$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9677910a-ed88-3cd7-b124-430ed871fdd3.roa File: 9677910a-ed88-3cd7-b124-430ed871fdd3.roa (raw, json) Hash identifier: 0xgjKdoqZ0N+SWpbiPmrC/NbpSMCG+gEa0SBJMpPJS0= Subject key identifier: A1:7A:77:E2:8A:38:3D:77:C2:A8:2C:AF:69:12:93:F5:BD:97:64:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1FFC7C4FEC7E6B1AFC700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9677910a-ed88-3cd7-b124-430ed871fdd3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 174.173.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:ff:c7:c4:fe:c7:e6:b1:af:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3fa6d297-3c07-4a4a-bdf3-dd0ad9a1ad66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:b5:c6:8d:e3:b6:3d:3c:13:9b:69:13:6a: cd:ea:f1:20:5a:ce:28:12:a9:2e:c7:37:97:74:c6: 00:ef:9d:7f:eb:f2:42:98:ef:a0:f5:4a:90:85:3e: d3:b6:7e:5b:28:28:ed:4f:a7:de:ff:eb:2b:58:96: a8:9a:85:17:dc:12:00:0f:fe:97:a7:34:68:fd:82: ef:1d:2e:59:8b:15:dd:d7:3f:55:b2:f7:24:f3:07: 1e:87:42:57:80:9e:14:75:90:dd:a0:22:4f:c5:2e: 2b:d6:6d:b4:22:ca:95:f2:b9:ae:1a:67:c0:31:03: de:0e:35:d4:46:49:c7:27:da:e7:c9:29:ec:99:11: bb:f6:96:2d:ed:fc:32:a8:c2:d6:28:8c:b2:8d:da: c3:9e:e2:a5:19:a7:68:af:b9:a1:f5:16:38:aa:77: 96:b1:ea:9c:e8:7a:14:c2:98:d4:08:fc:41:6c:b0: fe:9e:95:23:95:34:ff:b7:f9:28:c3:4c:16:33:f8: 71:92:c5:e6:b8:3e:17:da:7a:2b:5a:64:f0:96:e3: 25:ac:b8:be:44:02:a3:58:53:d1:22:84:43:fd:2e: 3c:b8:e9:ca:91:a8:bb:43:6c:95:10:12:08:fa:f0: 94:9d:25:04:db:80:aa:a4:f9:95:38:0f:0d:f6:4a: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7A:77:E2:8A:38:3D:77:C2:A8:2C:AF:69:12:93:F5:BD:97:64:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9677910a-ed88-3cd7-b124-430ed871fdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f9:c8:87:0d:d4:ab:b8:13:98:35:ed:91:5f:2a:c8:d0:15: d8:aa:a2:94:8d:56:5a:97:0b:78:b2:a4:06:3e:05:0f:67:e7: 90:49:93:15:10:59:e5:3c:05:9e:09:60:3c:91:9c:53:31:19: d1:af:74:7d:fe:15:91:ef:92:a9:96:c9:ad:79:3c:f2:d2:5a: cb:4f:9b:e1:18:a3:95:eb:14:88:5b:c6:cf:ea:c6:af:ef:47: 89:53:e2:24:33:cc:fc:31:b2:5c:d8:c6:a7:d8:5a:93:bf:32: 14:fb:a8:24:e7:6f:f1:5d:f1:2d:c7:43:3e:c5:b8:27:06:48: c5:58:81:86:65:39:c2:cc:e5:8e:32:4f:07:f1:1b:50:4d:23: 44:6f:58:21:54:75:ef:3f:47:22:04:2b:35:4e:11:14:33:82: 59:95:38:5d:89:43:c7:19:c8:70:71:b8:3d:df:ff:4b:a4:c3: fe:92:a8:46:2e:de:6b:59:d0:b0:97:ba:d3:e1:75:20:c3:c0: 3d:d6:a9:45:be:cc:49:2b:d7:0c:00:da:6f:50:55:0a:78:ce: f2:25:8a:65:f3:cd:7d:b1:5f:e9:c7:ae:e4:ad:25:6d:66:fa: 61:52:17:73:6a:b1:04:fa:f9:18:8a:2f:ea:00:e8:4c:36:57: 43:2f:1d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswf/HxP7H5rGvxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2ZhNmQyOTctM2MwNy00YTRhLWJkZjMtZGQwYWQ5YTFhZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij+1xo3jtj08E5tpE2rN6vEgWs4oEqkuxzeX dMYA751/6/JCmO+g9UqQhT7Ttn5bKCjtT6fe/+srWJaomoUX3BIAD/6XpzRo/YLv HS5ZixXd1z9Vsvck8wceh0JXgJ4UdZDdoCJPxS4r1m20IsqV8rmuGmfAMQPeDjXU RknHJ9rnySnsmRG79pYt7fwyqMLWKIyyjdrDnuKlGador7mh9RY4qneWseqc6HoU wpjUCPxBbLD+npUjlTT/t/kow0wWM/hxksXmuD4X2norWmTwluMlrLi+RAKjWFPR IoRD/S48uOnKkai7Q2yVEBII+vCUnSUE24CqpPmVOA8N9krGzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF6d+KKOD13wqgsr2kSk/W9l2RQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY3NzkxMGEtZWQ4OC0z Y2Q3LWIxMjQtNDMwZWQ4NzFmZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb5yIcN1Ku4E5g17ZFfKsjQFdiqopSNVlqXC3iypAY+BQ9n55BJkxUQ WeU8BZ4JYDyRnFMxGdGvdH3+FZHvkqmWya15PPLSWstPm+EYo5XrFIhbxs/qxq/v R4lT4iQzzPwxslzYxqfYWpO/MhT7qCTnb/Fd8S3HQz7FuCcGSMVYgYZlOcLM5Y4y TwfxG1BNI0RvWCFUde8/RyIEKzVOERQzglmVOF2JQ8cZyHBxuD3f/0ukw/6SqEYu 3mtZ0LCXutPhdSDDwD3WqUW+zEkr1wwA2m9QVQp4zvIlimXzzX2xX+nHruStJW1m +mFSF3NqsQT6+RiKL+oA6Ew2V0MvHf0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:56:54 2025 by rpki-client