:4b:8e:ab:12:40:de:44: 94:81:1d:84:44:0f:4b:62:f0:9a:4b:61:2a:14:6e: 02:ae:6a:5d:a9:ab:81:0e:a7:c3:1e:58:34:3f:5c: a4:b9:03:eb:0f:76:cd:0d:90:47:19:96:c4:c6:64: 57:c7:51:8d:79:99:3f:c0:b7:3e:60:0b:86:6b:f9: 34:e0:59:e8:a2:a0:08:7d:4d:0b:48:39:9c:5b:97: 70:07:6a:4f:41:93:c5:62:f3:12:5e:b3:c5:f3:c6: cc:01:d4:93:d9:8a:8f:0d:e7:07:27:41:28:6b:b4: 2a:c6:4a:89:ea:4b:2a:85:ef:e7:97:10:ac:a0:06: 47:76:6b:8b:5e:78:2a:5f:a8:ba:9e:0e:e1:92:05: 9e:f7:bc:e9:8c:2d:e1:3e:f3:29:72:c0:ce:be:cb: 53:cf:5c:3e:90:85:4f:29:28:3a:35:71:be:13:2b: 66:93:87:0f:45:bc:57:d9:c4:66:d2:75:e0:54:cf: ce:2f:4d:de:61:c5:9c:b2:bb:7f:e2:a0:67:af:fa: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:E4:57:2E:0E:A5:ED:47:FB:7B:D2:D1:9B:C0:8E:8F:B9:25:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:aa:8c:0f:7d:72:9a:f2:1c:f3:10:03:99:e5:06:87:8a:2f: 90:74:fa:9f:47:a2:c2:ee:fb:e2:6d:6c:d2:9b:cc:f5:58:dc: 41:8e:cc:4e:bc:0e:b3:e3:72:5a:72:77:bc:78:ab:25:0b:00: 69:02:38:da:03:8d:d8:10:e1:55:7b:ac:ae:27:e7:68:df:18: f2:0e:03:b4:e5:13:9c:02:37:e5:7c:f0:dd:23:c5:03:91:2a: 2e:ae:cd:2e:16:07:7a:23:f4:9b:b1:a9:b2:31:77:bc:6f:2b: e7:9f:8b:02:60:cf:0f:5a:af:2e:40:8b:f1:85:2a:39:33:a9: 24:c1:9b:48:81:b9:d0:cf:e3:5d:d6:de:12:81:1b:38:9f:93: ed:39:4a:88:ec:00:0f:c8:03:74:6f:db:aa:e5:05:75:f5:18: b6:12:96:cc:c1:8e:e6:65:ee:db:19:cc:19:93:31:cd:fe:a7: 65:6d:6e:b1:f5:8c:ab:57:0c:71:9e:bc:5d:c9:19:62:86:07: 62:a8:b0:10:b1:c9:aa:c5:1e:13:1b:35:80:61:f8:c3:ff:e9: f6:5c:3e:c1:52:3c:b2:31:76:a7:70:36:79:a8:7a:2b:79:1a: a3:6c:74:bf:d6:ca:2d:23:27:3b:f2:ea:56:cd:8c:d2:96:74: 7c:3f:11:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+uNJdW61AxFVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzE2N2Q0NzAtYmU1Mi00ZjYyLTgyMzAtYmRkNWE1MjlkYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUar9IMmsd7W1FVnvwKNtOTJ7XGimCCe8X/m uAiBeQ99KuZZRLa9pZiaRR8fxuh/HtRkcUuOqxJA3kSUgR2ERA9LYvCaS2EqFG4C rmpdqauBDqfDHlg0P1ykuQPrD3bNDZBHGZbExmRXx1GNeZk/wLc+YAuGa/k04Fno oqAIfU0LSDmcW5dwB2pPQZPFYvMSXrPF88bMAdST2YqPDecHJ0Eoa7QqxkqJ6ksq he/nlxCsoAZHdmuLXngqX6i6ng7hkgWe97zpjC3hPvMpcsDOvstTz1w+kIVPKSg6 NXG+Eytmk4cPRbxX2cRm0nXgVM/OL03eYcWcsrt/4qBnr/q+XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPZ5FcuDqXtR/t70tGbwI6PuSUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDM4YzYxMGItNDY0ZC0z YzYyLThmMGEtOTllOTBjMGY1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiqjA99cpryHPMQA5nlBoeKL5B0+p9HosLu++JtbNKbzPVY3EGOzE68 DrPjclpyd7x4qyULAGkCONoDjdgQ4VV7rK4n52jfGPIOA7TlE5wCN+V88N0jxQOR Ki6uzS4WB3oj9JuxqbIxd7xvK+efiwJgzw9ary5Ai/GFKjkzqSTBm0iBudDP413W 3hKBGzifk+05SojsAA/IA3Rv26rlBXX1GLYSlszBjuZl7tsZzBmTMc3+p2VtbrH1 jKtXDHGevF3JGWKGB2KosBCxyarFHhMbNYBh+MP/6fZcPsFSPLIxdqdwNnmoeit5 GqNsdL/Wyi0jJzvy6lbNjNKWdHw/EYs= -----END CERTIFICATE-----Generated at Tue Oct 21 21:39:46 2025 by rpki-client