$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ca12d23-4b0d-34cc-977b-f746e42eebc6.roa File: 3ca12d23-4b0d-34cc-977b-f746e42eebc6.roa (raw, json) Hash identifier: TXBShLrrMBpjrOMCVWT6qH/RTLRdsODAIT1iHGsZQbM= Subject key identifier: B8:C3:64:79:84:B4:BA:A4:0B:3B:D7:96:E9:D7:97:87:E2:A1:F9:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3BB15E5DEB4EFA2A65450 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ca12d23-4b0d-34cc-977b-f746e42eebc6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 174.57.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:bb:15:e5:de:b4:ef:a2:a6:54:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d4fe4e6b-c0a1-4b89-8ac1-081b6a92a592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:1e:61:e5:a5:6e:37:96:d2:6c:2b:c5:52: 49:36:41:e5:b6:37:90:6c:0f:13:bc:b5:d3:5e:74: 32:9f:2f:ce:47:9d:ee:9d:39:73:22:d0:eb:11:40: 28:3e:80:0f:3e:75:2a:7d:bf:9f:96:82:c7:e7:a4: 61:f7:a5:86:3c:5d:6d:88:49:cb:f1:73:86:b6:18: 4b:fa:e8:4f:62:f8:f5:f8:61:cb:5a:3f:3b:bf:d2: f8:bc:d1:f9:a6:8c:64:ad:18:b3:c2:07:1a:c3:5f: c4:20:21:c3:62:08:dc:fa:dd:09:09:1d:2e:f5:87: a7:11:c7:81:83:05:01:48:2f:59:8a:c5:fe:f0:23: 3e:cb:f5:d0:5b:a1:21:02:f5:11:ab:76:2d:bb:3b: f2:1d:ba:ae:9f:bc:b0:1b:97:ce:ed:b5:cc:a7:d2: 92:69:4a:36:40:b4:82:5d:f6:e0:c5:4f:d4:8b:f6: 51:ad:02:89:d4:d4:2e:a9:66:2d:5c:15:4a:9c:39: 83:8b:cb:15:d5:15:15:45:e4:89:f0:dd:c9:49:cc: e6:ec:9a:aa:ea:a8:82:cd:ee:fe:92:e7:a2:20:c8: d5:33:ff:f2:80:a8:ae:a5:27:bc:34:45:c0:9d:c7: ba:6a:6e:db:e1:bc:de:82:1b:d3:1e:a5:c4:fa:23: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C3:64:79:84:B4:BA:A4:0B:3B:D7:96:E9:D7:97:87:E2:A1:F9:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ca12d23-4b0d-34cc-977b-f746e42eebc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.57.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:99:7e:04:f0:f4:d0:39:9d:77:0a:3e:4c:53:f0:07:2d:88: c7:9c:fb:fc:a1:cf:ba:f3:46:6d:ef:23:04:26:21:2a:23:c3: f9:0b:33:5a:d9:52:28:04:fc:3d:95:66:10:fb:ad:e7:6c:ec: f0:09:a6:4c:d4:1f:23:5f:c2:c6:4e:51:e6:9e:87:33:89:12: cb:63:01:d7:03:da:12:f3:6a:32:b8:27:40:0e:92:48:f8:d6: ca:0f:8a:f9:68:15:87:ca:4f:90:aa:1d:b6:e3:7e:39:1b:1c: b7:e6:b5:ee:82:d2:8a:18:17:f2:cb:62:48:76:98:05:19:ce: db:09:c1:cb:10:df:b1:ab:5a:40:8e:de:cb:d4:78:b0:dc:a7: a7:8b:3e:24:e3:0c:a0:7d:b4:9e:d3:e4:7e:a0:10:d6:aa:0a: c5:2c:8f:60:d8:36:44:fe:bf:20:61:ab:19:c9:6d:0d:8f:ce: 7d:6c:d6:28:8e:89:60:18:c1:7d:5d:7c:d8:9e:88:e0:3d:ac: fb:01:c8:18:f3:03:43:f6:b5:aa:ac:f2:56:cb:ac:01:50:de: 53:61:74:f1:83:b7:5b:92:49:ee:7a:2e:58:3c:db:3d:33:c7: d6:99:05:a0:ce:64:eb:29:34:e8:cb:4c:44:5a:be:dc:7e:36: 6f:e3:db:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw7sV5d6076KmVFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDRmZTRlNmItYzBhMS00Yjg5LThhYzEtMDgxYjZhOTJhNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMEeYeWlbjeW0mwrxVJJNkHltjeQbA8TvLXT XnQyny/OR53unTlzItDrEUAoPoAPPnUqfb+floLH56Rh96WGPF1tiEnL8XOGthhL +uhPYvj1+GHLWj87v9L4vNH5poxkrRizwgcaw1/EICHDYgjc+t0JCR0u9YenEceB gwUBSC9ZisX+8CM+y/XQW6EhAvURq3YtuzvyHbqun7ywG5fO7bXMp9KSaUo2QLSC XfbgxU/Ui/ZRrQKJ1NQuqWYtXBVKnDmDi8sV1RUVReSJ8N3JSczm7Jqq6qiCze7+ kueiIMjVM//ygKiupSe8NEXAnce6am7b4bzeghvTHqXE+iM+YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjDZHmEtLqkCzvXlunXl4fiofmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NhMTJkMjMtNGIwZC0z NGNjLTk3N2ItZjc0NmU0MmVlYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmZfgTw9NA5nXcKPkxT8ActiMec+/yhz7rzRm3vIwQmISojw/kLM1rZ UigE/D2VZhD7reds7PAJpkzUHyNfwsZOUeaehzOJEstjAdcD2hLzajK4J0AOkkj4 1soPivloFYfKT5CqHbbjfjkbHLfmte6C0ooYF/LLYkh2mAUZztsJwcsQ37GrWkCO 3svUeLDcp6eLPiTjDKB9tJ7T5H6gENaqCsUsj2DYNkT+vyBhqxnJbQ2Pzn1s1iiO iWAYwX1dfNieiOA9rPsByBjzA0P2taqs8lbLrAFQ3lNhdPGDt1uSSe56Llg82z0z x9aZBaDOZOspNOjLTERavtx+Nm/j2+g= -----END CERTIFICATE-----Generated at Sat Aug 23 23:06:12 2025 by rpki-client