$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa File: 89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa (raw, json) Hash identifier: wUU1fx0wh0UMGUWq7Mw94uoIw/cqDlO3CxAGxfXM11I= Subject key identifier: 23:5C:12:B6:65:03:43:28:5F:AA:57:22:7F:B6:FB:85:0A:4E:A8:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031243143C9DA6E80B00BE8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 174.163.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:24:31:43:c9:da:6e:80:b0:0b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=995a4d5e-c91e-4de9-9e73-f2e7b1e99949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:7b:66:f4:7f:8e:20:87:79:5f:6e:e9:46: ac:d1:54:e9:01:38:ee:56:59:1d:a2:48:fa:29:1c: ae:b7:ad:72:27:a7:56:6a:a7:7d:a9:88:0a:0f:f0: ea:6a:4a:92:c1:36:93:3b:d1:29:6f:15:b3:d1:a8: 7e:ba:60:49:2b:85:9f:49:3e:30:a7:90:99:a6:30: d5:7d:7a:71:bc:7f:a9:2f:21:c2:92:56:e1:68:9e: 0b:c9:86:af:cd:a1:58:ff:a7:fe:bc:52:ad:48:24: 5b:df:df:16:1d:60:5d:3a:de:23:f8:1d:2b:9b:38: 23:67:71:fc:d1:e7:98:6e:3e:7b:cd:5a:46:e4:7f: 0d:45:15:4e:d7:0a:16:24:11:90:4b:88:d3:bc:ed: 66:06:86:4e:65:f7:f5:f4:4a:be:50:23:cc:74:b6: 36:9c:ec:49:2a:4a:02:9d:bf:26:d4:22:8f:20:0c: c9:ad:4a:be:52:e7:b1:d7:29:8f:34:20:26:61:e8: f9:ae:05:41:b6:dc:ae:d7:c4:1c:7e:6e:ed:e6:5b: 89:79:e1:5d:e6:0d:82:46:36:40:28:a2:da:0e:d8: 41:1a:20:4e:01:aa:57:69:e1:9c:83:65:d8:d4:e9: 47:a1:fb:62:1f:5f:84:59:07:0f:00:93:a0:5a:dd: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5C:12:B6:65:03:43:28:5F:AA:57:22:7F:B6:FB:85:0A:4E:A8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.163.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:36:3e:2d:61:00:73:32:59:c3:bb:c2:e1:8c:a5:9c:cf:24: 92:3b:75:f6:86:76:cd:96:7d:07:5e:a9:e4:d5:05:62:51:52: 7b:ac:c6:99:b0:89:69:8a:a3:af:fc:86:ff:62:1e:70:25:cf: dc:27:5e:9c:b0:d0:13:1f:2d:e9:b3:a9:8f:27:8d:14:70:ce: 9a:03:a1:62:03:97:2f:a3:be:25:c1:5f:2f:25:20:17:dc:bb: f1:35:ab:67:e7:8d:a7:75:3c:bc:3d:08:a2:5e:95:a1:e5:87: 1b:26:2e:f1:ae:75:bb:42:24:5d:6c:9c:77:c1:34:5a:a5:ee: 39:69:c1:ac:5d:a1:11:e8:4b:da:ee:13:a9:24:d7:6f:37:ff: 16:0e:8d:f3:d8:54:16:4f:96:d6:56:6b:ec:f2:e4:f7:95:16: aa:1b:76:98:03:22:e9:a2:43:1e:07:02:26:91:72:4a:57:0c: 89:50:4b:33:e7:d6:67:76:ee:df:d2:11:76:20:74:3b:2f:7e: d2:49:96:92:b9:52:fa:71:71:5e:c9:0c:5d:05:94:75:e3:5c: 8c:46:64:2a:6e:23:4b:d8:3a:c6:f4:19:f5:cc:d0:bf:2f:ba: b3:ee:2b:9a:ec:de:4d:53:92:47:77:6a:a4:58:05:0d:af:3d: 09:8a:2d:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMSQxQ8naboCwC+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk OTk1YTRkNWUtYzkxZS00ZGU5LTllNzMtZjJlN2IxZTk5OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F97ZvR/jiCHeV9u6Uas0VTpATjuVlkdokj6 KRyut61yJ6dWaqd9qYgKD/DqakqSwTaTO9EpbxWz0ah+umBJK4WfST4wp5CZpjDV fXpxvH+pLyHCklbhaJ4LyYavzaFY/6f+vFKtSCRb398WHWBdOt4j+B0rmzgjZ3H8 0eeYbj57zVpG5H8NRRVO1woWJBGQS4jTvO1mBoZOZff19Eq+UCPMdLY2nOxJKkoC nb8m1CKPIAzJrUq+Uuex1ymPNCAmYej5rgVBttyu18Qcfm7t5luJeeFd5g2CRjZA KKLaDthBGiBOAapXaeGcg2XY1OlHoftiH1+EWQcPAJOgWt26kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNcErZlA0MoX6pXIn+2+4UKTqiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODliOWE0OWYtMWE5Zi0z ZTA3LWI1MmEtY2YxZmJkM2U2MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM2Pi1hAHMyWcO7wuGMpZzPJJI7dfaGds2WfQdeqeTVBWJRUnusxpmw iWmKo6/8hv9iHnAlz9wnXpyw0BMfLemzqY8njRRwzpoDoWIDly+jviXBXy8lIBfc u/E1q2fnjad1PLw9CKJelaHlhxsmLvGudbtCJF1snHfBNFql7jlpwaxdoRHoS9ru E6kk1283/xYOjfPYVBZPltZWa+zy5PeVFqobdpgDIumiQx4HAiaRckpXDIlQSzPn 1md27t/SEXYgdDsvftJJlpK5UvpxcV7JDF0FlHXjXIxGZCpuI0vYOsb0GfXM0L8v urPuK5rs3k1Tkkd3aqRYBQ2vPQmKLas= -----END CERTIFICATE-----Generated at Sat Aug 23 22:56:18 2025 by rpki-client