$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa File: b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa (raw, json) Hash identifier: fNLkNU8SmjqqIobF/QRpiq1DGl+OAE1gqm4xjnm7Y9E= Subject key identifier: 97:8E:34:3C:D4:12:92:C3:BE:21:B6:9F:84:FF:56:00:9C:66:F2:71 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0B76AFCFF6FB8B541813E5C0 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394285 IP address blocks: 174.137.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:af:cf:f6:fb:8b:54:18:13:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=5d84c31b-fe7e-4eee-84fb-7d1c54bf23d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:c5:2f:22:4c:f4:1e:b4:13:0f:53:ec:6b: 57:38:42:96:f7:8b:a0:21:21:52:3d:c3:90:c9:bb: 89:f9:14:3c:24:0f:b2:47:8f:5f:36:eb:2f:61:92: ab:49:62:28:96:ea:6c:94:5c:5f:e3:9c:7d:b8:a9: 85:1f:a5:61:28:d9:0f:6c:00:1b:74:66:b2:cf:e9: f0:91:76:ec:15:4c:23:ff:31:b3:28:87:25:08:56: e2:33:c8:f1:0a:6b:8b:f7:a5:ab:58:c7:72:2f:53: f5:0a:c1:39:ff:85:b3:ca:52:d0:9e:2c:73:8d:67: f3:59:3d:c8:e7:77:0e:0b:2c:8d:68:14:9d:43:a1: a9:9f:b5:a6:76:f5:b3:8e:de:41:2f:1a:e8:54:6c: d8:5a:8c:5e:65:72:39:48:7d:90:48:16:5b:fd:c5: d5:0b:78:48:60:72:69:79:59:4a:ca:02:ad:b4:cc: 11:10:a4:c9:2d:b5:fe:b8:26:51:84:ca:01:44:38: 75:1d:41:85:24:5f:f0:cc:45:3d:48:40:ed:03:c2: 0f:4e:47:e3:7f:ba:0a:37:16:8d:ed:04:90:3e:f6: d9:67:f8:f3:72:4b:06:d3:2d:38:1f:3b:dc:94:a7: ae:1d:1c:03:1f:7e:31:7a:32:63:de:33:17:3a:09: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8E:34:3C:D4:12:92:C3:BE:21:B6:9F:84:FF:56:00:9C:66:F2:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2d:33:68:41:39:95:35:2d:ac:06:02:3a:11:15:30:f6:90: f8:24:b4:de:c4:58:40:f5:cc:81:45:4d:a1:2a:24:b6:d4:a1: ef:f8:20:7a:3c:90:6d:b7:91:46:79:c7:99:10:95:18:09:cc: 6e:f0:ee:dc:ae:84:45:9f:3e:ef:09:5e:0a:30:f6:a0:97:da: a2:b5:13:eb:09:fd:d8:9d:bb:f9:a1:c1:e5:25:78:dd:c3:65: 9c:08:3c:22:0a:c7:49:cd:a4:be:57:02:5f:ad:e8:d5:d2:95: 97:ad:cc:ac:f4:68:de:a6:e1:7f:ee:9e:57:c8:a2:0a:b8:66: 0f:5e:f9:ad:e1:da:56:f8:ac:b8:ec:ce:eb:4f:1c:75:81:42: 88:10:57:1f:61:b1:9b:71:6f:f3:32:66:44:87:c0:b4:e2:79: 9d:c2:af:d4:b4:7a:de:dd:0f:a8:c6:81:c7:50:f7:45:80:49: 5e:79:1a:71:1c:8a:1b:da:ae:a0:c4:b9:2e:cf:cf:11:73:10: 3f:67:48:0a:73:bc:9a:68:00:12:7e:77:78:2a:06:28:2a:02: bd:ad:f9:d8:58:d5:8c:36:0b:f7:02:5a:92:fd:9a:7e:53:eb: 29:4e:3c:14:ec:3c:f5:be:a0:6d:2d:b7:dc:13:e7:a7:05:00: 10:45:38:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq/P9vuLVBgT5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NWQ4NGMzMWItZmU3ZS00ZWVlLTg0ZmItN2QxYzU0YmYyM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbTFLyJM9B60Ew9T7GtXOEKW94ugISFSPcOQ ybuJ+RQ8JA+yR49fNusvYZKrSWIolupslFxf45x9uKmFH6VhKNkPbAAbdGayz+nw kXbsFUwj/zGzKIclCFbiM8jxCmuL96WrWMdyL1P1CsE5/4WzylLQnixzjWfzWT3I 53cOCyyNaBSdQ6Gpn7WmdvWzjt5BLxroVGzYWoxeZXI5SH2QSBZb/cXVC3hIYHJp eVlKygKttMwREKTJLbX+uCZRhMoBRDh1HUGFJF/wzEU9SEDtA8IPTkfjf7oKNxaN 7QSQPvbZZ/jzcksG0y04HzvclKeuHRwDH34xejJj3jMXOgnAPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeONDzUEpLDviG2n4T/VgCcZvJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvYjRlYmY0MmUtOGM2Yy0z N2Y1LWJmNDEtOWE4NDBiNDZkNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAtM2hBOZU1LawGAjoRFTD2kPgktN7EWED1zIFFTaEqJLbUoe/4IHo8 kG23kUZ5x5kQlRgJzG7w7tyuhEWfPu8JXgow9qCX2qK1E+sJ/didu/mhweUleN3D ZZwIPCIKx0nNpL5XAl+t6NXSlZetzKz0aN6m4X/unlfIogq4Zg9e+a3h2lb4rLjs zutPHHWBQogQVx9hsZtxb/MyZkSHwLTieZ3Cr9S0et7dD6jGgcdQ90WASV55GnEc ihvarqDEuS7PzxFzED9nSApzvJpoABJ+d3gqBigqAr2t+dhY1Yw2C/cCWpL9mn5T 6ylOPBTsPPW+oG0tt9wT56cFABBFOKA= -----END CERTIFICATE-----Generated at Fri Sep 19 11:01:21 2025 by rpki-client