$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa File: c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa (raw, json) Hash identifier: HyCMFbWZNIpAbHvDJM+wIiqeQb7fC5o6dFgFxb4hFdc= Subject key identifier: 90:77:B4:0C:80:2B:3B:B9:4F:AF:D3:7F:A7:BA:A4:5A:C6:5A:7C:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCCEC67D63A94987952448 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 174.161.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:ce:c6:7d:63:a9:49:87:95:24:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=4f507bea-3a48-4938-b67f-b4f47356ec60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b5:dd:e2:5c:d3:54:b8:dd:a2:53:75:eb:52: b5:7e:7d:c7:39:16:ee:cd:49:45:62:56:19:d2:8e: fd:b1:24:b9:6f:d8:50:04:8d:b9:1c:b3:87:e2:34: c1:aa:be:4f:0a:d1:bd:82:90:92:bd:78:b2:d1:e4: 7a:27:7d:3c:45:bb:c6:2a:53:83:6c:00:09:9b:eb: fd:cc:eb:ba:43:01:bf:29:65:f4:8d:ae:c6:09:a1: ab:91:3d:3b:57:83:2f:24:18:12:58:84:68:73:68: fb:16:3f:a4:b4:81:9b:d5:02:5f:56:1e:d6:d9:ab: 40:9a:10:e1:39:49:94:58:33:40:64:77:7a:80:a2: 4e:6a:7f:6f:1b:eb:a2:d1:49:ce:3a:28:fe:eb:82: 21:e4:88:db:d7:a6:bc:55:2e:55:0f:e5:94:1f:6d: 17:6c:0e:44:25:61:e1:36:47:ee:e2:63:45:a1:db: 81:1a:53:ac:7f:fe:04:d4:40:27:1e:58:75:71:4d: 00:07:2e:d8:46:4c:55:4f:f9:d3:8d:72:5f:e7:1a: db:47:a7:33:d2:b7:2b:1a:11:fa:29:5d:51:5a:da: b2:fc:a1:9f:a4:4d:0d:cd:3d:e8:70:44:a6:7e:c0: 72:05:75:bd:d8:b4:57:de:34:fe:51:8f:71:0a:3d: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:B4:0C:80:2B:3B:B9:4F:AF:D3:7F:A7:BA:A4:5A:C6:5A:7C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:03:a9:84:fa:82:70:91:4b:5e:0c:89:a8:f0:7c:6f:43:6e: a9:68:0f:cb:06:88:1b:7a:f9:46:d2:e1:90:44:04:7c:5c:17: d4:16:ed:7c:12:5e:10:75:bd:21:7a:f7:bc:ec:92:16:09:a9: c8:97:67:47:0e:69:3b:e5:3a:0f:1a:f0:96:b3:90:82:e9:3c: 77:92:86:89:54:e5:aa:99:8c:af:3c:f0:31:34:5c:22:43:cc: fe:5b:42:60:8f:2f:58:2b:f6:55:45:cd:b5:6d:b1:8b:59:22: 35:de:5d:b5:79:bb:1e:00:21:ab:76:f9:af:89:d6:2e:c4:65: b0:0d:47:fd:b0:06:24:0e:00:f1:d2:9d:a4:9b:9f:b0:f3:f3: 77:14:24:a7:e8:82:99:05:cb:3a:99:f3:98:17:92:7c:b5:0f: b8:55:98:d3:ab:bd:01:ff:bf:42:d3:ba:da:17:3b:cc:fb:a8: 31:2c:1e:1c:0c:2e:f7:47:96:40:6b:20:69:f7:38:cb:d0:39: e6:5f:a1:26:13:b9:3d:f8:fc:ae:13:51:d6:de:86:87:af:9a: 21:df:4e:dd:a4:ca:ae:c7:31:dc:4c:13:2f:18:c8:56:00:6f: b1:d9:0f:92:aa:01:d0:9e:43:3e:77:90:a9:5d:ba:c0:93:66: c1:89:08:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/M7GfWOpSYeVJEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NGY1MDdiZWEtM2E0OC00OTM4LWI2N2YtYjRmNDczNTZlYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLXd4lzTVLjdolN161K1fn3HORbuzUlFYlYZ 0o79sSS5b9hQBI25HLOH4jTBqr5PCtG9gpCSvXiy0eR6J308RbvGKlODbAAJm+v9 zOu6QwG/KWX0ja7GCaGrkT07V4MvJBgSWIRoc2j7Fj+ktIGb1QJfVh7W2atAmhDh OUmUWDNAZHd6gKJOan9vG+ui0UnOOij+64Ih5Ijb16a8VS5VD+WUH20XbA5EJWHh Nkfu4mNFoduBGlOsf/4E1EAnHlh1cU0ABy7YRkxVT/nTjXJf5xrbR6cz0rcrGhH6 KV1RWtqy/KGfpE0NzT3ocESmfsByBXW92LRX3jT+UY9xCj2+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB3tAyAKzu5T6/Tf6e6pFrGWnxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzkwOWI5N2ItMmE0MC0z N2M4LTgzY2EtY2U4NGY2YjRiOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcDqYT6gnCRS14MiajwfG9DbqloD8sGiBt6+UbS4ZBEBHxcF9QW7XwS XhB1vSF697zskhYJqciXZ0cOaTvlOg8a8JazkILpPHeSholU5aqZjK888DE0XCJD zP5bQmCPL1gr9lVFzbVtsYtZIjXeXbV5ux4AIat2+a+J1i7EZbANR/2wBiQOAPHS naSbn7Dz83cUJKfogpkFyzqZ85gXkny1D7hVmNOrvQH/v0LTutoXO8z7qDEsHhwM LvdHlkBrIGn3OMvQOeZfoSYTuT34/K4TUdbehoevmiHfTt2kyq7HMdxMEy8YyFYA b7HZD5KqAdCeQz53kKldusCTZsGJCIo= -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:20 2025 by rpki-client