$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23739cfe-ef2b-35cc-9c9f-7e94bc240360.roa File: 23739cfe-ef2b-35cc-9c9f-7e94bc240360.roa (raw, json) Hash identifier: nmjxMN2RuPGF4V5QpQeLSNyuVCkq3q5NA7h4PSHhJIs= Subject key identifier: AC:B5:F6:78:0D:23:CE:33:09:24:74:2B:B9:3D:16:6D:B7:BA:CE:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C4EC0B3C7E2500BE8E38 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23739cfe-ef2b-35cc-9c9f-7e94bc240360.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 174.167.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c4:ec:0b:3c:7e:25:00:be:8e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d441e05e-accd-437c-9950-ecfb5721db3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:ac:4d:2d:a1:b3:bd:a9:15:20:1d:e0:0e: 92:86:2e:57:09:6d:5b:e6:6e:6d:89:e3:73:31:87: 6c:d5:d9:b7:c2:c9:e3:5d:91:0e:d1:91:8f:9b:91: ea:31:60:2d:1b:a3:50:18:ff:03:44:3d:75:de:5f: 2a:24:40:48:85:9f:38:87:1f:e4:d5:56:74:87:95: bc:c9:48:b1:1c:1f:78:93:05:ae:53:49:7b:9a:08: 29:79:f7:9a:6a:e1:3c:dc:c4:23:27:29:8f:0d:87: 64:99:5a:62:8c:56:c6:88:b3:fa:69:cd:77:3e:f3: ce:19:31:97:31:85:8e:8d:93:c0:fb:49:60:a9:ed: 23:11:4a:d5:02:81:68:ec:70:d4:0d:9a:23:d1:d2: 99:e0:d8:3f:a9:f7:2b:d5:6f:8a:c5:a2:10:8e:2b: 1d:81:fc:28:29:4c:04:82:31:69:b5:3a:1c:12:41: 55:f7:75:56:70:c3:40:3d:ad:50:36:a0:65:1f:c6: ea:5e:8e:aa:c3:4c:c6:88:ec:fc:fc:a2:5c:50:17: a6:e0:ac:76:a1:e7:2c:9d:1d:f1:6d:4b:94:11:55: bf:c5:2e:1b:8c:2e:f6:9f:b9:b6:3f:7b:21:7a:36: 49:47:32:97:19:cd:7a:26:05:ac:5c:1f:c4:93:52: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B5:F6:78:0D:23:CE:33:09:24:74:2B:B9:3D:16:6D:B7:BA:CE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23739cfe-ef2b-35cc-9c9f-7e94bc240360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.167.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:9b:c7:9c:7e:59:0f:8a:54:cd:b8:fd:d3:4e:b7:d6:ec:e9: d1:62:69:6f:01:af:03:f5:dc:7e:38:9d:bc:51:47:c7:fc:2d: 43:a4:f4:f0:8f:42:24:b8:37:3a:2c:ff:17:14:ea:f5:97:11: f6:40:36:1b:63:64:ef:6c:37:62:38:9b:fd:41:19:36:f5:38: c0:63:e8:63:8a:81:b1:91:d8:b4:78:4b:39:a8:1b:85:2d:5a: 2c:61:26:16:fb:5c:56:36:3b:1f:f4:f7:6f:5c:fe:44:bf:63: 95:e5:c9:37:ca:28:cf:02:b5:23:d3:64:90:af:81:15:d7:22: c3:34:5a:49:3a:dd:fe:d1:09:ef:43:f2:6d:76:33:fb:d8:97: d7:85:60:72:e6:95:b9:5f:28:79:5e:cd:a2:96:c3:7b:97:bb: a9:05:19:da:a1:3b:ca:c5:06:9e:ac:68:7d:f7:81:0d:c2:03: ec:8d:17:5f:82:09:f2:1d:03:af:8f:21:50:f2:fa:1e:90:ec: 83:0b:9c:db:52:98:e4:41:46:b3:0a:72:ff:40:4a:80:98:19: cf:2a:58:f4:15:7d:62:1d:3f:14:a7:01:76:e6:43:0f:8e:e9: 03:af:78:d3:50:ac:32:ab:0b:38:a4:90:0b:ee:61:07:5f:57: 75:9e:e4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswcTsCzx+JQC+jjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ0MWUwNWUtYWNjZC00MzdjLTk5NTAtZWNmYjU3MjFkYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1usTS2hs72pFSAd4A6Shi5XCW1b5m5tieNz MYds1dm3wsnjXZEO0ZGPm5HqMWAtG6NQGP8DRD113l8qJEBIhZ84hx/k1VZ0h5W8 yUixHB94kwWuU0l7mggpefeaauE83MQjJymPDYdkmVpijFbGiLP6ac13PvPOGTGX MYWOjZPA+0lgqe0jEUrVAoFo7HDUDZoj0dKZ4Ng/qfcr1W+KxaIQjisdgfwoKUwE gjFptTocEkFV93VWcMNAPa1QNqBlH8bqXo6qw0zGiOz8/KJcUBem4Kx2oecsnR3x bUuUEVW/xS4bjC72n7m2P3shejZJRzKXGc16JgWsXB/Ek1LEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy19ngNI84zCSR0K7k9Fm23us7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM3MzljZmUtZWYyYi0z NWNjLTljOWYtN2U5NGJjMjQwMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMibx5x+WQ+KVM24/dNOt9bs6dFiaW8BrwP13H44nbxRR8f8LUOk9PCP QiS4Nzos/xcU6vWXEfZANhtjZO9sN2I4m/1BGTb1OMBj6GOKgbGR2LR4SzmoG4Ut WixhJhb7XFY2Ox/0929c/kS/Y5XlyTfKKM8CtSPTZJCvgRXXIsM0Wkk63f7RCe9D 8m12M/vYl9eFYHLmlblfKHlezaKWw3uXu6kFGdqhO8rFBp6saH33gQ3CA+yNF1+C CfIdA6+PIVDy+h6Q7IMLnNtSmORBRrMKcv9ASoCYGc8qWPQVfWIdPxSnAXbmQw+O 6QOveNNQrDKrCzikkAvuYQdfV3We5L4= -----END CERTIFICATE-----Generated at Sun Aug 24 04:32:37 2025 by rpki-client