$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/591dd1f4-361b-32e3-9952-339372aafe8a.roa File: 591dd1f4-361b-32e3-9952-339372aafe8a.roa (raw, json) Hash identifier: oNb7hp0r5hMSRoVQP2Ian4PTTdbJH27ogEi9FSC1d/Q= Subject key identifier: C0:24:8C:5E:C7:54:0E:3C:61:E2:4C:3A:EF:6E:73:C0:41:87:58:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1FEA8771F957372B12900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/591dd1f4-361b-32e3-9952-339372aafe8a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 174.166.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:fe:a8:77:1f:95:73:72:b1:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c4021223-f2cb-4a9d-89fc-f0f1667849c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:e5:25:27:6b:e0:9f:a0:9c:91:d3:dc:fa: ba:fa:af:57:3e:51:8f:6b:12:40:43:19:66:47:9d: ae:c9:55:b5:02:19:d6:28:a3:d5:2a:b8:44:95:c5: 38:dc:a5:5d:17:e1:0f:47:7f:1e:b1:96:f1:48:92: fa:9b:7f:58:2a:86:c8:fc:bd:7b:6b:57:27:a7:b9: 77:fb:83:22:36:00:5c:03:0e:26:47:e8:a2:11:51: b2:8a:04:ec:14:2e:93:df:bd:a9:b0:12:19:f9:2f: ce:01:29:0d:57:44:ee:61:64:97:c3:9c:96:3e:36: 73:d3:20:2a:03:01:78:53:7c:f3:05:12:90:ea:c9: 15:7e:f9:2d:9b:a7:af:cc:48:90:b8:e9:c4:f7:81: 6b:bc:e4:57:60:2e:60:d6:c2:89:f6:ba:c8:93:35: 6b:68:ed:ae:89:4c:9f:a5:5f:9e:e9:4b:ad:22:f2: 12:2b:e1:4e:10:d4:ab:df:1a:90:0e:9b:d8:8c:44: 82:f1:3d:9e:93:61:f0:29:14:de:02:06:b7:39:a9: 9f:9d:f1:6b:e3:87:a5:0b:40:ce:71:14:e8:e2:fa: b1:fb:e9:87:4e:74:38:83:f2:44:86:ac:3c:9e:1c: 4e:3f:3f:77:85:9b:a1:40:f9:f2:e9:d3:51:44:48: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:24:8C:5E:C7:54:0E:3C:61:E2:4C:3A:EF:6E:73:C0:41:87:58:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/591dd1f4-361b-32e3-9952-339372aafe8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.166.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f0:77:cf:92:81:e2:19:ed:45:55:1d:fd:4f:89:cc:51:95: 5f:bb:b1:81:21:db:20:4c:61:f9:b0:21:1f:dd:12:eb:87:f0: 24:34:41:78:38:61:72:eb:49:30:3d:cf:ab:37:98:23:9c:34: 5b:84:62:c7:48:1f:1e:8f:c8:fc:f1:29:62:67:74:f6:f9:0e: 19:1c:02:20:fb:2e:c7:ab:10:f7:2a:35:1d:fd:1b:47:05:a7: 9d:35:39:2d:48:0e:e6:f3:82:19:b5:f9:ab:36:68:7d:dd:75: 43:eb:8d:1f:67:84:40:b3:7e:08:f7:6e:96:86:2d:5f:f5:44: bb:21:19:bd:c9:6c:de:13:7d:9d:ae:8b:51:da:d5:a8:08:b0: fa:d3:c5:26:11:7c:3c:79:0f:49:31:cd:be:3a:99:10:4b:54: 8d:39:2c:56:fa:c0:3f:29:3a:c5:26:4e:ca:79:b2:8b:35:a5: 33:a1:68:f7:63:f7:b9:ea:e1:df:13:db:ca:ab:4b:57:9e:a1: 1a:b8:9f:4f:04:71:f8:84:dc:4c:66:ea:4c:a6:9a:a0:8d:bd: c6:87:ba:32:2c:d5:91:8c:bb:c3:e7:d7:f9:40:1c:03:8f:11: 39:53:ad:6d:51:97:d3:b2:c3:d2:a7:2b:45:0a:5e:bc:a9:f3: 59:14:ce:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswf6odx+Vc3KxKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzQwMjEyMjMtZjJjYi00YTlkLTg5ZmMtZjBmMTY2Nzg0OWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypPlJSdr4J+gnJHT3Pq6+q9XPlGPaxJAQxlm R52uyVW1AhnWKKPVKrhElcU43KVdF+EPR38esZbxSJL6m39YKobI/L17a1cnp7l3 +4MiNgBcAw4mR+iiEVGyigTsFC6T372psBIZ+S/OASkNV0TuYWSXw5yWPjZz0yAq AwF4U3zzBRKQ6skVfvktm6evzEiQuOnE94FrvORXYC5g1sKJ9rrIkzVraO2uiUyf pV+e6UutIvISK+FOENSr3xqQDpvYjESC8T2ek2HwKRTeAga3OamfnfFr44elC0DO cRTo4vqx++mHTnQ4g/JEhqw8nhxOPz93hZuhQPny6dNRREgY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAkjF7HVA48YeJMOu9uc8BBh1jjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTkxZGQxZjQtMzYxYi0z MmUzLTk5NTItMzM5MzcyYWFmZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrwd8+SgeIZ7UVVHf1PicxRlV+7sYEh2yBMYfmwIR/dEuuH8CQ0QXg4 YXLrSTA9z6s3mCOcNFuEYsdIHx6PyPzxKWJndPb5DhkcAiD7LserEPcqNR39G0cF p501OS1IDubzghm1+as2aH3ddUPrjR9nhECzfgj3bpaGLV/1RLshGb3JbN4TfZ2u i1Ha1agIsPrTxSYRfDx5D0kxzb46mRBLVI05LFb6wD8pOsUmTsp5sos1pTOhaPdj 97nq4d8T28qrS1eeoRq4n08EcfiE3Exm6kymmqCNvcaHujIs1ZGMu8Pn1/lAHAOP ETlTrW1Rl9Oyw9KnK0UKXryp81kUzqk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:50:03 2025 by rpki-client