$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0d0eb43-98de-3d94-954f-40e5daa90029.roa File: a0d0eb43-98de-3d94-954f-40e5daa90029.roa (raw, json) Hash identifier: iyx3f6vnat3vwk5TDY0v5iG/oCIqvtLPCONX4POnV1M= Subject key identifier: F9:B6:4B:71:D3:70:E1:03:AF:69:00:B0:8E:72:73:87:91:EE:61:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE99DD7350C80F03924B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0d0eb43-98de-3d94-954f-40e5daa90029.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 174.171.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:99:dd:73:50:c8:0f:03:92:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=e5a8c8df-ac87-4559-ba3f-97b414e1de82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:01:a2:25:1c:66:a6:19:92:12:b0:a4:f0: 43:13:0d:9f:6a:ab:dd:0a:b6:1e:1c:60:84:b7:c1: 5e:a7:83:23:12:0c:6c:f6:e3:90:2b:c3:d8:23:97: 4f:f5:90:0c:25:d3:42:e6:fe:25:87:31:2e:44:40: e7:e6:3a:98:8f:8a:32:e2:45:14:94:71:5a:d0:00: 1b:92:bc:47:aa:19:ac:39:d6:cb:6e:44:98:5e:80: 9a:da:2f:6a:69:9e:29:2a:6a:9b:55:06:8b:86:07: c5:e1:c9:f0:b3:02:5d:95:a7:1e:c4:a5:25:c8:7c: 2a:14:a4:40:25:45:fb:66:72:e6:c6:d0:58:ae:f2: d5:33:53:7c:6b:66:1e:8b:3b:5f:47:5c:67:ad:e5: b9:80:52:ea:84:92:b0:8e:7a:a5:15:76:bd:3b:88: c3:73:43:50:38:fc:aa:1b:af:0e:68:83:f9:b4:99: 74:d3:f0:f1:96:60:27:5e:88:d5:cc:61:57:45:1e: a0:f7:8a:57:0b:32:3d:6c:49:ef:e0:19:73:47:61: 68:3f:46:72:25:c9:d5:71:d2:5f:0a:dd:78:7e:dd: fb:9d:3a:21:94:a8:6a:e9:09:5a:97:e0:26:a9:36: 75:5e:79:4a:7a:1f:68:e8:97:d6:20:6d:60:04:b4: 2d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B6:4B:71:D3:70:E1:03:AF:69:00:B0:8E:72:73:87:91:EE:61:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0d0eb43-98de-3d94-954f-40e5daa90029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:20:10:37:95:c7:5e:ce:03:3f:c1:97:2d:6d:f1:8c:99:4b: 43:93:09:44:92:d1:25:d8:93:74:8d:c5:4a:7c:9f:1c:f8:ab: 3f:3f:52:c7:ba:de:0e:8e:f0:ed:58:ff:44:ef:3e:76:14:d1: 35:12:ed:68:88:0c:c0:0a:9c:43:18:85:37:0d:a9:d2:73:12: c9:b9:8a:ac:68:38:e1:4f:3b:d5:44:8c:d9:34:5e:e7:f5:e3: a5:a2:6a:c9:72:11:f1:5e:86:88:81:7a:f8:97:1e:22:68:40: 56:47:2e:e4:b4:3b:b9:3b:2b:66:6c:42:78:8f:c7:ab:c0:84: a8:a8:87:00:3c:94:06:9f:73:98:d1:59:fd:18:0f:4e:b9:a6: 16:ca:16:50:c5:a2:fb:5a:f5:b1:0d:08:ee:df:99:a1:f0:5f: 3b:de:a1:cc:9f:34:e7:dd:89:ef:cf:3d:9f:95:24:3e:5d:71: 6e:36:31:74:93:5b:ad:42:49:ba:5b:f8:2a:3e:ab:c2:1b:0c: 05:bf:a6:e7:1c:4d:70:50:bf:8f:ce:87:8d:d0:fd:5f:6a:97: 44:28:78:49:ce:1c:90:20:49:80:82:1b:e0:55:3c:81:28:19: b5:40:ec:d9:dc:21:4f:cb:d2:58:5f:6a:33:f3:ba:94:b9:61: 26:f7:21:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07pndc1DIDwOSSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTVhOGM4ZGYtYWM4Ny00NTU5LWJhM2YtOTdiNDE0ZTFkZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKcBoiUcZqYZkhKwpPBDEw2faqvdCrYeHGCE t8Fep4MjEgxs9uOQK8PYI5dP9ZAMJdNC5v4lhzEuREDn5jqYj4oy4kUUlHFa0AAb krxHqhmsOdbLbkSYXoCa2i9qaZ4pKmqbVQaLhgfF4cnwswJdlacexKUlyHwqFKRA JUX7ZnLmxtBYrvLVM1N8a2YeiztfR1xnreW5gFLqhJKwjnqlFXa9O4jDc0NQOPyq G68OaIP5tJl00/DxlmAnXojVzGFXRR6g94pXCzI9bEnv4BlzR2FoP0ZyJcnVcdJf Ct14ft37nTohlKhq6Qlal+AmqTZ1XnlKeh9o6JfWIG1gBLQtTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm2S3HTcOEDr2kAsI5yc4eR7mH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBkMGViNDMtOThkZS0z ZDk0LTk1NGYtNDBlNWRhYTkwMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKogEDeVx17OAz/Bly1t8YyZS0OTCUSS0SXYk3SNxUp8nxz4qz8/Use6 3g6O8O1Y/0TvPnYU0TUS7WiIDMAKnEMYhTcNqdJzEsm5iqxoOOFPO9VEjNk0Xuf1 46WiaslyEfFehoiBeviXHiJoQFZHLuS0O7k7K2ZsQniPx6vAhKiohwA8lAafc5jR Wf0YD065phbKFlDFovta9bENCO7fmaHwXzveocyfNOfdie/PPZ+VJD5dcW42MXST W61CSbpb+Co+q8IbDAW/puccTXBQv4/Oh43Q/V9ql0QoeEnOHJAgSYCCG+BVPIEo GbVA7NncIU/L0lhfajPzupS5YSb3IaA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:53 2025 by rpki-client