$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf35d0fe-6df4-3f8e-b6da-3c590e110132.roa File: bf35d0fe-6df4-3f8e-b6da-3c590e110132.roa (raw, json) Hash identifier: 4do1CqbAgPIZ7a97yYYqgXin3suIa613odosBVWdv3Y= Subject key identifier: 35:BC:A1:65:8C:EB:5D:82:D2:05:9A:AD:6D:65:9C:6A:CB:9E:E0:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031248D77EF19A078E8F180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf35d0fe-6df4-3f8e-b6da-3c590e110132.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 174.163.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:24:8d:77:ef:19:a0:78:e8:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=b074623b-ac11-473c-a02f-92e0beeae305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:b3:de:86:52:3f:78:a8:da:b7:d3:ec:a5: ef:f3:b6:60:92:00:78:39:1e:3c:40:c1:45:a3:a3: 5d:eb:6e:d4:27:75:5d:46:fa:fc:2e:16:d2:3b:db: fe:43:fb:fb:a9:d4:39:6d:3a:8d:8e:eb:48:d0:6d: 41:5f:47:22:3e:2c:64:7e:1f:8d:8a:71:d5:90:89: 9d:fe:9a:e5:03:89:86:1e:6e:f4:39:1d:6e:fb:fe: 4d:4b:11:1f:c8:0b:4b:e1:ba:70:6e:64:63:5b:e5: 6d:bd:dc:fd:d6:01:04:94:60:9e:97:ea:d9:e3:d7: 58:45:a8:a7:b5:ee:61:f1:2c:8b:81:aa:d6:8e:42: 92:4a:67:9f:24:d6:e3:1c:d9:28:f5:1e:22:f9:6b: d3:e3:c0:86:64:eb:d3:10:69:4f:38:83:f4:95:fd: 26:03:8d:23:9f:f9:1c:2a:08:08:39:ff:a9:01:6e: 81:c1:25:81:ef:13:4e:1c:f6:29:6e:fc:8a:6c:ef: d9:0a:66:c8:44:47:45:96:f8:9a:86:dd:78:67:52: a3:7e:88:e3:7b:77:93:7f:5f:5c:af:78:49:47:4a: ba:09:8c:ad:85:be:f9:3b:26:64:a9:71:78:18:df: a1:9d:b0:1d:0c:dc:ea:62:b7:66:28:26:88:46:e5: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:A1:65:8C:EB:5D:82:D2:05:9A:AD:6D:65:9C:6A:CB:9E:E0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf35d0fe-6df4-3f8e-b6da-3c590e110132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.163.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ff:a0:3d:72:d2:db:51:bb:a1:f5:d6:40:65:7b:4e:9b:62: 72:d3:54:7f:cf:14:a6:e1:ee:a7:fb:ac:16:7e:7d:d9:c1:8f: 15:19:7f:df:c9:e9:4f:ca:86:fd:5d:ae:83:10:10:65:eb:9a: 23:ec:0f:15:d9:0a:c9:a8:61:b6:eb:26:a0:f8:c4:ff:27:fb: b3:bf:a4:b2:47:8b:1a:9a:c0:4c:68:7a:21:bc:c6:ee:b5:5e: b2:34:d2:b4:19:54:62:6c:bb:85:67:78:2c:4c:0b:b8:87:a0: e6:94:c4:a9:78:bc:96:a6:6d:3c:0d:dc:e8:27:dc:3e:d8:4c: ef:e0:49:c7:fd:1a:0a:1e:10:ea:ea:57:13:32:6b:4d:9e:1b: 47:6d:39:45:d9:d9:20:9e:e7:7a:47:a9:c6:c3:46:bc:b7:f9: 92:30:7d:1b:be:ef:4c:1c:40:f0:7a:26:7e:80:50:a6:de:b5: 87:31:3c:f5:00:a5:53:54:7e:1b:05:f4:46:81:52:48:e3:c9: 98:97:64:e1:62:2f:b1:60:5c:61:df:ed:4c:6b:38:e8:98:b3: 6e:1b:f4:df:5f:d6:2e:34:21:e0:7d:a5:f9:b9:33:07:dc:59: 7d:34:50:8c:fa:f8:bb:04:28:2e:4c:81:38:c1:fe:b0:0b:e5: 2c:fa:52:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMSSNd+8ZoHjo8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk YjA3NDYyM2ItYWMxMS00NzNjLWEwMmYtOTJlMGJlZWFlMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsliz3oZSP3io2rfT7KXv87ZgkgB4OR48QMFF o6Nd627UJ3VdRvr8LhbSO9v+Q/v7qdQ5bTqNjutI0G1BX0ciPixkfh+NinHVkImd /prlA4mGHm70OR1u+/5NSxEfyAtL4bpwbmRjW+Vtvdz91gEElGCel+rZ49dYRain te5h8SyLgarWjkKSSmefJNbjHNko9R4i+WvT48CGZOvTEGlPOIP0lf0mA40jn/kc KggIOf+pAW6BwSWB7xNOHPYpbvyKbO/ZCmbIREdFlviaht14Z1Kjfojje3eTf19c r3hJR0q6CYythb75OyZkqXF4GN+hnbAdDNzqYrdmKCaIRuV8KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW8oWWM612C0gWarW1lnGrLnuCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYzNWQwZmUtNmRmNC0z ZjhlLWI2ZGEtM2M1OTBlMTEwMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT/oD1y0ttRu6H11kBle06bYnLTVH/PFKbh7qf7rBZ+fdnBjxUZf9/J 6U/Khv1droMQEGXrmiPsDxXZCsmoYbbrJqD4xP8n+7O/pLJHixqawExoeiG8xu61 XrI00rQZVGJsu4VneCxMC7iHoOaUxKl4vJambTwN3Ogn3D7YTO/gScf9GgoeEOrq VxMya02eG0dtOUXZ2SCe53pHqcbDRry3+ZIwfRu+70wcQPB6Jn6AUKbetYcxPPUA pVNUfhsF9EaBUkjjyZiXZOFiL7FgXGHf7UxrOOiYs24b9N9f1i40IeB9pfm5Mwfc WX00UIz6+LsEKC5MgTjB/rAL5Sz6Uq8= -----END CERTIFICATE-----Generated at Sat Aug 23 23:08:02 2025 by rpki-client