$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db1bacf-d891-3b5d-bb61-edefa4659201.roa File: 3db1bacf-d891-3b5d-bb61-edefa4659201.roa (raw, json) Hash identifier: azkBPAgmZRdvRnqLJH+OZ+smlQlYfbun0Km7ONODBYY= Subject key identifier: 40:07:51:7C:BF:FC:DD:EE:4E:37:2A:0B:DF:F8:0D:E6:CB:C3:45:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3BF42F354354290280900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db1bacf-d891-3b5d-bb61-edefa4659201.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 174.167.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:bf:42:f3:54:35:42:90:28:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3b2f96a0-57ca-40f3-9648-b9546c5694d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:57:43:11:93:4d:8f:65:63:b7:22:66:7d: 2a:51:5f:42:db:9d:82:0e:62:0e:0c:ea:60:d1:6b: fa:24:7a:91:07:f5:48:72:f2:8f:02:10:65:e1:d5: ac:99:27:f9:62:da:28:7b:37:b4:a4:e7:f1:f7:43: c9:2e:fe:cc:1e:ce:5d:48:3f:a6:16:5e:61:a7:8c: 56:35:ed:e2:09:a7:66:e3:e6:0f:ee:10:ab:dc:20: bd:0b:3f:0a:09:41:58:66:e1:13:16:97:e7:6c:eb: 2b:51:61:eb:97:6d:a6:29:d8:3b:82:97:ee:85:ee: 7a:25:6c:c1:f4:42:06:4e:6a:42:fb:94:de:b8:a4: ed:7b:11:a8:c1:ab:c5:2a:25:dd:8f:e0:1f:75:e3: e5:43:c0:89:50:84:3d:35:0d:44:70:f4:74:6a:81: f8:18:6e:38:c0:af:a2:6d:c2:af:69:3e:53:9c:5d: 67:d8:8b:d0:a3:47:5c:2c:45:6a:6e:ae:b2:80:39: 87:be:40:c7:87:06:fd:ca:10:12:75:73:5d:95:84: 66:56:54:ef:3a:fb:63:3c:39:8c:78:06:52:85:1a: bc:2c:b4:48:37:bb:79:bf:95:84:34:c9:66:18:70: c1:12:3d:b6:2d:83:bf:28:bc:6d:39:27:80:65:14: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:07:51:7C:BF:FC:DD:EE:4E:37:2A:0B:DF:F8:0D:E6:CB:C3:45:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db1bacf-d891-3b5d-bb61-edefa4659201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.167.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:5e:72:41:18:db:bb:ca:28:37:30:df:ef:3f:dc:32:b0:78: 7c:34:d7:ff:59:4c:5e:b8:3d:02:77:64:bc:77:47:63:cd:53: d8:ed:ee:50:e6:4e:7c:8d:07:b3:23:e7:09:c4:91:13:36:80: 3e:d0:3d:b6:79:94:05:c6:eb:59:79:c3:2f:60:00:8c:db:ff: b7:74:87:b0:fa:3a:47:49:40:c9:e5:ff:11:e3:41:e7:2d:e1: 26:2b:5b:ab:8f:57:7c:84:ef:dc:e7:56:94:fc:70:b7:4e:69: 33:db:1b:61:74:8e:22:d8:a0:59:58:d5:bd:37:70:ef:cd:c0: 91:25:00:66:ac:2c:51:64:6b:78:58:c0:bf:d6:a4:9d:5a:d6: 4d:ec:2c:10:29:fc:72:31:0f:e7:d5:a1:f0:f4:56:e7:a9:cf: 81:95:c3:c7:24:b3:2c:ab:0c:03:c1:5d:66:ab:4f:64:b8:5e: 9f:e1:32:cd:dd:0e:3b:ed:5a:95:76:b4:bd:8c:71:33:a0:59: e9:61:33:2b:15:fe:a6:9c:7c:eb:e3:77:61:ca:84:03:e4:ac: 1a:f9:47:ba:d8:bf:81:15:2d:2b:1e:6a:6e:55:a3:e6:fd:11: 6f:b2:d0:14:ec:a2:a5:fb:b4:e0:14:f5:4e:c2:47:5f:6d:ef: d4:02:ad:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw79C81Q1QpAoCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2IyZjk2YTAtNTdjYS00MGYzLTk2NDgtYjk1NDZjNTY5NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2BXQxGTTY9lY7ciZn0qUV9C252CDmIODOpg 0Wv6JHqRB/VIcvKPAhBl4dWsmSf5Ytooeze0pOfx90PJLv7MHs5dSD+mFl5hp4xW Ne3iCadm4+YP7hCr3CC9Cz8KCUFYZuETFpfnbOsrUWHrl22mKdg7gpfuhe56JWzB 9EIGTmpC+5TeuKTtexGowavFKiXdj+AfdePlQ8CJUIQ9NQ1EcPR0aoH4GG44wK+i bcKvaT5TnF1n2IvQo0dcLEVqbq6ygDmHvkDHhwb9yhASdXNdlYRmVlTvOvtjPDmM eAZShRq8LLRIN7t5v5WENMlmGHDBEj22LYO/KLxtOSeAZRQuTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAHUXy//N3uTjcqC9/4DebLw0XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2RiMWJhY2YtZDg5MS0z YjVkLWJiNjEtZWRlZmE0NjU5MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpeckEY27vKKDcw3+8/3DKweHw01/9ZTF64PQJ3ZLx3R2PNU9jt7lDm TnyNB7Mj5wnEkRM2gD7QPbZ5lAXG61l5wy9gAIzb/7d0h7D6OkdJQMnl/xHjQect 4SYrW6uPV3yE79znVpT8cLdOaTPbG2F0jiLYoFlY1b03cO/NwJElAGasLFFka3hY wL/WpJ1a1k3sLBAp/HIxD+fVofD0Vuepz4GVw8cksyyrDAPBXWarT2S4Xp/hMs3d DjvtWpV2tL2McTOgWelhMysV/qacfOvjd2HKhAPkrBr5R7rYv4EVLSseam5Vo+b9 EW+y0BTsoqX7tOAU9U7CR19t79QCrQY= -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:16 2025 by rpki-client