$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa File: d3d0583a-32b8-341b-8a18-30793c6e87fd.roa (raw, json) Hash identifier: Rh9SKLdJdos87NZentgnmY9Whwgc9fjzkjST0LyqUi8= Subject key identifier: 62:F9:E3:85:65:AD:58:7D:F1:9B:56:8F:33:E8:E7:F5:DB:EF:22:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DCFFAF814AFB1C5A3F4D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 174.161.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:ff:af:81:4a:fb:1c:5a:3f:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=37ff64c7-adda-41bc-8de6-88f8dda79af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:88:59:41:32:5a:89:38:16:93:23:9a:4c: 00:c7:33:8b:26:97:f3:8f:6c:1e:34:8f:b1:3c:1b: ae:63:8f:83:92:c6:96:08:4c:c7:e7:68:f7:bd:ec: 6a:fd:0c:8b:db:e2:1a:c6:e5:a6:5f:31:30:bd:67: f8:98:34:03:5c:a4:c6:4d:92:ab:81:32:db:6a:25: d5:e4:ec:54:8d:a7:d9:0a:94:dd:0d:e7:7b:20:f2: 73:1d:7e:56:a8:e4:e7:67:b9:75:60:73:77:c8:3f: 0b:ea:94:76:48:f7:41:70:68:fc:62:4a:72:85:dc: 5d:29:42:92:ee:da:ed:43:e9:3f:5b:77:7b:a4:de: 7c:90:64:bd:18:1f:c0:d7:33:b5:95:23:92:03:51: 32:dc:ef:03:b5:cf:60:d8:73:a6:46:a2:8c:a3:d5: 92:9c:3f:d2:75:02:41:92:2f:ec:25:5a:2c:f7:ca: cb:6d:e8:b8:56:f3:22:1d:cf:06:9b:48:f5:97:a3: d7:d6:b4:e8:8c:d6:3d:38:b5:51:ce:2c:56:5c:bf: c0:b0:d8:7a:01:eb:95:34:93:e5:75:82:30:80:41: 38:ae:e9:67:00:6d:d1:49:44:bf:0c:c6:de:92:58: 80:da:d5:4e:c8:78:41:ae:c5:0a:51:3a:cf:27:02: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F9:E3:85:65:AD:58:7D:F1:9B:56:8F:33:E8:E7:F5:DB:EF:22:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:0f:96:73:50:6d:b6:a4:81:e7:72:0a:8c:a8:b8:64:ad:cc: 8d:50:10:2b:1c:f4:23:fd:1d:f9:ce:15:31:a7:e0:33:6d:2d: 86:c4:db:0c:26:3d:ad:96:a0:48:65:cb:13:0c:8e:6a:82:f5: ae:d7:ee:1a:69:61:50:a9:fb:b9:8e:d8:70:e9:d8:88:99:e1: 97:83:17:be:e0:ae:aa:45:c8:a2:5c:4c:76:9d:de:08:cd:fc: 81:3f:e1:38:18:b8:93:57:92:cb:f1:6c:8d:92:0c:5b:69:92: ff:73:bd:67:51:7c:ef:de:05:f9:1a:69:8c:a0:87:13:ba:68: 2a:aa:ba:5b:a5:6f:4d:ea:6a:4b:80:f6:70:2f:a3:01:95:c0: 96:05:01:d0:9d:1e:51:10:72:6a:3e:26:85:a6:06:af:5e:49: d6:23:7f:35:75:5d:90:fa:cd:9a:67:d3:a8:09:3f:0e:71:5f: f7:7f:be:38:75:db:6b:92:ba:66:42:4c:34:cd:8f:2c:31:fd: 7e:ba:8d:37:ed:6e:64:e6:74:d5:cf:37:89:61:30:15:28:1b: 3c:f6:5a:ff:de:e1:c6:72:ee:18:b4:87:01:f6:57:03:ca:70: f1:03:72:9b:de:21:e1:ad:cd:55:b2:eb:4d:92:f4:ec:e4:fc: 9b:1b:d8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3P+vgUr7HFo/TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MzdmZjY0YzctYWRkYS00MWJjLThkZTYtODhmOGRkYTc5YWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhKIWUEyWok4FpMjmkwAxzOLJpfzj2weNI+x PBuuY4+DksaWCEzH52j3vexq/QyL2+IaxuWmXzEwvWf4mDQDXKTGTZKrgTLbaiXV 5OxUjafZCpTdDed7IPJzHX5WqOTnZ7l1YHN3yD8L6pR2SPdBcGj8YkpyhdxdKUKS 7trtQ+k/W3d7pN58kGS9GB/A1zO1lSOSA1Ey3O8Dtc9g2HOmRqKMo9WSnD/SdQJB ki/sJVos98rLbei4VvMiHc8Gm0j1l6PX1rTojNY9OLVRzixWXL/AsNh6AeuVNJPl dYIwgEE4rulnAG3RSUS/DMbekliA2tVOyHhBrsUKUTrPJwLe7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL544VlrVh98ZtWjzPo5/Xb7yK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNkMDU4M2EtMzJiOC0z NDFiLThhMTgtMzA3OTNjNmU4N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0PlnNQbbakgedyCoyouGStzI1QECsc9CP9HfnOFTGn4DNtLYbE2wwm Pa2WoEhlyxMMjmqC9a7X7hppYVCp+7mO2HDp2IiZ4ZeDF77grqpFyKJcTHad3gjN /IE/4TgYuJNXksvxbI2SDFtpkv9zvWdRfO/eBfkaaYyghxO6aCqqululb03qakuA 9nAvowGVwJYFAdCdHlEQcmo+JoWmBq9eSdYjfzV1XZD6zZpn06gJPw5xX/d/vjh1 22uSumZCTDTNjywx/X66jTftbmTmdNXPN4lhMBUoGzz2Wv/e4cZy7hi0hwH2VwPK cPEDcpveIeGtzVWy602S9Ozk/Jsb2Io= -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:15 2025 by rpki-client