$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6450ff78-4b77-3031-99a7-ca08b8f2b879.roa File: 6450ff78-4b77-3031-99a7-ca08b8f2b879.roa (raw, json) Hash identifier: YMfLsQevSmWv6l/6MTdoTLMj6Vg9Fao+u0pw4gVzic8= Subject key identifier: 4F:A0:48:0B:AC:DD:D8:C0:9C:3E:96:08:F8:8B:C9:6D:28:78:FA:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB95F7AC0EDA0D0F2FEF680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6450ff78-4b77-3031-99a7-ca08b8f2b879.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33667 IP address blocks: 173.14.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:5f:7a:c0:ed:a0:d0:f2:fe:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bb1590cb-b44c-4289-9812-28c772a4f424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:c7:f9:30:19:a0:8d:f1:1f:c7:79:e9:6a: 7e:6e:f3:c3:6d:07:d5:90:25:d1:ac:c6:60:f7:62: eb:72:3d:fc:36:51:f3:48:a0:82:7a:50:17:79:61: dd:f5:d4:fc:b2:a0:9a:96:3a:ee:78:e0:d7:62:5a: e2:ae:9a:7c:97:fa:bf:de:82:02:9f:de:4d:92:9c: 3d:6a:72:7b:31:fe:eb:47:02:a7:8d:0d:8c:bf:3b: 51:21:14:e6:eb:23:2d:05:2e:50:4c:a3:18:12:7e: 1f:f3:83:c9:05:1a:16:6d:8a:8a:5c:e2:50:79:53: c9:b3:ea:f1:dc:d6:8e:be:b3:15:7c:17:39:74:81: ef:90:11:63:1f:33:7e:51:91:1a:03:dd:3d:50:2d: 1b:61:e4:29:e8:e3:96:94:0b:ab:18:4b:d1:a6:49: 7b:fe:08:ba:99:91:dd:be:bb:1f:be:77:4b:ac:50: 46:d5:02:77:02:04:01:78:5a:a4:c9:e9:f7:7d:ff: ad:17:f6:52:a9:d7:10:1e:b1:6d:17:4b:f5:a1:ef: 0d:a1:02:f8:53:91:8f:e1:55:58:16:56:c3:7d:e8: a0:8e:2d:9c:59:5d:17:18:0e:eb:f3:da:7e:79:2b: fb:ff:d9:31:3b:27:cc:d1:dd:0e:a8:c7:3b:c8:6c: 66:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A0:48:0B:AC:DD:D8:C0:9C:3E:96:08:F8:8B:C9:6D:28:78:FA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6450ff78-4b77-3031-99a7-ca08b8f2b879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.14.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:22:e6:ee:46:2e:e1:56:a5:36:32:f3:fb:d4:00:b3:6d:ed: cf:e1:eb:95:5d:ab:b6:50:4b:47:df:0c:47:46:9f:f3:3a:4a: 5d:e9:6f:aa:1a:67:da:49:66:b2:83:4a:d4:45:95:36:2f:30: 03:b2:fa:83:d0:99:35:f5:aa:a6:ed:a3:52:46:01:19:a1:c3: fe:db:fd:c3:39:01:a4:8e:35:2d:9c:d0:65:92:0b:75:b3:90: f1:a0:db:46:d5:e5:81:87:c5:8a:6d:9b:34:a4:32:a7:e3:d2: 48:7b:c1:a2:0e:10:45:9a:e8:94:12:3f:97:7c:c6:de:c7:ca: 10:7e:45:bc:e0:f5:a7:69:b1:bc:c9:45:c6:8b:b3:d6:22:97: cb:e1:9c:57:91:75:dd:86:68:3e:19:de:fb:04:29:6f:3a:8b: f5:db:99:72:1c:d1:30:c3:35:52:45:2a:3e:d2:6d:ba:af:ec: 9f:bf:94:f9:cb:30:48:34:7b:37:06:3b:a0:d3:e3:e5:3d:75: 39:ef:73:8a:5a:c3:77:66:94:cd:49:d6:a6:34:f4:e5:6a:b1: 2e:84:8b:10:0f:79:73:de:ae:9a:ce:27:98:70:ee:de:10:4b: 95:a3:0f:37:f3:cc:4d:aa:fd:bb:3b:0a:db:3a:f2:96:cc:bf: 24:03:d7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uV96wO2g0PL+9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmIxNTkwY2ItYjQ0Yy00Mjg5LTk4MTItMjhjNzcyYTRmNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweLH+TAZoI3xH8d56Wp+bvPDbQfVkCXRrMZg 92Lrcj38NlHzSKCCelAXeWHd9dT8sqCaljrueODXYlrirpp8l/q/3oICn95Nkpw9 anJ7Mf7rRwKnjQ2MvztRIRTm6yMtBS5QTKMYEn4f84PJBRoWbYqKXOJQeVPJs+rx 3NaOvrMVfBc5dIHvkBFjHzN+UZEaA909UC0bYeQp6OOWlAurGEvRpkl7/gi6mZHd vrsfvndLrFBG1QJ3AgQBeFqkyen3ff+tF/ZSqdcQHrFtF0v1oe8NoQL4U5GP4VVY FlbDfeigji2cWV0XGA7r89p+eSv7/9kxOyfM0d0OqMc7yGxmewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+gSAus3djAnD6WCPiLyW0oePqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ1MGZmNzgtNGI3Ny0z MDMxLTk5YTctY2EwOGI4ZjJiODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQ7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIi5u5GLuFWpTYy8/vUALNt7c/h65Vdq7ZQS0ffDEdGn/M6Sl3pb6oa Z9pJZrKDStRFlTYvMAOy+oPQmTX1qqbto1JGARmhw/7b/cM5AaSONS2c0GWSC3Wz kPGg20bV5YGHxYptmzSkMqfj0kh7waIOEEWa6JQSP5d8xt7HyhB+Rbzg9adpsbzJ RcaLs9Yil8vhnFeRdd2GaD4Z3vsEKW86i/XbmXIc0TDDNVJFKj7Sbbqv7J+/lPnL MEg0ezcGO6DT4+U9dTnvc4paw3dmlM1J1qY09OVqsS6EixAPeXPerprOJ5hw7t4Q S5WjDzfzzE2q/bs7Cts68pbMvyQD12g= -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:20 2025 by rpki-client