$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74da3c1b-ff6e-3a81-b813-6693a7393ead.roa File: 74da3c1b-ff6e-3a81-b813-6693a7393ead.roa (raw, json) Hash identifier: n4As2tM3avX9vyhM8Uw4K9eyRrIlaOT4fq9Fb8fflCY= Subject key identifier: 66:D1:76:84:D8:A6:72:FE:C2:4D:9B:AE:60:33:A3:3A:A6:CC:F1:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7B02DCFEE85276A799380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74da3c1b-ff6e-3a81-b813-6693a7393ead.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33660 IP address blocks: 162.151.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:b0:2d:cf:ee:85:27:6a:79:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3ee8e2b5-d7bb-4af2-8dea-c6318580f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:f3:cd:25:f3:90:85:88:53:f5:26:9e:f6: 34:29:c2:5a:2b:59:aa:75:9e:c5:83:2c:26:e5:00: c0:8d:67:ae:50:a9:c8:f4:d0:81:68:26:1f:53:da: 2c:ab:45:4b:73:e4:99:64:e7:71:98:0a:cf:9d:ad: 3d:73:b3:15:a9:29:e2:1c:30:3a:ad:14:74:8e:d4: bc:23:85:f0:4c:d2:f8:71:2b:59:de:e0:fd:4e:f7: b5:13:54:aa:bc:fc:50:34:3b:7c:3c:5d:74:0d:4b: af:06:de:99:1e:da:b0:85:d9:ff:ea:04:ed:17:17: e3:77:00:2c:de:e4:3a:1c:c7:6b:19:de:4d:9b:ce: 21:f6:74:d5:b6:2e:f9:cf:6b:28:e8:7f:54:05:7b: d6:cc:94:e7:a2:b6:df:3b:eb:07:a6:16:8c:c4:13: 37:ce:be:da:29:a5:d6:d6:a4:8d:9b:4d:99:0d:6f: 75:4f:de:08:ee:3f:e2:2d:79:ea:1e:73:e4:43:83: be:92:59:4d:73:78:6b:a5:d0:68:9b:c4:e8:b9:c3: 76:2f:f3:6d:57:5c:6c:2b:c7:cc:6c:80:22:ca:12: 2e:b6:2b:d9:f4:c6:32:04:14:1e:be:49:8b:eb:19: eb:28:a5:ba:a6:51:65:ad:ae:75:03:f8:86:70:06: 5e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:76:84:D8:A6:72:FE:C2:4D:9B:AE:60:33:A3:3A:A6:CC:F1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74da3c1b-ff6e-3a81-b813-6693a7393ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 162.151.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f6:15:25:cb:25:0a:0a:c8:cd:98:af:6b:d2:17:a6:21:d9: 40:3d:ea:d8:34:cd:c8:bb:3d:c1:bb:3d:11:53:42:3a:08:fb: 9a:73:4b:35:1a:df:ac:fc:b2:5f:0d:ae:5f:54:68:dd:0e:09: 4f:c8:9e:09:28:f5:08:6c:4e:6c:85:c2:63:7e:b4:de:2a:6a: 75:d3:8d:b3:66:14:95:95:e7:54:1f:9e:ef:46:2f:93:33:29: cb:92:1e:25:41:19:b0:4b:23:56:58:0b:e2:96:fb:d7:67:6f: 81:87:01:a1:a7:09:af:6a:96:5e:26:ef:06:2d:6e:98:a8:10: 9b:5d:2a:9f:3e:8d:45:8b:96:81:46:6a:83:c5:23:97:66:40: 83:41:c9:4f:60:cd:43:60:79:41:9d:a0:74:c2:75:5c:0a:cd: 78:5a:ad:a7:b1:28:d4:c8:cc:ef:fa:71:03:d8:0f:24:d7:da: 78:22:f3:15:a7:50:fa:ae:a3:45:7a:e6:07:16:e9:f1:02:8f: f8:f9:fb:6c:9b:26:d5:1f:e7:e8:47:aa:2c:78:e9:ca:56:ff: ac:c1:20:1e:fb:fa:a8:54:8f:4f:22:4e:9a:98:6b:9c:55:57: 7b:49:2b:af:67:e3:ba:28:38:f7:4e:eb:34:67:a0:8e:d2:36: b9:f3:0a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t7Atz+6FJ2p5k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2VlOGUyYjUtZDdiYi00YWYyLThkZWEtYzYzMTg1ODBmODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7XzzSXzkIWIU/UmnvY0KcJaK1mqdZ7Fgywm 5QDAjWeuUKnI9NCBaCYfU9osq0VLc+SZZOdxmArPna09c7MVqSniHDA6rRR0jtS8 I4XwTNL4cStZ3uD9Tve1E1SqvPxQNDt8PF10DUuvBt6ZHtqwhdn/6gTtFxfjdwAs 3uQ6HMdrGd5Nm84h9nTVti75z2so6H9UBXvWzJTnorbfO+sHphaMxBM3zr7aKaXW 1qSNm02ZDW91T94I7j/iLXnqHnPkQ4O+kllNc3hrpdBom8ToucN2L/NtV1xsK8fM bIAiyhIutivZ9MYyBBQevkmL6xnrKKW6plFlra51A/iGcAZenwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbRdoTYpnL+wk2brmAzozqmzPE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzRkYTNjMWItZmY2ZS0z YTgxLWI4MTMtNjY5M2E3MzkzZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAopcrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT2FSXLJQoKyM2Yr2vSF6Yh2UA96tg0zci7PcG7PRFTQjoI+5pzSzUa 36z8sl8Nrl9UaN0OCU/Ingko9QhsTmyFwmN+tN4qanXTjbNmFJWV51Qfnu9GL5Mz KcuSHiVBGbBLI1ZYC+KW+9dnb4GHAaGnCa9qll4m7wYtbpioEJtdKp8+jUWLloFG aoPFI5dmQINByU9gzUNgeUGdoHTCdVwKzXharaexKNTIzO/6cQPYDyTX2ngi8xWn UPquo0V65gcW6fECj/j5+2ybJtUf5+hHqix46cpW/6zBIB77+qhUj08iTpqYa5xV V3tJK69n47ooOPdO6zRnoI7SNrnzCg4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:48:24 2025 by rpki-client