$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/950d6944-3a14-3e74-887f-2f81ebbdd130.roa File: 950d6944-3a14-3e74-887f-2f81ebbdd130.roa (raw, json) Hash identifier: hLIG/Load8oI+eCq7vISDCYlfVgxgoxLpUFk8+YA3Q0= Subject key identifier: 36:2E:BB:33:67:27:F9:14:F2:8B:6F:B1:B4:83:48:4D:95:94:74:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BB194B287130FDA5CB78 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/950d6944-3a14-3e74-887f-2f81ebbdd130.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 174.53.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:bb:19:4b:28:71:30:fd:a5:cb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d20689a7-5f1d-4128-af01-c4676755a92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:7c:85:50:a6:d3:2c:a8:21:2f:ab:99:71: bc:6c:03:62:b7:d3:11:f1:71:d3:15:6e:c1:b5:d5: b2:5a:50:8a:b0:5d:f9:9c:06:05:a9:a1:8b:ec:d7: 81:5b:e7:23:37:ba:99:d9:84:1e:4d:36:89:5c:49: 80:3b:b6:78:4b:50:a2:ac:fb:de:0e:47:e9:2e:f6: 2d:44:c8:48:6c:d5:18:36:20:3a:97:f9:d3:17:54: cf:60:cf:4f:1d:a3:15:e2:1e:a0:17:dc:e8:ad:a9: d0:4a:4e:e8:f5:a5:74:4a:2c:45:c8:c7:e8:81:df: 60:6c:7b:25:c4:33:c2:0d:42:97:f0:31:86:cb:5e: 0d:a3:04:c8:18:07:00:dd:35:ca:00:17:6f:b7:0b: 54:83:fd:37:3e:aa:f6:82:c3:e6:c8:7a:c9:f2:12: 89:ac:84:96:28:32:be:5a:e4:04:a3:a5:1b:3f:62: 69:9d:8b:59:6e:d3:a8:03:7e:10:46:2b:d1:dd:b2: 11:40:fa:54:b1:20:37:7f:46:5d:b1:0e:11:9a:8a: 27:8f:c0:f8:ff:7a:f6:6c:fc:c8:fb:6e:e8:d1:d4: f6:69:66:31:f4:ed:d6:34:e5:2e:59:7b:49:7d:53: a0:d7:3d:69:f4:00:9b:81:f2:86:c0:3e:39:bb:83: f2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2E:BB:33:67:27:F9:14:F2:8B:6F:B1:B4:83:48:4D:95:94:74:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/950d6944-3a14-3e74-887f-2f81ebbdd130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.53.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7e:df:14:f5:17:a5:76:6e:0e:1a:bd:be:01:3a:1c:af:69: 01:4d:8f:1b:70:eb:7c:2a:09:5c:88:6f:67:19:50:9d:2c:d4: cf:83:8d:27:66:66:3d:5d:98:fc:7c:77:26:1b:85:85:0e:4c: c0:b8:26:36:82:0e:0b:20:f5:ab:6a:ed:85:e7:34:87:e2:5a: 43:c0:76:74:47:4c:c9:71:dd:c0:13:a4:9c:43:85:bf:17:34: 2e:97:31:75:6d:54:bb:ee:5c:8d:70:55:ce:7d:02:10:95:79: c1:15:0f:9d:e5:9d:fe:bf:36:04:33:b0:b5:80:42:16:dc:ef: 0c:49:f7:41:aa:8c:10:3f:15:ac:24:ce:5e:1c:a3:dc:6e:19: 47:fd:bf:be:aa:06:eb:6f:86:4b:5d:ec:4e:0b:20:f5:6a:f7: 62:30:f1:a6:51:9e:c1:f4:66:40:db:a4:6f:f7:cb:84:8a:c3: be:54:79:5d:77:37:65:a4:6a:56:03:c5:e5:b9:86:f3:9a:43: 4e:58:f0:9c:4a:a5:d3:c9:ee:19:df:52:65:f8:79:da:ff:59: 2b:50:f9:99:54:37:b8:ce:98:da:68:02:61:4b:32:61:0e:b2: ab:08:89:69:97:09:74:ab:41:c7:0a:46:df:2e:76:ae:8b:c9: 5c:36:da:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ubsZSyhxMP2ly3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDIwNjg5YTctNWYxZC00MTI4LWFmMDEtYzQ2NzY3NTVhOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqJ8hVCm0yyoIS+rmXG8bANit9MR8XHTFW7B tdWyWlCKsF35nAYFqaGL7NeBW+cjN7qZ2YQeTTaJXEmAO7Z4S1CirPveDkfpLvYt RMhIbNUYNiA6l/nTF1TPYM9PHaMV4h6gF9zoranQSk7o9aV0SixFyMfogd9gbHsl xDPCDUKX8DGGy14NowTIGAcA3TXKABdvtwtUg/03Pqr2gsPmyHrJ8hKJrISWKDK+ WuQEo6UbP2JpnYtZbtOoA34QRivR3bIRQPpUsSA3f0ZdsQ4Rmoonj8D4/3r2bPzI +27o0dT2aWYx9O3WNOUuWXtJfVOg1z1p9ACbgfKGwD45u4PyswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYuuzNnJ/kU8otvsbSDSE2VlHQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTUwZDY5NDQtM2ExNC0z ZTc0LTg4N2YtMmY4MWViYmRkMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV+3xT1F6V2bg4avb4BOhyvaQFNjxtw63wqCVyIb2cZUJ0s1M+DjSdm Zj1dmPx8dyYbhYUOTMC4JjaCDgsg9atq7YXnNIfiWkPAdnRHTMlx3cATpJxDhb8X NC6XMXVtVLvuXI1wVc59AhCVecEVD53lnf6/NgQzsLWAQhbc7wxJ90GqjBA/Fawk zl4co9xuGUf9v76qButvhktd7E4LIPVq92Iw8aZRnsH0ZkDbpG/3y4SKw75UeV13 N2WkalYDxeW5hvOaQ05Y8JxKpdPJ7hnfUmX4edr/WStQ+ZlUN7jOmNpoAmFLMmEO sqsIiWmXCXSrQccKRt8udq6LyVw22vU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:59 2025 by rpki-client