$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b0d8271-c6c0-351a-8828-131c9d12b822.roa File: 0b0d8271-c6c0-351a-8828-131c9d12b822.roa (raw, json) Hash identifier: +DTHNc8KiYSO/SWf5aH5lvwVirSM3WvJlJjU+g+o09Q= Subject key identifier: 8C:C2:82:B7:3F:5A:91:92:07:E0:1C:0F:C5:F7:FA:57:D4:98:27:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8FEE4F04BC8B723A87CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b0d8271-c6c0-351a-8828-131c9d12b822.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 174.170.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:fe:e4:f0:4b:c8:b7:23:a8:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e948b54c-ba5f-448f-8984-efe155c199fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:b7:9f:60:60:0c:59:3b:5d:96:1b:d1:a5: bd:93:79:d8:be:04:01:81:a8:a5:c3:2a:62:fe:24: e4:bd:9c:12:f8:a4:ff:79:38:c6:56:cf:4e:10:2d: 91:8d:35:f9:af:74:be:df:07:a6:7e:d5:3c:fe:1b: ad:fe:e4:b4:61:34:b2:36:21:19:5c:63:00:cb:ea: b4:cc:56:92:09:b5:00:0b:bb:73:3d:b1:ed:78:e3: 35:d8:cc:60:47:47:de:8e:59:3b:38:5f:35:88:b6: c7:0b:37:02:a8:37:34:ef:bc:6d:01:95:ff:8e:54: 00:be:48:e4:4b:be:0e:e3:2a:33:78:a9:a3:2d:3e: a1:0e:b0:29:24:e9:3b:0e:f7:80:f6:a5:58:2b:e2: 2e:52:e8:fb:18:d9:8c:24:12:e7:d9:31:c5:8d:4e: ab:24:83:b2:07:2d:72:de:9d:1e:0a:ea:4f:e6:28: 3e:8c:36:ac:53:4e:30:63:76:7b:f6:db:f2:9b:74: 5d:af:38:f0:69:ed:a9:72:51:bc:9b:2c:50:69:a3: de:7e:06:58:05:3f:d8:f0:a9:b9:73:47:67:c4:98: aa:d9:22:c2:81:e6:1f:47:79:8f:0f:79:f3:ad:73: 62:fa:ad:86:bd:c2:72:e1:6e:f1:14:a6:af:63:0a: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:82:B7:3F:5A:91:92:07:E0:1C:0F:C5:F7:FA:57:D4:98:27:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b0d8271-c6c0-351a-8828-131c9d12b822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:32:77:52:d9:ec:3d:a3:82:3c:c0:2b:e3:b6:ad:07:8e:5f: eb:09:b5:b8:b2:3d:37:4f:aa:dc:55:e2:1f:03:eb:70:19:15: dd:ff:db:20:24:37:b9:30:6a:98:a4:fe:4f:08:17:51:18:e6: 12:f2:3f:20:7a:99:46:f3:37:f7:ba:a8:8f:d9:6a:af:c4:4d: 93:cf:aa:b6:f2:58:03:0c:9e:59:20:46:48:63:14:36:b4:1d: 03:5c:b4:95:26:68:ac:b7:d7:79:ec:fe:71:fa:2f:39:d0:d2: 3f:1b:43:63:9e:c3:c2:d8:a6:08:54:58:33:e1:71:8e:da:72: 3c:48:4e:c5:68:2c:6c:f8:c9:23:6d:d1:d7:45:10:f6:e1:6d: 62:d7:18:e2:8b:b3:2d:60:39:4c:64:4c:d0:3e:31:91:02:bf: 78:fa:52:11:a2:97:0c:51:eb:75:07:e5:4b:36:b7:74:88:71: c1:89:6e:58:c0:99:99:e9:85:78:f5:f2:1c:9f:7b:89:c5:66: 1f:22:10:67:a2:bd:6e:7c:2d:e6:ba:17:dc:54:68:46:4b:98: b2:6f:09:01:25:eb:4d:02:bf:1b:66:cc:67:d3:61:f4:78:cd: 3e:7f:e1:bd:7e:b4:73:71:bd:04:8d:1f:c3:e5:7d:6b:f2:ad: e4:37:d2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqP7k8EvItyOofMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTk0OGI1NGMtYmE1Zi00NDhmLTg5ODQtZWZlMTU1YzE5OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEa3n2BgDFk7XZYb0aW9k3nYvgQBgailwypi /iTkvZwS+KT/eTjGVs9OEC2RjTX5r3S+3wemftU8/hut/uS0YTSyNiEZXGMAy+q0 zFaSCbUAC7tzPbHteOM12MxgR0fejlk7OF81iLbHCzcCqDc077xtAZX/jlQAvkjk S74O4yozeKmjLT6hDrApJOk7DveA9qVYK+IuUuj7GNmMJBLn2THFjU6rJIOyBy1y 3p0eCupP5ig+jDasU04wY3Z79tvym3Rdrzjwae2pclG8myxQaaPefgZYBT/Y8Km5 c0dnxJiq2SLCgeYfR3mPD3nzrXNi+q2GvcJy4W7xFKavYwq/7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzCgrc/WpGSB+AcD8X3+lfUmCffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGIwZDgyNzEtYzZjMC0z NTFhLTg4MjgtMTMxYzlkMTJiODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQyd1LZ7D2jgjzAK+O2rQeOX+sJtbiyPTdPqtxV4h8D63AZFd3/2yAk N7kwapik/k8IF1EY5hLyPyB6mUbzN/e6qI/Zaq/ETZPPqrbyWAMMnlkgRkhjFDa0 HQNctJUmaKy313ns/nH6LznQ0j8bQ2Oew8LYpghUWDPhcY7acjxITsVoLGz4ySNt 0ddFEPbhbWLXGOKLsy1gOUxkTNA+MZECv3j6UhGilwxR63UH5Us2t3SIccGJbljA mZnphXj18hyfe4nFZh8iEGeivW58Lea6F9xUaEZLmLJvCQEl600CvxtmzGfTYfR4 zT5/4b1+tHNxvQSNH8PlfWvyreQ30ms= -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:10 2025 by rpki-client