$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3716722f-e389-3ad2-953f-8a24ee659cac.roa File: 3716722f-e389-3ad2-953f-8a24ee659cac.roa (raw, json) Hash identifier: oJkkrV40IjBIYZPBYClcfhkn2zPMJ1pkFabpKXN0cRg= Subject key identifier: 16:E9:20:EB:8C:40:7A:08:34:5A:98:7D:A2:18:85:DA:C6:02:FE:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B4E771B7B344D1B2F04800DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3716722f-e389-3ad2-953f-8a24ee659cac.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 33661 IP address blocks: 174.58.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:1b:7b:34:4d:1b:2f:04:80:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=39644233-311c-49b8-82a5-b504f8cf1526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:28:ee:54:47:d2:3c:55:ab:d8:45:58:11: f1:65:4e:4b:1e:4b:b6:56:41:6f:9c:20:db:20:54: 27:24:61:84:a5:45:83:c4:3b:1e:a0:0a:3d:c6:be: 15:8b:96:fc:76:32:b2:e5:fa:1b:f8:bd:40:2b:fd: c8:57:f0:06:a0:3d:a2:38:4a:85:d7:3c:25:cd:dc: c3:5a:29:bf:0a:a1:b9:0a:78:2f:b2:97:78:39:ac: 88:c6:01:3b:5a:a3:21:72:81:a7:e1:36:13:37:f0: 8f:78:57:b3:7d:85:86:22:6d:50:4e:18:9d:c2:09: 81:90:72:23:04:51:b1:4c:7b:fe:75:2f:4e:fc:14: cd:34:89:ec:f9:b8:44:b6:ae:7d:62:89:c7:41:2e: 5f:dd:d8:2e:41:8d:da:d6:ea:a3:b8:66:73:ca:44: af:4a:91:b1:9e:f2:10:e3:ec:99:92:20:0f:87:44: a1:fb:0b:81:3c:ce:cb:30:a1:85:d7:45:7b:12:f9: 38:db:1c:0c:1e:41:b3:71:c7:b2:09:12:8f:85:57: 98:70:a7:44:b9:b5:1b:4d:04:6b:df:da:8e:df:40: 70:40:5c:db:e6:b7:7f:40:74:b5:fd:45:68:8c:c9: 0a:4f:c0:98:8f:9a:30:e2:6b:d2:df:dc:98:80:d0: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:20:EB:8C:40:7A:08:34:5A:98:7D:A2:18:85:DA:C6:02:FE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3716722f-e389-3ad2-953f-8a24ee659cac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.58.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ad:bd:c9:b2:87:67:28:1e:9c:2b:8d:76:2e:9c:b2:c0:e9: c1:3f:5b:f3:37:a2:31:e3:12:a6:f4:d3:e3:a6:5b:c6:41:91: 3f:cc:b1:66:9b:95:57:34:d6:07:40:b3:9d:b3:8a:bf:e1:d7: 02:e9:a9:a1:13:72:5b:d1:68:97:de:a0:9b:e9:3e:63:60:ca: 64:bf:b4:91:85:a7:53:20:77:5e:4c:97:a6:e6:22:8a:0e:93: 07:35:f3:31:9a:a0:c7:eb:45:01:b6:05:6d:5a:04:b1:9f:42: 02:9f:75:18:99:bc:51:54:9a:1e:93:4c:83:34:0d:78:50:18: f8:ea:8e:b3:68:26:bf:0f:28:17:ae:9a:24:74:3a:13:cc:d2: 4a:5f:8e:6c:a3:94:1d:7b:26:89:a1:c1:7a:16:c8:7e:72:60: 26:4a:45:17:ba:73:0e:0f:5b:5b:90:53:56:21:dc:eb:f8:71: 89:02:92:48:14:1f:de:e9:b7:61:ba:48:04:f6:91:99:1c:78: 3a:72:5a:45:10:98:95:12:3b:91:12:9a:e8:0f:5c:f2:48:f1: 80:1e:33:57:36:b2:e7:83:0a:c7:52:63:5f:09:d9:99:2c:aa: 49:69:1a:08:21:e8:b3:e0:1d:f7:0f:35:26:45:a8:23:93:56: 10:e2:f6:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxt7NE0bLwSADcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk Mzk2NDQyMzMtMzExYy00OWI4LTgyYTUtYjUwNGY4Y2YxNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXco7lRH0jxVq9hFWBHxZU5LHku2VkFvnCDb IFQnJGGEpUWDxDseoAo9xr4Vi5b8djKy5fob+L1AK/3IV/AGoD2iOEqF1zwlzdzD Wim/CqG5Cngvspd4OayIxgE7WqMhcoGn4TYTN/CPeFezfYWGIm1QThidwgmBkHIj BFGxTHv+dS9O/BTNNIns+bhEtq59YonHQS5f3dguQY3a1uqjuGZzykSvSpGxnvIQ 4+yZkiAPh0Sh+wuBPM7LMKGF10V7Evk42xwMHkGzcceyCRKPhVeYcKdEubUbTQRr 39qO30BwQFzb5rd/QHS1/UVojMkKT8CYj5ow4mvS39yYgNCI/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbpIOuMQHoINFqYfaIYhdrGAv57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzcxNjcyMmYtZTM4OS0z YWQyLTk1M2YtOGEyNGVlNjU5Y2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrjrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqtvcmyh2coHpwrjXYunLLA6cE/W/M3ojHjEqb00+OmW8ZBkT/MsWab lVc01gdAs52zir/h1wLpqaETclvRaJfeoJvpPmNgymS/tJGFp1Mgd15Ml6bmIooO kwc18zGaoMfrRQG2BW1aBLGfQgKfdRiZvFFUmh6TTIM0DXhQGPjqjrNoJr8PKBeu miR0OhPM0kpfjmyjlB17JomhwXoWyH5yYCZKRRe6cw4PW1uQU1Yh3Ov4cYkCkkgU H97pt2G6SAT2kZkceDpyWkUQmJUSO5ESmugPXPJI8YAeM1c2sueDCsdSY18J2Zks qklpGggh6LPgHfcPNSZFqCOTVhDi9uk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:10 2025 by rpki-client