$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa File: 4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa (raw, json) Hash identifier: 0YlTXBfAVHP7cq7mlhTUXsn5EkIwGNB13ulwzXd0YtY= Subject key identifier: 93:BC:C2:F1:5B:AE:15:11:18:26:F1:C1:48:C1:B6:07:DE:4E:49:26 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0746C289B8A2DC1D83631E80 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 394285 IP address blocks: 174.137.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c2:89:b8:a2:dc:1d:83:63:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=33fa752d-57de-4895-91e2-0ab3d50a0bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:e8:8d:e0:c2:a2:25:d7:df:fd:9c:3f:1f: 12:af:62:45:ab:02:4a:29:03:1b:3c:df:1a:ef:28: 05:e9:3c:81:55:fe:c5:be:b5:ee:09:ee:af:65:6a: a4:d8:fe:ea:7c:15:7e:e2:22:fb:fe:0b:0b:ef:95: 0d:36:d0:1f:4a:31:b3:0d:9a:76:99:4f:88:42:2a: 1f:5b:c3:7f:0a:3f:7c:b0:d6:03:5e:ec:eb:a0:67: aa:b9:3e:4c:35:1b:f0:40:82:d4:db:2b:ba:e1:43: f7:58:64:37:e0:22:36:8e:5f:62:cb:f1:7f:60:09: ce:cc:1d:a2:62:86:95:a6:35:85:e8:ce:a1:80:8e: 93:4a:27:93:c6:38:e2:62:db:d5:70:96:5e:de:6b: ed:10:6d:7c:32:10:a6:5e:72:47:f5:65:5a:4f:c7: 14:c9:10:d7:2c:df:9a:f4:00:36:c1:95:0c:5d:e7: 99:f0:c7:e8:59:ba:1f:35:89:07:3a:a3:70:68:dc: 07:75:d7:47:7f:fe:23:56:f5:3a:a6:57:b9:94:b6: 09:17:3a:e7:bb:37:ed:48:04:88:05:43:b2:a1:af: ec:1d:d7:57:d8:af:d2:ee:02:86:f1:6f:51:b8:76: df:47:d4:e8:d9:9d:35:f2:67:bf:0d:66:36:dd:74: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BC:C2:F1:5B:AE:15:11:18:26:F1:C1:48:C1:B6:07:DE:4E:49:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:1a:41:fc:8b:7e:2f:b0:a4:6e:73:fb:ad:9b:d5:db:8d:a9: 85:08:13:b3:aa:ad:13:16:26:ea:d1:ac:d9:e2:cd:8f:61:61: b3:de:57:d4:b1:94:a3:14:17:9a:20:c5:dd:3c:05:43:93:1f: 16:98:04:76:31:54:6f:17:e3:9c:cf:08:46:f9:f9:b0:60:42: 78:f6:a9:ab:36:80:35:98:b7:d8:5f:82:12:53:97:5b:d8:8b: d3:4e:62:48:cf:85:eb:c4:17:2e:34:ef:10:d7:73:dc:87:26: da:57:3b:cd:fe:c2:ee:26:61:38:d6:eb:b9:bc:05:09:d8:af: c3:44:79:77:c5:0d:5e:13:fb:ee:e1:55:b2:ce:29:0a:1e:dd: c9:13:d6:ab:0d:2c:b8:60:d4:a1:60:72:04:2e:87:f1:9f:25: f3:fa:73:cd:d2:f8:2d:ee:4f:2d:d7:1d:30:d3:1c:15:de:47: 68:ca:e1:78:da:75:96:12:b3:85:3b:a1:50:96:34:96:fd:a0: ec:d8:d5:ec:03:04:ec:ba:d2:6a:0f:a4:02:e9:c6:19:cf:1f: 49:83:15:fc:7d:58:85:d1:8e:49:a6:b2:d2:14:66:92:9a:a2: d2:da:fb:a9:b2:a1:57:ff:e9:33:d1:1c:1d:a2:f3:fc:3f:ba: 6b:01:26:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsKJuKLcHYNjHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzNmYTc1MmQtNTdkZS00ODk1LTkxZTItMGFiM2Q1MGEwYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpTojeDCoiXX3/2cPx8Sr2JFqwJKKQMbPN8a 7ygF6TyBVf7FvrXuCe6vZWqk2P7qfBV+4iL7/gsL75UNNtAfSjGzDZp2mU+IQiof W8N/Cj98sNYDXuzroGequT5MNRvwQILU2yu64UP3WGQ34CI2jl9iy/F/YAnOzB2i YoaVpjWF6M6hgI6TSieTxjjiYtvVcJZe3mvtEG18MhCmXnJH9WVaT8cUyRDXLN+a 9AA2wZUMXeeZ8MfoWbofNYkHOqNwaNwHdddHf/4jVvU6ple5lLYJFzrnuzftSASI BUOyoa/sHddX2K/S7gKG8W9RuHbfR9To2Z018me/DWY23XQOWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO8wvFbrhURGCbxwUjBtgfeTkkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNGVhOGJjMjUtZDU5ZC0z ZWU2LWE2YWEtMmQwNzQ1Y2EwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArollMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYaQfyLfi+wpG5z+62b1duNqYUIE7OqrRMWJurRrNnizY9hYbPeV9Sx lKMUF5ogxd08BUOTHxaYBHYxVG8X45zPCEb5+bBgQnj2qas2gDWYt9hfghJTl1vY i9NOYkjPhevEFy407xDXc9yHJtpXO83+wu4mYTjW67m8BQnYr8NEeXfFDV4T++7h VbLOKQoe3ckT1qsNLLhg1KFgcgQuh/GfJfP6c83S+C3uTy3XHTDTHBXeR2jK4Xja dZYSs4U7oVCWNJb9oOzY1ewDBOy60moPpALpxhnPH0mDFfx9WIXRjkmmstIUZpKa otLa+6myoVf/6TPRHB2i8/w/umsBJhw= -----END CERTIFICATE-----Generated at Fri Sep 19 12:44:30 2025 by rpki-client