$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8168f37f-62bd-3e40-b1e1-824d6c901732.roa File: 8168f37f-62bd-3e40-b1e1-824d6c901732.roa (raw, json) Hash identifier: Bbhp07QwGbOfhxblT3ltTMdqjwE0f/hq1fbT6KxxtTc= Subject key identifier: D3:D4:46:96:7F:EB:AA:3A:ED:D7:2B:B3:A5:B3:60:3C:20:CA:FE:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2DAE976808ABE19C7F1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8168f37f-62bd-3e40-b1e1-824d6c901732.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 174.62.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:da:e9:76:80:8a:be:19:c7:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=072abfc2-157e-4146-8d2e-c564a998c8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:dc:b0:c2:89:d7:ab:57:75:81:ea:b3:e9: 77:07:3f:5a:f8:f0:25:a4:6d:c4:8c:08:aa:7d:55: cf:be:0a:ce:40:9a:14:0d:29:77:eb:c6:d5:49:89: dc:b7:a3:90:3d:c2:d4:b1:3b:f2:47:71:06:b5:67: ad:04:b1:f6:37:53:05:e9:69:55:87:f0:1c:56:cd: 4d:e5:16:cd:6e:16:88:41:97:aa:b7:fb:c9:33:09: ae:fd:46:50:35:17:5d:ce:3f:05:a4:13:e9:52:a8: 13:90:c5:f7:99:6d:b3:f9:96:34:c0:4b:2c:66:09: fd:b2:ed:36:9b:78:7e:cb:19:13:bb:a6:04:c4:5a: a5:7c:82:a5:cd:88:b2:97:7c:bf:d9:07:56:95:24: e5:c3:99:58:02:66:c1:ce:63:2c:66:18:f5:85:eb: b6:68:00:e7:c9:2a:fe:bc:5a:ea:1d:a5:04:07:91: 35:80:04:01:1e:01:4d:b4:07:94:8e:63:b8:3b:29: fc:bd:9e:06:32:ed:45:a6:05:bb:31:9b:8e:98:49: 9e:e5:62:35:b0:c2:db:16:9b:5c:37:ac:9d:cb:61: a1:14:25:a4:6b:5d:50:da:13:d8:bd:4a:68:66:03: fb:c8:a7:26:81:86:75:7b:49:56:0c:62:3e:c1:9b: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:46:96:7F:EB:AA:3A:ED:D7:2B:B3:A5:B3:60:3C:20:CA:FE:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8168f37f-62bd-3e40-b1e1-824d6c901732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.62.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1b:2b:24:7a:92:8a:b3:10:7a:32:25:b7:9a:59:53:9d:f2: 56:3a:1f:df:6e:c2:82:d9:de:4c:1c:55:62:e1:b9:a4:b6:2e: 88:6e:f8:16:c5:c1:76:c1:39:c6:45:00:8b:9d:64:2a:43:87: 83:16:d8:18:1a:49:f2:1a:06:06:58:b3:b8:9f:25:91:85:b0: 2b:ba:63:06:d7:ec:6f:89:c0:b9:b4:b0:0a:3d:82:ba:2a:9a: 69:69:9a:00:90:d6:e3:aa:35:a8:4a:79:35:19:81:b5:44:79: d4:1b:39:a3:3e:b3:17:57:66:ac:53:e3:0a:1e:b5:6f:12:40: 49:3e:81:42:18:72:02:05:fe:fe:7c:22:da:b8:99:11:7e:a0: 53:a9:ac:41:28:47:4f:3b:4a:7e:da:41:bb:bc:aa:e0:66:46: da:7e:52:06:2e:26:00:67:b8:49:3b:cd:a4:63:22:68:82:d9: 85:b2:db:30:8d:b0:ad:45:71:f6:f6:dc:55:90:b1:e7:28:09: 99:d7:97:82:14:a0:63:ff:38:ef:1b:65:46:92:22:47:a1:fa: 7c:c2:92:f5:14:c5:5d:cd:81:2c:e3:32:34:3e:4e:fe:41:21: 00:71:17:30:87:6d:28:7e:05:e2:6a:07:4c:b3:21:b2:48:c7: 0c:41:32:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswtrpdoCKvhnH8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDcyYWJmYzItMTU3ZS00MTQ2LThkMmUtYzU2NGE5OThjOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1LcsMKJ16tXdYHqs+l3Bz9a+PAlpG3EjAiq fVXPvgrOQJoUDSl368bVSYnct6OQPcLUsTvyR3EGtWetBLH2N1MF6WlVh/AcVs1N 5RbNbhaIQZeqt/vJMwmu/UZQNRddzj8FpBPpUqgTkMX3mW2z+ZY0wEssZgn9su02 m3h+yxkTu6YExFqlfIKlzYiyl3y/2QdWlSTlw5lYAmbBzmMsZhj1heu2aADnySr+ vFrqHaUEB5E1gAQBHgFNtAeUjmO4Oyn8vZ4GMu1FpgW7MZuOmEme5WI1sMLbFptc N6ydy2GhFCWka11Q2hPYvUpoZgP7yKcmgYZ1e0lWDGI+wZuQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPURpZ/66o67dcrs6WzYDwgyv43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE2OGYzN2YtNjJiZC0z ZTQwLWIxZTEtODI0ZDZjOTAxNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrj58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYbKyR6koqzEHoyJbeaWVOd8lY6H99uwoLZ3kwcVWLhuaS2Lohu+BbF wXbBOcZFAIudZCpDh4MW2BgaSfIaBgZYs7ifJZGFsCu6YwbX7G+JwLm0sAo9groq mmlpmgCQ1uOqNahKeTUZgbVEedQbOaM+sxdXZqxT4woetW8SQEk+gUIYcgIF/v58 Itq4mRF+oFOprEEoR087Sn7aQbu8quBmRtp+UgYuJgBnuEk7zaRjImiC2YWy2zCN sK1Fcfb23FWQsecoCZnXl4IUoGP/OO8bZUaSIkeh+nzCkvUUxV3NgSzjMjQ+Tv5B IQBxFzCHbSh+BeJqB0yzIbJIxwxBMsw= -----END CERTIFICATE-----Generated at Sun Aug 24 02:26:57 2025 by rpki-client