$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a940ae54-3ffe-369a-a136-198fc307a6a2.roa File: a940ae54-3ffe-369a-a136-198fc307a6a2.roa (raw, json) Hash identifier: dqrWhq2EyHMNP+uQCeOghs+5KoehzJ6b6V+/he9y7yQ= Subject key identifier: C0:2F:1E:15:38:B6:A0:B8:A5:DA:54:0A:A8:74:40:5F:51:9C:44:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BAAAB5F87066FBA359E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a940ae54-3ffe-369a-a136-198fc307a6a2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 173.165.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:ba:aa:b5:f8:70:66:fb:a3:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=abbbfd1f-e722-4af0-a0b4-5dab7c30c30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:74:63:39:19:94:21:2d:d1:9f:d0:77:03:47: 1b:6c:2e:1c:b7:76:1a:f7:3f:4e:a2:af:c7:36:b2: 46:36:be:7c:a7:3b:3d:4f:0b:c4:80:f1:13:82:62: e1:10:4d:04:e6:41:af:c6:58:62:d8:1f:8f:44:b9: 27:6b:0a:ec:6c:a3:09:e3:59:9e:c8:6e:de:7e:8f: f8:79:68:e7:10:84:9e:8e:6e:82:d7:5a:ab:e7:53: be:a0:52:0f:5a:20:24:9e:15:04:b5:1f:bd:88:09: 2b:ad:19:39:c3:e2:94:01:49:4c:45:e8:76:d6:25: 17:f9:81:1f:a3:50:eb:34:78:73:26:1c:26:99:26: bb:72:3b:b5:1a:93:c7:bb:b4:ae:03:e9:63:25:68: 85:5d:81:e5:e7:83:32:7a:26:71:1d:0f:d6:18:92: b1:2e:bc:48:b3:5b:f0:0f:a0:57:94:be:a6:d4:4e: 45:e1:0b:52:03:01:dd:5b:50:7e:81:b3:44:06:e8: ae:c0:10:f6:33:4c:dd:ca:d6:21:48:9c:07:6f:f5: 5d:ef:04:8e:99:58:23:c0:78:ee:96:44:0d:c0:0f: 58:89:cd:7d:58:18:23:1f:4f:9a:43:71:ca:3c:59: 10:99:fa:5b:07:68:30:a3:b7:4b:0a:17:65:4e:67: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2F:1E:15:38:B6:A0:B8:A5:DA:54:0A:A8:74:40:5F:51:9C:44:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a940ae54-3ffe-369a-a136-198fc307a6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.165.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:c9:b1:22:29:6f:00:8c:55:50:81:68:98:10:24:f0:9f:18: 35:87:46:66:5a:ac:77:f2:b5:14:4c:9a:5d:55:88:a2:9c:92: 62:7e:2c:f9:5e:85:78:8b:4c:46:e8:3a:93:f2:97:b7:61:e1: 59:5b:34:02:ae:88:b1:9b:70:64:f1:27:f9:87:53:14:52:89: 68:a6:ac:15:25:b5:48:d4:0d:63:72:79:31:b1:6f:e0:85:16: 3a:93:a9:09:de:ef:7f:d4:cd:74:f4:55:10:6c:00:a2:f8:fe: e8:0f:ec:a2:0c:1d:bc:44:76:7d:40:e7:4d:10:53:b6:3f:93: 8d:94:d8:9a:b0:8e:8e:76:8e:14:72:2b:85:32:4a:b6:ef:ab: 15:65:32:56:0a:d2:21:81:0c:01:4c:fb:0f:c3:40:71:0f:ff: b6:3a:f4:68:33:82:2b:29:04:6e:74:96:ec:c9:b4:4d:07:5e: 58:2a:c5:d5:3b:67:2f:bd:8c:14:d4:8e:a0:88:15:e6:34:2c: 14:0e:11:45:1a:00:43:3e:32:14:ef:ac:ae:7a:26:7d:26:03: c9:cb:53:13:c4:f0:6c:ba:b2:98:e7:ed:ba:3c:c9:c2:bd:de: 96:b0:9b:2f:5b:b1:bc:fa:a2:f5:02:98:25:67:22:7e:d6:a0: df:2d:e3:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ubqqtfhwZvujWeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YWJiYmZkMWYtZTcyMi00YWYwLWEwYjQtNWRhYjdjMzBjMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHRjORmUIS3Rn9B3A0cbbC4ct3Ya9z9Ooq/H NrJGNr58pzs9TwvEgPETgmLhEE0E5kGvxlhi2B+PRLknawrsbKMJ41meyG7efo/4 eWjnEISejm6C11qr51O+oFIPWiAknhUEtR+9iAkrrRk5w+KUAUlMReh21iUX+YEf o1DrNHhzJhwmmSa7cju1GpPHu7SuA+ljJWiFXYHl54MyeiZxHQ/WGJKxLrxIs1vw D6BXlL6m1E5F4QtSAwHdW1B+gbNEBuiuwBD2M0zdytYhSJwHb/Vd7wSOmVgjwHju lkQNwA9Yic19WBgjH0+aQ3HKPFkQmfpbB2gwo7dLChdlTmdFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAvHhU4tqC4pdpUCqh0QF9RnET4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk0MGFlNTQtM2ZmZS0z NjlhLWExMzYtMTk4ZmMzMDdhNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFraXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfJsSIpbwCMVVCBaJgQJPCfGDWHRmZarHfytRRMml1ViKKckmJ+LPle hXiLTEboOpPyl7dh4VlbNAKuiLGbcGTxJ/mHUxRSiWimrBUltUjUDWNyeTGxb+CF FjqTqQne73/UzXT0VRBsAKL4/ugP7KIMHbxEdn1A500QU7Y/k42U2Jqwjo52jhRy K4UySrbvqxVlMlYK0iGBDAFM+w/DQHEP/7Y69GgzgispBG50luzJtE0HXlgqxdU7 Zy+9jBTUjqCIFeY0LBQOEUUaAEM+MhTvrK56Jn0mA8nLUxPE8Gy6spjn7bo8ycK9 3pawmy9bsbz6ovUCmCVnIn7WoN8t4ys= -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:38 2025 by rpki-client