$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2a87dd-f069-37b3-9994-5e833b326e92.roa File: 6f2a87dd-f069-37b3-9994-5e833b326e92.roa (raw, json) Hash identifier: GX9jyBqutU4Mc1NPAvthPNUzU0QKXd8MiMR3Kz83voU= Subject key identifier: 6D:1B:51:6F:EC:6C:C2:EE:F1:BB:37:AF:1D:9F:25:FA:53:E4:66:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C337ACC5811609C2BB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2a87dd-f069-37b3-9994-5e833b326e92.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 174.57.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c3:37:ac:c5:81:16:09:c2:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9551aebe-3fd7-47b1-9646-cfa981107eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:eb:e8:4b:e6:33:13:ac:48:04:f5:ca:a8: 8b:64:2c:cd:b7:e3:54:7c:5c:33:3b:d1:f4:6c:36: 66:f1:2f:da:94:f9:39:3e:64:4a:19:0e:34:0d:78: 24:a6:1e:6e:67:17:f7:67:ca:cf:8c:a9:61:e4:e9: e9:f2:60:05:3d:a1:fa:57:36:04:d4:9b:18:cb:48: 0b:63:cb:bc:1a:49:6d:77:05:0c:67:c0:07:8c:10: 56:93:e8:b9:45:cf:cc:d0:6a:42:9a:d8:97:a4:50: 43:af:5d:a7:0c:e8:c2:3a:12:64:d6:64:92:42:0c: 24:aa:e1:9b:87:7f:ea:82:20:92:57:f2:c3:e7:79: 36:9d:97:83:8a:3c:09:11:b3:6c:d5:f3:d6:38:5b: d6:43:9d:82:95:3d:12:e2:fb:da:f9:80:35:f6:d4: b4:62:e4:ce:6c:7c:b7:6a:3c:44:40:43:66:2d:73: 2d:12:f5:f5:1b:3b:a2:18:96:20:8d:e5:cb:52:99: 5b:b5:d7:1c:9e:d6:8c:80:56:7d:fb:9a:d7:9d:6c: 31:6f:bf:a4:c3:ca:a4:31:89:a0:b1:68:a9:0b:a9: 2d:5e:65:e1:c7:af:93:93:ee:17:4c:f8:a0:f2:55: 8c:79:3d:6a:d5:7b:46:ea:19:a7:7b:9d:7a:10:d2: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1B:51:6F:EC:6C:C2:EE:F1:BB:37:AF:1D:9F:25:FA:53:E4:66:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2a87dd-f069-37b3-9994-5e833b326e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.57.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e5:8e:f3:be:a5:07:95:72:f9:d1:cf:92:66:31:84:13:5c: de:3e:99:cd:d1:9a:93:ad:21:48:66:7b:34:97:87:5e:dd:09: 11:58:69:40:4d:4f:25:a2:6a:8c:8d:51:29:6d:ef:98:3c:8a: 0f:bc:ba:56:71:6e:27:87:9e:9a:87:4b:52:35:99:f9:68:88: 18:f2:fa:5c:f5:7d:0b:61:3d:78:6d:26:85:20:54:3a:00:01: 85:5d:84:a0:a3:7a:99:bc:7c:9a:0a:67:e2:e0:70:9d:43:46: 33:03:05:a1:92:ce:89:27:d9:77:c2:d9:4e:f0:9f:c3:c5:4d: 4b:01:83:de:05:9a:95:fd:e2:b0:3b:04:f8:19:f9:98:f1:49: c3:6c:7c:77:9a:d3:54:24:d7:c6:61:b8:2d:c1:6a:bd:60:64: b6:19:ac:f5:c4:5c:6b:87:c8:69:99:61:f6:f5:65:e3:59:9f: 31:9d:c1:92:d0:20:8d:2d:69:a0:ac:9d:3d:68:19:f9:09:ef: c0:fa:f4:b8:55:10:b9:3c:52:02:72:f7:54:bc:17:f8:7e:46: 01:e0:cb:e3:82:2e:f4:d0:24:41:3e:16:f6:aa:90:39:85:57: 46:09:42:02:42:fe:ff:de:82:41:1a:4c:29:52:71:0e:f5:67: df:8b:b0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswcM3rMWBFgnCuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTU1MWFlYmUtM2ZkNy00N2IxLTk2NDYtY2ZhOTgxMTA3ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Hr6EvmMxOsSAT1yqiLZCzNt+NUfFwzO9H0 bDZm8S/alPk5PmRKGQ40DXgkph5uZxf3Z8rPjKlh5Onp8mAFPaH6VzYE1JsYy0gL Y8u8GkltdwUMZ8AHjBBWk+i5Rc/M0GpCmtiXpFBDr12nDOjCOhJk1mSSQgwkquGb h3/qgiCSV/LD53k2nZeDijwJEbNs1fPWOFvWQ52ClT0S4vva+YA19tS0YuTObHy3 ajxEQENmLXMtEvX1GzuiGJYgjeXLUplbtdccntaMgFZ9+5rXnWwxb7+kw8qkMYmg sWipC6ktXmXhx6+Tk+4XTPig8lWMeT1q1XtG6hmne516ENLRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0bUW/sbMLu8bs3rx2fJfpT5GabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmYyYTg3ZGQtZjA2OS0z N2IzLTk5OTQtNWU4MzNiMzI2ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrjmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHljvO+pQeVcvnRz5JmMYQTXN4+mc3RmpOtIUhmezSXh17dCRFYaUBN TyWiaoyNUSlt75g8ig+8ulZxbieHnpqHS1I1mfloiBjy+lz1fQthPXhtJoUgVDoA AYVdhKCjepm8fJoKZ+LgcJ1DRjMDBaGSzokn2XfC2U7wn8PFTUsBg94FmpX94rA7 BPgZ+ZjxScNsfHea01Qk18ZhuC3Bar1gZLYZrPXEXGuHyGmZYfb1ZeNZnzGdwZLQ II0taaCsnT1oGfkJ78D69LhVELk8UgJy91S8F/h+RgHgy+OCLvTQJEE+FvaqkDmF V0YJQgJC/v/egkEaTClScQ71Z9+LsD0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:49:42 2025 by rpki-client