$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97f1f64f-9c4a-3f47-883d-aca13e726e4c.roa File: 97f1f64f-9c4a-3f47-883d-aca13e726e4c.roa (raw, json) Hash identifier: BTaFfspYcULsFhNrpcs0Jw072xwJ/92N77zmfrHNVzo= Subject key identifier: FB:3F:37:7A:C8:F7:4E:C8:D7:D4:88:88:AF:CE:53:79:5B:61:30:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7ECB97EDBA6B4E4EC4080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97f1f64f-9c4a-3f47-883d-aca13e726e4c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 174.180.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ec:b9:7e:db:a6:b4:e4:ec:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5fde17e0-6f5a-445e-a28f-13d4cc65223a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:d5:ed:e3:eb:7d:1d:a5:e9:78:0c:bb:d4: 75:a3:4e:fb:6b:f4:fc:e5:55:04:a8:c4:d1:41:07: d6:59:1f:86:21:72:37:53:df:d2:34:24:93:63:36: 5d:9c:7d:69:a9:40:18:19:14:71:9c:3f:61:25:f4: be:c3:bb:36:7c:3a:bb:85:d0:60:ea:f9:1e:d5:ca: 04:1c:64:bf:1c:82:30:2f:36:67:e7:83:52:8b:14: 66:5e:7b:1b:ba:c2:04:dc:2a:fd:e0:1e:13:64:4f: 4d:54:cf:3c:2b:d5:98:73:ca:09:88:3e:93:3b:12: 7a:ba:cb:33:f2:ae:c2:75:dc:4e:ef:1c:1d:c3:0d: e9:44:33:bd:3c:0b:6b:50:a2:1f:4b:7e:be:5a:8a: 0e:91:26:24:2b:21:90:56:a9:ba:f9:98:12:b2:6c: 07:16:71:19:d3:db:19:6a:b1:b4:34:d2:2c:67:d0: 44:8f:94:a4:c6:83:8c:dd:a9:ca:5b:42:fd:a6:a5: 67:5b:3a:f5:74:b2:48:76:62:8c:e6:fe:45:5a:c0: 3c:96:e5:3a:ec:38:16:a9:59:e3:9b:3a:28:f2:06: f6:e8:0d:f5:6b:12:40:ba:81:b5:80:56:fd:e4:c9: 0e:5c:21:aa:c4:6c:a4:2b:62:70:62:93:7f:d1:3e: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:37:7A:C8:F7:4E:C8:D7:D4:88:88:AF:CE:53:79:5B:61:30:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97f1f64f-9c4a-3f47-883d-aca13e726e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.180.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:df:2b:81:9b:e5:99:bb:b2:29:45:14:5f:56:cb:e9:48:b1: fd:8b:18:0c:60:ac:1b:f0:7a:fb:b7:08:3c:55:23:aa:38:7a: 01:cc:76:7a:b1:75:10:3b:cb:24:30:20:2c:5c:ed:92:49:16: 15:ce:c4:1f:3b:c6:67:85:21:94:c2:cd:37:c0:53:45:72:4f: ea:f8:02:13:f3:07:26:26:35:47:5b:ab:ee:d5:8b:6d:d0:f7: 27:ea:31:a1:e9:84:ae:8e:63:70:b1:eb:03:d6:8e:d8:3f:59: 50:2a:c7:b6:76:b2:c9:74:39:fe:06:e0:a0:dc:53:83:a2:49: 36:2c:59:45:ff:34:9d:af:81:8f:c1:37:00:05:29:c7:cb:2a: a0:b3:49:b5:f4:c6:85:ed:ef:4d:8f:ad:17:ee:c9:84:bb:18: af:f3:7f:6f:7e:4f:5f:e7:62:ed:29:9c:b7:df:66:05:49:2d: 98:e7:83:49:fc:33:8e:07:cd:fb:2f:b2:fb:eb:c6:ca:27:33: 73:82:8e:b7:58:49:ee:e1:4c:72:ef:fd:07:3c:ae:23:74:6c: 5b:85:a5:7d:69:3b:a1:e2:60:4e:92:0a:86:2b:6c:16:6c:d0: 01:5d:f3:6d:f8:d1:19:3e:c6:f0:d2:5b:41:37:95:68:76:f7: 7b:e3:68:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+y5ftumtOTsQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWZkZTE3ZTAtNmY1YS00NDVlLWEyOGYtMTNkNGNjNjUyMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnbV7ePrfR2l6XgMu9R1o077a/T85VUEqMTR QQfWWR+GIXI3U9/SNCSTYzZdnH1pqUAYGRRxnD9hJfS+w7s2fDq7hdBg6vke1coE HGS/HIIwLzZn54NSixRmXnsbusIE3Cr94B4TZE9NVM88K9WYc8oJiD6TOxJ6ussz 8q7CddxO7xwdww3pRDO9PAtrUKIfS36+WooOkSYkKyGQVqm6+ZgSsmwHFnEZ09sZ arG0NNIsZ9BEj5SkxoOM3anKW0L9pqVnWzr1dLJIdmKM5v5FWsA8luU67DgWqVnj mzoo8gb26A31axJAuoG1gFb95MkOXCGqxGykK2JwYpN/0T6CIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs/N3rI907I19SIiK/OU3lbYTAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTdmMWY2NGYtOWM0YS0z ZjQ3LTg4M2QtYWNhMTNlNzI2ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrrRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbfK4Gb5Zm7silFFF9Wy+lIsf2LGAxgrBvwevu3CDxVI6o4egHMdnqx dRA7yyQwICxc7ZJJFhXOxB87xmeFIZTCzTfAU0VyT+r4AhPzByYmNUdbq+7Vi23Q 9yfqMaHphK6OY3Cx6wPWjtg/WVAqx7Z2ssl0Of4G4KDcU4OiSTYsWUX/NJ2vgY/B NwAFKcfLKqCzSbX0xoXt702PrRfuyYS7GK/zf29+T1/nYu0pnLffZgVJLZjng0n8 M44HzfsvsvvrxsonM3OCjrdYSe7hTHLv/Qc8riN0bFuFpX1pO6HiYE6SCoYrbBZs 0AFd82340Rk+xvDSW0E3lWh293vjaO8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:37:15 2025 by rpki-client