$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa File: 28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa (raw, json) Hash identifier: Wi9JVKYaIbi7vVSHOnoXuNMCiVnrnYOGvsxOrAE5D0s= Subject key identifier: CD:74:66:F3:5C:4C:A2:15:4D:13:7C:19:D4:DD:FA:5E:CD:77:83:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8F3C4CAA23A8639204300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7016 IP address blocks: 174.49.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:f3:c4:ca:a2:3a:86:39:20:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8d26d8cd-5042-479b-a703-05e41a587571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:66:0a:49:de:cf:83:13:bb:2d:9e:b0:74: e7:0f:ac:a0:a8:26:e6:7a:30:e1:06:44:e7:1a:91: 98:d3:29:85:23:08:ff:85:09:43:fa:10:b4:f2:7d: ef:60:94:1b:e8:38:db:2e:10:6e:fe:c4:6b:ec:f6: be:53:00:ca:b2:fe:e1:43:1a:97:d1:10:73:8d:a4: 44:30:49:e0:0f:00:1f:ec:b5:52:8e:66:6c:c6:60: 81:1b:1d:84:6d:4e:dc:16:eb:db:45:8b:39:bc:8d: b9:20:6d:35:59:1f:6c:2d:41:d8:ac:c6:6b:5d:e2: 27:f8:15:80:00:95:a1:71:11:38:97:41:5f:8c:3a: a4:28:73:b3:da:5d:e6:fd:0e:ef:17:99:e9:18:0a: 1c:15:58:b2:33:0e:50:11:d9:0d:52:8d:01:68:25: ec:cd:83:7f:19:c6:71:3b:bc:7b:ed:6e:b4:84:e0: 8f:36:f2:15:9c:56:ff:0f:06:21:1b:ec:de:b5:90: cc:2c:1d:77:fc:71:c8:84:0d:84:52:65:a6:71:e1: e7:b1:c2:96:dd:d0:64:b4:fa:00:25:d1:94:b0:fe: f8:e8:9a:c8:91:7a:de:61:81:c7:e5:3b:5e:bc:ce: 55:d9:d7:1a:f6:42:d2:e1:af:85:b4:eb:56:a4:44: d0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:66:F3:5C:4C:A2:15:4D:13:7C:19:D4:DD:FA:5E:CD:77:83:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.49.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:55:41:16:f1:58:67:92:66:52:e5:ee:37:29:ba:f9:4e:63: 5f:36:b8:7b:0a:69:55:7a:34:7d:71:45:18:3b:98:aa:c6:b2: be:ef:78:ec:85:38:60:16:4d:0c:22:6b:11:84:a4:ef:67:a4: 64:4a:9a:2f:16:c4:52:03:5e:d3:36:93:67:85:1f:b2:e3:c1: a4:87:1c:4d:d6:0f:37:d3:ce:60:9a:3a:ac:61:e7:c2:b0:d0: 5b:ac:b8:7a:d1:76:cb:7e:b1:ae:bf:66:d4:2d:29:75:85:35: 8b:e5:25:be:cc:a2:5a:1a:e7:d5:d0:d0:fa:89:9a:8b:35:2e: b5:2e:6d:50:d9:6b:f2:45:87:9a:e6:9a:84:e5:6d:25:91:38: ff:3d:c8:6b:85:7f:c2:65:3b:dd:47:a1:33:f1:58:e5:b4:43: 82:d2:2a:92:ed:15:6e:bf:fe:d6:bc:a8:0d:31:95:60:ae:67: 69:0e:30:ed:74:18:66:1d:6a:80:8b:ad:a7:9a:0e:ce:d3:8f: 55:59:d7:94:5e:ad:c4:bd:b4:af:d6:9f:d3:45:d1:e4:69:f1: 04:39:e4:35:0d:b4:b0:16:73:46:93:38:a4:ef:91:69:cb:38: 8e:1d:ee:f9:36:54:63:5a:4f:c0:d6:00:b3:8a:93:43:56:e7: d7:20:a9:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uPPEyqI6hjkgQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGQyNmQ4Y2QtNTA0Mi00NzliLWE3MDMtMDVlNDFhNTg3NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaZmCknez4MTuy2esHTnD6ygqCbmejDhBkTn GpGY0ymFIwj/hQlD+hC08n3vYJQb6DjbLhBu/sRr7Pa+UwDKsv7hQxqX0RBzjaRE MEngDwAf7LVSjmZsxmCBGx2EbU7cFuvbRYs5vI25IG01WR9sLUHYrMZrXeIn+BWA AJWhcRE4l0FfjDqkKHOz2l3m/Q7vF5npGAocFViyMw5QEdkNUo0BaCXszYN/GcZx O7x77W60hOCPNvIVnFb/DwYhG+zetZDMLB13/HHIhA2EUmWmceHnscKW3dBktPoA JdGUsP746JrIkXreYYHH5TtevM5V2dca9kLS4a+FtOtWpETQ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM10ZvNcTKIVTRN8GdTd+l7Nd4OdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhkMGYyZTMtNjc4MS0z ZDdkLTg5MGYtYjlmNGQ0NzE2OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrjGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtVQRbxWGeSZlLl7jcpuvlOY182uHsKaVV6NH1xRRg7mKrGsr7veOyF OGAWTQwiaxGEpO9npGRKmi8WxFIDXtM2k2eFH7LjwaSHHE3WDzfTzmCaOqxh58Kw 0FusuHrRdst+sa6/ZtQtKXWFNYvlJb7Moloa59XQ0PqJmos1LrUubVDZa/JFh5rm moTlbSWROP89yGuFf8JlO91HoTPxWOW0Q4LSKpLtFW6//ta8qA0xlWCuZ2kOMO10 GGYdaoCLraeaDs7Tj1VZ15RercS9tK/Wn9NF0eRp8QQ55DUNtLAWc0aTOKTvkWnL OI4d7vk2VGNaT8DWALOKk0NW59cgqaY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:36:03 2025 by rpki-client