$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a410c5-1155-3e9e-abe3-ce74451bd458.roa File: c8a410c5-1155-3e9e-abe3-ce74451bd458.roa (raw, json) Hash identifier: caMIVSyKS+nJFpzxqU1mfrphNJbrxRl+Fvu0OvC81p0= Subject key identifier: 4F:9D:0E:4F:1D:C9:E6:F6:AF:28:2C:C1:84:56:07:89:2B:16:BC:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2D9C4B9085067D52DDFC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a410c5-1155-3e9e-abe3-ce74451bd458.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 174.160.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:d9:c4:b9:08:50:67:d5:2d:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f5a9f26e-e054-4e90-bb4e-eea3c7752e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:48:08:45:25:ed:2a:b1:54:72:7c:07:4c: 10:52:1e:f8:34:8c:e2:3a:74:31:f5:cd:b1:98:41: 48:38:0e:62:3d:88:69:9b:81:82:54:73:e3:72:3c: f4:82:4c:c0:90:a1:80:94:bd:e1:08:e0:57:4e:f1: c2:9b:10:13:3f:0e:09:0f:46:dd:9d:03:62:da:2c: 0e:84:6e:11:e1:60:14:6f:42:45:08:63:b0:4a:c9: e9:94:57:33:6f:33:a7:46:23:cd:ff:4c:57:e2:42: 19:bd:53:41:e1:ee:dd:bb:e7:f8:ef:19:de:2c:4e: d9:a7:b8:50:7c:d4:8b:8c:12:87:0a:54:f7:c4:aa: 55:25:2f:31:a7:27:4a:e2:da:d8:6e:af:cd:ca:d6: 23:fa:11:71:73:30:2c:a0:b3:e9:ea:16:ee:83:9f: 90:21:fb:a6:6a:7c:1d:90:9a:dd:2f:fc:ca:d1:23: 98:8e:32:61:8d:37:eb:c5:7e:96:f3:02:91:ce:4b: 46:56:fd:ee:a9:66:e7:25:e0:2b:e5:ca:34:b6:e3: af:4b:f3:65:5c:25:20:f6:5f:20:aa:71:2c:36:db: bc:7e:d3:cb:05:6d:ea:c0:80:e4:87:ac:4a:25:a8: 5c:81:40:be:63:c3:a8:d9:9a:8b:59:42:8e:40:88: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9D:0E:4F:1D:C9:E6:F6:AF:28:2C:C1:84:56:07:89:2B:16:BC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a410c5-1155-3e9e-abe3-ce74451bd458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.160.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:50:f6:83:5f:13:8c:47:a9:e6:3c:70:a7:83:80:b5:70:7a: 0b:48:53:70:da:e1:b0:66:41:af:35:e5:ca:b2:fc:7f:2d:d0: 5b:20:bb:67:df:52:66:f4:89:c3:0c:97:45:dd:76:92:f6:19: 0d:50:8b:bf:6a:21:68:65:6d:e1:0e:c1:f5:af:26:14:60:9f: 46:6d:a2:08:e1:ba:c1:15:0f:02:53:f2:b4:94:4c:d1:a6:58: 68:3e:3b:8d:cd:b0:9c:55:ea:a5:f5:bf:39:26:6f:fb:34:47: 2b:17:6a:31:d6:48:e9:43:b8:c4:4c:b5:6c:ca:d9:80:69:1f: 30:d6:be:2d:5b:55:86:b2:4a:64:d3:8a:d0:7a:fd:55:e6:fd: 8a:f1:2d:a4:61:94:29:72:7b:b3:2a:a6:15:65:80:2f:9c:52: b9:8f:06:64:47:9a:97:b5:e8:50:49:be:69:dc:94:4f:3c:46: 8c:74:fa:e2:a4:56:01:74:71:b3:b1:a9:7e:1d:8f:0b:9f:7b: 59:8a:ab:78:1d:9b:85:92:78:d8:62:91:42:2c:da:c9:51:60: 2e:19:4f:02:fd:89:1b:b9:57:c4:ac:f9:d8:32:5e:e5:2a:f8: ec:cc:6a:c5:84:f9:85:80:56:53:66:77:48:a0:91:9f:9f:2c: 4c:b0:df:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswtnEuQhQZ9Ut38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjVhOWYyNmUtZTA1NC00ZTkwLWJiNGUtZWVhM2M3NzUyZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOlICEUl7SqxVHJ8B0wQUh74NIziOnQx9c2x mEFIOA5iPYhpm4GCVHPjcjz0gkzAkKGAlL3hCOBXTvHCmxATPw4JD0bdnQNi2iwO hG4R4WAUb0JFCGOwSsnplFczbzOnRiPN/0xX4kIZvVNB4e7du+f47xneLE7Zp7hQ fNSLjBKHClT3xKpVJS8xpydK4trYbq/NytYj+hFxczAsoLPp6hbug5+QIfumanwd kJrdL/zK0SOYjjJhjTfrxX6W8wKRzktGVv3uqWbnJeAr5co0tuOvS/NlXCUg9l8g qnEsNtu8ftPLBW3qwIDkh6xKJahcgUC+Y8Oo2ZqLWUKOQIjthQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+dDk8dyeb2rygswYRWB4krFryTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhhNDEwYzUtMTE1NS0z ZTllLWFiZTMtY2U3NDQ1MWJkNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRQ9oNfE4xHqeY8cKeDgLVwegtIU3Da4bBmQa815cqy/H8t0Fsgu2ff Umb0icMMl0XddpL2GQ1Qi79qIWhlbeEOwfWvJhRgn0ZtogjhusEVDwJT8rSUTNGm WGg+O43NsJxV6qX1vzkmb/s0RysXajHWSOlDuMRMtWzK2YBpHzDWvi1bVYaySmTT itB6/VXm/YrxLaRhlClye7MqphVlgC+cUrmPBmRHmpe16FBJvmnclE88Rox0+uKk VgF0cbOxqX4djwufe1mKq3gdm4WSeNhikUIs2slRYC4ZTwL9iRu5V8Ss+dgyXuUq +OzMasWE+YWAVlNmd0igkZ+fLEyw3yk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:11 2025 by rpki-client