$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/208d7cee-577b-3dea-8892-5cf77263c794.roa File: 208d7cee-577b-3dea-8892-5cf77263c794.roa (raw, json) Hash identifier: G7IKlmU5fEjMqZDKx1ExzEBnzsbWar8/urZ64S4gTXM= Subject key identifier: 50:C1:94:72:84:8E:DA:18:E4:FB:12:75:BE:25:FF:6B:3D:3E:8D:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C3EB1BCA9D6B16137D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/208d7cee-577b-3dea-8892-5cf77263c794.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 174.166.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c3:eb:1b:ca:9d:6b:16:13:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8315bc6a-3ffd-45d6-b46e-d91035ea21a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:a6:31:83:b4:ca:10:cd:29:4d:b7:3e:24: 60:42:58:81:af:f2:88:8f:52:3e:9b:a2:46:c5:7b: 60:b3:02:a4:5e:c0:e4:d7:fa:ad:5c:0f:38:e4:f5: 7a:e1:6c:77:69:93:a0:20:a9:8e:33:90:46:fb:ec: 31:fc:66:20:97:d1:f6:7c:3a:66:dd:1f:9a:48:6b: 11:ff:b6:ce:41:cb:1d:07:5a:6c:74:12:77:0f:71: fa:c1:64:63:01:6d:be:94:1e:a8:41:72:7d:6e:52: d6:cd:4d:bc:02:41:65:52:21:f8:be:91:55:a8:5e: 71:ae:bc:ba:bb:18:10:ed:b3:bb:c8:c2:42:f3:76: 5e:96:58:bb:8f:ad:d5:da:b6:20:66:b8:75:f3:39: 5b:31:18:2b:4b:87:e6:06:f8:92:2a:86:43:11:61: 41:4a:ee:f9:ae:96:a4:5e:16:e2:7b:01:0a:1a:78: ba:09:42:6f:6e:a1:8e:d6:c6:11:10:85:10:56:8f: 1e:7c:c9:e1:81:e8:5f:e9:eb:ec:45:52:9c:01:49: 3e:40:74:97:12:ca:25:6a:8b:b0:cc:ca:98:a4:df: 4d:ac:3d:18:fa:09:b3:6c:03:50:2a:f0:d8:bb:9b: 8a:0c:0a:3b:bd:17:4b:1d:79:23:14:05:eb:f3:18: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C1:94:72:84:8E:DA:18:E4:FB:12:75:BE:25:FF:6B:3D:3E:8D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/208d7cee-577b-3dea-8892-5cf77263c794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.166.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1a:37:bf:82:3b:c0:79:f3:f9:e1:6e:e8:6e:ea:6e:bf:1c: 70:a2:7e:15:4b:cb:4c:e9:83:63:8d:16:02:fa:b4:18:18:4f: 41:f6:9e:5a:12:12:56:32:d3:4f:ea:d6:8d:25:43:d0:07:a9: cd:dc:44:60:6a:63:2e:44:cd:49:56:ce:c1:67:eb:90:1e:e1: 08:0d:d3:a6:b8:e9:38:91:ce:6f:e9:55:4e:53:d3:11:a7:ed: 08:cc:24:d0:6f:49:a2:fe:a9:b3:8d:11:eb:a3:83:d5:c2:83: e5:0b:9e:ba:69:bc:82:f2:11:3c:d9:f6:82:2f:e3:42:24:d0: 01:ab:4f:0a:1d:ad:b2:52:c2:91:5f:c3:00:68:e5:7b:59:7c: 05:96:15:a8:c3:d1:e2:ff:97:61:f3:84:a5:b3:ed:15:cb:56: d5:98:c9:b9:3f:38:48:41:55:08:43:40:cc:21:fb:c3:8c:e9: 03:41:8c:74:9f:64:3c:b2:61:68:ea:19:34:66:26:7f:b5:bb: 82:5f:d6:1d:a9:83:8c:76:54:ed:b6:fd:38:aa:9f:7e:87:3c: 8a:93:b2:87:22:0c:3d:39:1b:4b:39:1a:08:7c:d1:dd:2f:bf: 2b:bd:6a:09:e3:7f:94:31:44:19:5f:ec:a2:77:e3:04:09:c4: 1d:76:6e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswcPrG8qdaxYTfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODMxNWJjNmEtM2ZmZC00NWQ2LWI0NmUtZDkxMDM1ZWEyMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHKmMYO0yhDNKU23PiRgQliBr/KIj1I+m6JG xXtgswKkXsDk1/qtXA845PV64Wx3aZOgIKmOM5BG++wx/GYgl9H2fDpm3R+aSGsR /7bOQcsdB1psdBJ3D3H6wWRjAW2+lB6oQXJ9blLWzU28AkFlUiH4vpFVqF5xrry6 uxgQ7bO7yMJC83Zelli7j63V2rYgZrh18zlbMRgrS4fmBviSKoZDEWFBSu75rpak XhbiewEKGni6CUJvbqGO1sYREIUQVo8efMnhgehf6evsRVKcAUk+QHSXEsolaouw zMqYpN9NrD0Y+gmzbANQKvDYu5uKDAo7vRdLHXkjFAXr8xhTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDBlHKEjtoY5PsSdb4l/2s9Po1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA4ZDdjZWUtNTc3Yi0z ZGVhLTg4OTItNWNmNzcyNjNjNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcaN7+CO8B58/nhbuhu6m6/HHCifhVLy0zpg2ONFgL6tBgYT0H2nloS ElYy00/q1o0lQ9AHqc3cRGBqYy5EzUlWzsFn65Ae4QgN06a46TiRzm/pVU5T0xGn 7QjMJNBvSaL+qbONEeujg9XCg+ULnrppvILyETzZ9oIv40Ik0AGrTwodrbJSwpFf wwBo5XtZfAWWFajD0eL/l2HzhKWz7RXLVtWYybk/OEhBVQhDQMwh+8OM6QNBjHSf ZDyyYWjqGTRmJn+1u4Jf1h2pg4x2VO22/Tiqn36HPIqTsociDD05G0s5Ggh80d0v vyu9agnjf5QxRBlf7KJ34wQJxB12bls= -----END CERTIFICATE-----Generated at Sun Aug 24 01:33:16 2025 by rpki-client