$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2976a20d-d5cf-3347-8777-514fd98ca908.roa File: 2976a20d-d5cf-3347-8777-514fd98ca908.roa (raw, json) Hash identifier: bKSLJPKtqfaCzdHpsUmaBmweZQ5cR2lPNlRh0etCklE= Subject key identifier: C6:18:64:02:B9:43:C2:BC:A8:D8:9B:DC:38:27:D4:4A:8F:A5:F8:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB820BDB96256E5D360B100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2976a20d-d5cf-3347-8777-514fd98ca908.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 174.53.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:20:bd:b9:62:56:e5:d3:60:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=98c4b6eb-3f1d-4180-a5d8-a19c3b0298d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:31:71:77:41:38:0e:6b:00:6f:86:97:3a: a7:f8:a7:45:7e:ae:46:5f:fe:e0:2d:a4:da:a8:e5: 44:02:7d:4d:5b:3d:51:6f:0d:5b:96:c5:32:2b:8e: 15:f6:15:0b:da:2f:6a:44:9a:cf:a6:6b:5e:d3:14: 10:6f:a1:86:4f:b2:eb:9b:9d:11:09:40:4b:72:78: 68:65:3e:a5:47:15:39:81:79:db:87:61:8c:10:b5: 41:7e:9f:6e:92:de:3b:dc:82:dc:bb:2c:42:52:ef: c5:5b:a5:e0:94:09:2d:37:71:c0:e3:81:cf:37:db: 7b:73:f1:a5:3b:a4:af:95:2b:41:9b:79:d2:2a:c0: dd:ce:a0:a7:50:62:e3:ed:ce:03:25:e3:9e:82:eb: 6f:3d:bc:99:97:6f:44:49:b4:c6:d0:f9:83:2b:7a: 1b:d7:79:37:87:e6:0f:1c:73:de:90:bb:44:12:9e: 34:72:0f:49:af:f6:f5:55:28:e7:c5:12:56:e0:e2: 84:ad:a9:82:3c:3d:41:27:fc:8a:15:d4:a0:bf:15: bc:ed:5d:4e:76:60:4a:ba:fd:bf:26:74:fe:0a:da: 41:ff:ef:67:13:a7:33:54:86:8e:df:45:34:65:c4: 5c:1e:b6:4f:a9:b3:af:14:91:aa:f6:12:4e:05:59: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:18:64:02:B9:43:C2:BC:A8:D8:9B:DC:38:27:D4:4A:8F:A5:F8:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2976a20d-d5cf-3347-8777-514fd98ca908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.53.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:9e:35:e8:39:2d:5d:4a:6b:fc:76:f5:3a:03:ef:79:6f:13: 87:0e:28:c7:5a:7c:b8:e7:9d:fa:d3:35:79:d5:4c:62:f4:5e: e3:91:02:1b:14:b8:30:ef:91:35:77:69:93:a6:58:21:52:b7: 49:b7:84:8c:ca:36:9d:b3:86:66:0c:e4:13:5a:af:d9:11:08: d9:0e:87:42:b4:20:e0:d2:76:23:89:6c:c3:e6:d3:ef:39:f3: 35:69:5c:e6:ff:67:57:73:95:74:59:d7:f0:9a:e5:9d:f0:c6: af:bb:f3:86:16:de:47:b8:fd:fe:a5:dc:df:8a:9a:d6:a9:22: c4:e5:95:db:88:eb:54:32:20:5d:4b:49:ab:5d:02:0b:31:0c: ff:8e:a4:9c:ed:91:1e:34:19:54:aa:74:04:30:2c:9a:7c:91: a2:f5:17:3e:f3:c2:b4:b9:56:e5:0d:fb:3f:30:a9:81:d0:d1: b0:38:d1:80:de:93:e2:d0:3c:31:4d:a1:df:c6:cc:4a:35:02: a1:c9:92:09:f6:bf:b2:1d:4d:2e:e4:a7:e2:19:c7:a0:1f:2c: 36:24:94:62:db:c5:9d:fa:66:8c:d4:11:51:da:c1:8a:f9:d7: 65:6d:3f:07:7c:e5:ac:c2:47:19:97:48:ac:f7:aa:bf:c9:e6: 68:2d:e3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uCC9uWJW5dNgsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OThjNGI2ZWItM2YxZC00MTgwLWE1ZDgtYTE5YzNiMDI5OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXwxcXdBOA5rAG+Glzqn+KdFfq5GX/7gLaTa qOVEAn1NWz1Rbw1blsUyK44V9hUL2i9qRJrPpmte0xQQb6GGT7Lrm50RCUBLcnho ZT6lRxU5gXnbh2GMELVBfp9ukt473ILcuyxCUu/FW6XglAktN3HA44HPN9t7c/Gl O6SvlStBm3nSKsDdzqCnUGLj7c4DJeOegutvPbyZl29ESbTG0PmDK3ob13k3h+YP HHPekLtEEp40cg9Jr/b1VSjnxRJW4OKEramCPD1BJ/yKFdSgvxW87V1OdmBKuv2/ JnT+CtpB/+9nE6czVIaO30U0ZcRcHrZPqbOvFJGq9hJOBVk3MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYYZAK5Q8K8qNib3Dgn1EqPpfh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk3NmEyMGQtZDVjZi0z MzQ3LTg3NzctNTE0ZmQ5OGNhOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrjWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCeNeg5LV1Ka/x29ToD73lvE4cOKMdafLjnnfrTNXnVTGL0XuORAhsU uDDvkTV3aZOmWCFSt0m3hIzKNp2zhmYM5BNar9kRCNkOh0K0IODSdiOJbMPm0+85 8zVpXOb/Z1dzlXRZ1/Ca5Z3wxq+784YW3ke4/f6l3N+KmtapIsTllduI61QyIF1L SatdAgsxDP+OpJztkR40GVSqdAQwLJp8kaL1Fz7zwrS5VuUN+z8wqYHQ0bA40YDe k+LQPDFNod/GzEo1AqHJkgn2v7IdTS7kp+IZx6AfLDYklGLbxZ36ZozUEVHawYr5 12VtPwd85azCRxmXSKz3qr/J5mgt424= -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:00 2025 by rpki-client