$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a20d4c41-2bbd-3e3c-9588-2a09c95c42d7.roa File: a20d4c41-2bbd-3e3c-9588-2a09c95c42d7.roa (raw, json) Hash identifier: EUAPo1cprXcPhrjS0puc+rUwTqP0zIDy69al5J+h+0I= Subject key identifier: 8F:A3:07:D7:7B:40:05:43:C6:96:81:5A:AF:D2:AC:63:89:43:BE:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB92FD725ABB15FC894D480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a20d4c41-2bbd-3e3c-9588-2a09c95c42d7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33650 IP address blocks: 174.164.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:2f:d7:25:ab:b1:5f:c8:94:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=87f114e0-0ffd-459f-9b26-8ef29c75cafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:ae:4f:bb:76:e4:a0:98:bb:1a:56:dd:8c: d7:16:bc:9e:5f:30:3b:de:a8:d2:03:6c:00:bd:b8: 81:02:6b:2d:33:77:7e:7e:28:28:61:f6:24:09:1e: 09:d7:3c:e7:59:e9:71:df:21:f9:b4:7c:a4:46:4a: 42:b4:e0:8e:68:db:48:57:28:7f:82:42:f9:15:76: 05:d6:94:d6:75:8c:8a:92:77:54:5e:78:98:dd:e6: b6:70:97:72:38:20:51:f8:fe:0a:94:7f:8d:c5:87: 74:d8:8e:0f:ed:c9:ad:5c:a9:c2:2f:ae:b3:8b:6f: 93:80:b6:96:31:c0:39:be:f6:57:e8:a5:bb:e4:a3: a7:6c:66:1c:40:d3:c1:33:a0:91:ff:98:57:e3:ff: 55:66:e3:93:8c:f5:9b:33:11:74:e6:47:a1:b1:aa: f1:9d:29:7f:06:c5:d3:6f:bb:f9:ab:3f:94:2b:78: c8:69:e4:30:52:7a:02:17:57:53:60:e4:e2:ad:e3: 70:34:57:2d:2f:39:ed:c3:f2:1d:ad:56:81:d5:58: 1b:25:5f:8b:4b:fe:c0:c0:ba:f4:fd:46:15:a4:69: 58:37:61:1d:56:e7:fe:c4:b5:fe:2b:50:e9:4e:fc: 64:3e:7d:21:99:12:4d:7b:09:87:79:d4:75:fd:3c: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A3:07:D7:7B:40:05:43:C6:96:81:5A:AF:D2:AC:63:89:43:BE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a20d4c41-2bbd-3e3c-9588-2a09c95c42d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.164.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9c:99:af:cf:1f:04:e2:b4:64:90:8f:49:41:00:b3:58:69: 81:13:09:cd:43:2b:40:ec:23:ef:ca:c5:59:d1:45:58:72:37: df:e3:6b:1f:96:68:46:fc:2b:f9:22:8e:c8:81:d9:3a:4e:6b: ad:8f:cd:b1:71:46:62:22:38:d0:93:f6:83:66:69:7c:40:4a: 41:a9:33:ee:e8:d9:40:12:98:71:9a:cc:4d:8d:ff:cf:42:77: 55:27:b8:e8:98:89:2b:ff:68:c1:3b:34:86:15:89:83:fd:b6: ae:93:64:81:24:05:6a:0b:71:f7:19:12:38:14:fa:34:01:95: 19:7c:44:83:c1:e0:f2:37:f7:8b:98:e1:c2:bd:c1:91:ca:57: 3c:11:69:81:50:32:77:6f:49:77:8c:8e:3e:1d:e6:45:07:6b: 9e:62:12:8d:60:58:3a:1e:a1:9e:9e:0a:22:18:14:aa:f0:2d: c4:e4:5a:ef:75:2f:b6:0d:37:5c:6b:b4:de:0c:4e:80:24:15: 2c:15:e0:61:a9:75:7b:7d:e1:15:11:1c:2f:d8:4d:a2:61:88: fd:1b:eb:92:7f:60:00:52:20:af:0a:f0:e0:37:40:5d:0d:e6: 5a:bd:9a:f4:fd:df:06:82:a3:8a:4f:46:cd:a2:0a:4b:b2:e1: 10:1b:c1:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs9uS/XJauxX8iU1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODdmMTE0ZTAtMGZmZC00NTlmLTliMjYtOGVmMjljNzVjYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ6uT7t25KCYuxpW3YzXFryeXzA73qjSA2wA vbiBAmstM3d+figoYfYkCR4J1zznWelx3yH5tHykRkpCtOCOaNtIVyh/gkL5FXYF 1pTWdYyKkndUXniY3ea2cJdyOCBR+P4KlH+NxYd02I4P7cmtXKnCL66zi2+TgLaW McA5vvZX6KW75KOnbGYcQNPBM6CR/5hX4/9VZuOTjPWbMxF05kehsarxnSl/BsXT b7v5qz+UK3jIaeQwUnoCF1dTYOTireNwNFctLzntw/IdrVaB1VgbJV+LS/7AwLr0 /UYVpGlYN2EdVuf+xLX+K1DpTvxkPn0hmRJNewmHedR1/TxWwQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI+jB9d7QAVDxpaBWq/SrGOJQ765MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTIwZDRjNDEtMmJiZC0z ZTNjLTk1ODgtMmEwOWM5NWM0MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBrqQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcZyZr88fBOK0ZJCPSUEAs1hpgRMJzUMrQOwj78rFWdFFWHI33+NrH5Zo Rvwr+SKOyIHZOk5rrY/NsXFGYiI40JP2g2ZpfEBKQakz7ujZQBKYcZrMTY3/z0J3 VSe46JiJK/9owTs0hhWJg/22rpNkgSQFagtx9xkSOBT6NAGVGXxEg8Hg8jf3i5jh wr3BkcpXPBFpgVAyd29Jd4yOPh3mRQdrnmISjWBYOh6hnp4KIhgUqvAtxORa73Uv tg03XGu03gxOgCQVLBXgYal1e33hFREcL9hNomGI/Rvrkn9gAFIgrwrw4DdAXQ3m Wr2a9P3fBoKjik9GzaIKS7LhEBvBdA== -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:02 2025 by rpki-client