$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6998c58-d1de-3ce2-8961-250f3721dc81.roa File: b6998c58-d1de-3ce2-8961-250f3721dc81.roa (raw, json) Hash identifier: XRX2tM5Qnb7OkJv9nMpRgmxHJD8mtZFhuGTgHHrrv7M= Subject key identifier: 60:D9:6C:00:76:58:2D:0A:DE:12:AE:82:F5:4F:E1:35:96:8E:FA:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB77FB514D0562B52AD3C20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6998c58-d1de-3ce2-8961-250f3721dc81.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 21508 IP address blocks: 174.53.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:7f:b5:14:d0:56:2b:52:ad:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=7cfdd0a4-c069-4f9e-867f-abfe4b485ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:0d:e5:e2:d0:90:3d:7c:3d:d5:34:c3:3a: 9c:60:12:33:87:9c:f6:4c:c3:8b:a2:bb:ec:83:b9: 52:a6:c2:78:32:bf:bc:e1:a1:3d:1b:01:38:b2:94: 73:56:d0:34:d9:e7:4e:49:2c:6b:ea:04:11:3f:10: 54:44:0f:3d:a6:14:c7:51:19:1f:7d:9a:2f:6e:38: 43:be:f4:c4:3d:c7:b1:6d:95:b0:54:44:a1:6c:cf: e0:7e:72:60:2f:14:8a:27:9e:08:af:45:20:60:49: 11:9c:fa:a3:5c:2e:8b:21:30:0b:a6:fe:62:05:7d: 28:96:a0:e3:94:a7:5b:e0:57:d6:bf:8f:86:ab:9e: 3a:dd:85:5b:3e:d5:cb:33:66:29:7d:d2:69:a1:54: 01:9b:55:7f:94:69:89:16:d1:d9:e9:fd:ed:c8:39: cb:6d:ec:e4:9f:d3:5d:6a:c1:d6:34:e5:98:cc:5c: 5a:0d:64:45:8e:d5:98:3a:f6:de:b7:01:97:94:fb: 74:31:7c:17:28:0b:84:b8:82:53:52:1a:e6:63:51: 2b:81:65:27:a7:65:a4:dc:a8:7f:eb:68:c5:30:ee: 02:44:4e:08:22:8c:49:38:98:b0:89:4e:2b:83:09: 35:6f:a2:d5:1d:89:ed:bc:8b:79:57:8c:a9:1b:07: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D9:6C:00:76:58:2D:0A:DE:12:AE:82:F5:4F:E1:35:96:8E:FA:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6998c58-d1de-3ce2-8961-250f3721dc81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.53.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:49:67:e4:a3:97:7a:8c:98:78:52:42:22:00:36:f1:b8:f7: 48:2f:99:0c:82:58:eb:67:e5:3c:c2:3e:88:26:f1:ca:74:25: 5b:68:18:ed:db:df:ac:70:f0:49:21:a3:d0:a7:19:c1:b2:43: 8b:50:e3:65:d7:5e:ec:62:f1:7e:6a:39:8a:4e:f7:77:c7:73: d8:59:f8:4e:8d:dd:49:d1:50:87:83:96:bc:d4:92:ea:67:ce: 24:a0:3b:bb:af:a1:de:9b:7c:90:c1:0f:0f:0f:e7:6e:8f:90: de:2c:a9:f6:bd:44:ee:dc:af:92:91:13:ee:60:7c:c4:dc:9e: d2:3b:16:48:2c:62:2b:8a:66:5e:58:66:77:1d:b1:74:a3:59: 8d:db:e0:f7:54:88:4f:64:c6:2a:c4:ab:9c:20:c6:76:c8:47: 26:14:44:d5:0f:49:cd:d0:24:66:96:68:1b:8b:5d:e8:38:89: 25:4a:87:a2:47:dd:c8:04:25:86:26:46:42:a1:f5:63:5b:e9: 0c:2d:1e:36:34:e2:0b:a9:99:99:bc:32:35:a4:41:cd:9f:c4: da:9f:37:68:e7:cf:cb:d4:d4:cc:1c:f9:7b:63:2d:05:af:02: be:0a:ae:93:dc:dc:67:4d:33:a4:a0:c0:c6:06:18:d7:18:e5: 64:17:6d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t3+1FNBWK1KtPCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk N2NmZGQwYTQtYzA2OS00ZjllLTg2N2YtYWJmZTRiNDg1ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2sN5eLQkD18PdU0wzqcYBIzh5z2TMOLorvs g7lSpsJ4Mr+84aE9GwE4spRzVtA02edOSSxr6gQRPxBURA89phTHURkffZovbjhD vvTEPcexbZWwVEShbM/gfnJgLxSKJ54Ir0UgYEkRnPqjXC6LITALpv5iBX0olqDj lKdb4FfWv4+Gq5463YVbPtXLM2YpfdJpoVQBm1V/lGmJFtHZ6f3tyDnLbezkn9Nd asHWNOWYzFxaDWRFjtWYOvbetwGXlPt0MXwXKAuEuIJTUhrmY1ErgWUnp2Wk3Kh/ 62jFMO4CRE4IIoxJOJiwiU4rgwk1b6LVHYntvIt5V4ypGwfsRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDZbAB2WC0K3hKugvVP4TWWjvr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY5OThjNTgtZDFkZS0z Y2UyLTg5NjEtMjUwZjM3MjFkYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrjVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRJZ+Sjl3qMmHhSQiIANvG490gvmQyCWOtn5TzCPogm8cp0JVtoGO3b 36xw8Ekho9CnGcGyQ4tQ42XXXuxi8X5qOYpO93fHc9hZ+E6N3UnRUIeDlrzUkupn ziSgO7uvod6bfJDBDw8P526PkN4sqfa9RO7cr5KRE+5gfMTcntI7FkgsYiuKZl5Y ZncdsXSjWY3b4PdUiE9kxirEq5wgxnbIRyYURNUPSc3QJGaWaBuLXeg4iSVKh6JH 3cgEJYYmRkKh9WNb6QwtHjY04gupmZm8MjWkQc2fxNqfN2jnz8vU1Mwc+XtjLQWv Ar4KrpPc3GdNM6SgwMYGGNcY5WQXbTI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:21 2025 by rpki-client