$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa File: da3efcbd-c437-355f-9d1a-208bd26f5250.roa (raw, json) Hash identifier: GgDcl5/t+voqQm1RJzKWaiNq6prqrnuTi2N5O6zzSXE= Subject key identifier: 3F:28:AC:49:FD:1A:7E:17:D2:4A:7F:9F:2D:7A:25:57:7B:4E:0A:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC20073966A61FC21B33C24 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 174.173.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:00:73:96:6a:61:fc:21:b3:3c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f4aa67d4-17b7-4735-a84e-35193e57a01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:30:07:a2:9a:5d:18:82:dd:d1:1a:88:39: dd:2e:ea:0a:89:23:da:62:06:10:1c:0f:3c:a2:c7: 11:5e:40:1b:a6:d0:ad:fc:25:5d:13:6f:f4:1d:66: c3:c4:30:2e:15:eb:a5:7f:e2:55:dc:36:06:69:fd: 9e:38:c7:de:8b:cf:e5:52:b4:43:c3:3c:d9:3f:5b: 44:57:68:5c:48:8d:02:20:17:02:3e:fd:67:06:b8: 42:47:3b:e9:66:4c:c8:d9:80:38:aa:b0:19:b3:a0: 20:6b:e1:d4:8b:13:e9:3b:57:c4:41:12:96:bf:0a: fb:a9:22:09:d2:5e:1b:ba:d8:85:1f:19:24:98:b8: 65:c2:fa:85:b3:bc:29:61:91:05:d3:71:e4:43:05: 19:fe:30:1e:f9:6a:aa:f9:3b:cb:30:b2:89:18:f6: 4e:28:92:5e:d8:73:8e:cd:58:ed:ad:b3:84:5c:e8: dc:a2:13:26:30:ec:89:a3:ca:6a:59:2c:ab:f2:52: 21:02:8e:4e:ce:05:c1:22:6b:49:71:4b:a0:74:4f: b0:0d:fa:1b:b7:1d:00:6a:48:97:3c:18:59:5f:a0: 49:22:91:3f:16:8f:db:6d:8c:e2:52:31:04:7a:b8: 55:94:da:23:6f:88:cd:e5:d7:5c:9e:d4:05:74:d2: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:28:AC:49:FD:1A:7E:17:D2:4A:7F:9F:2D:7A:25:57:7B:4E:0A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fa:64:2c:58:d2:6e:c1:32:f9:5f:51:9c:85:d6:c4:4f:c4: 31:61:cc:f7:34:b6:b4:d6:3c:6f:e4:f5:22:10:ed:80:05:90: 75:07:28:86:58:f2:1e:ef:56:97:e1:d8:da:07:54:71:11:4f: f4:d0:ea:11:6d:34:6b:e2:1e:78:55:c2:41:ef:f5:32:6f:53: c4:49:2a:3f:91:7a:8a:1a:90:b3:05:f1:4a:e1:fd:1d:95:3c: 28:a3:1c:35:49:5f:96:d9:0d:fa:54:bc:48:04:ca:0c:4d:9c: e6:a3:ae:f3:cf:86:5f:76:57:72:d0:45:e6:2e:8e:f8:56:e6: 2c:ec:e2:8c:7d:16:ea:17:52:a7:1b:8c:7a:15:c7:7c:30:b6: 63:99:03:41:4b:42:63:08:ea:40:7a:a9:fd:82:ed:12:96:f1: 7f:52:e3:04:1e:9f:05:1f:1f:23:fc:05:6d:af:15:cf:00:10: 15:22:1b:bf:7d:75:d0:67:82:93:0d:db:a5:6b:15:b9:99:5d: 55:99:a5:7d:f2:61:17:9f:8e:a3:06:a7:9a:5a:69:d7:b0:e3: 7f:11:82:f5:0a:c4:a3:07:89:40:fe:fd:1b:49:22:75:5e:de: e9:5f:03:37:64:70:e4:b6:bf:f3:0e:bc:29:34:5d:8c:75:25: 84:43:f5:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswgBzlmph/CGzPCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjRhYTY3ZDQtMTdiNy00NzM1LWE4NGUtMzUxOTNlNTdhMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7QwB6KaXRiC3dEaiDndLuoKiSPaYgYQHA88 oscRXkAbptCt/CVdE2/0HWbDxDAuFeulf+JV3DYGaf2eOMfei8/lUrRDwzzZP1tE V2hcSI0CIBcCPv1nBrhCRzvpZkzI2YA4qrAZs6Aga+HUixPpO1fEQRKWvwr7qSIJ 0l4butiFHxkkmLhlwvqFs7wpYZEF03HkQwUZ/jAe+Wqq+TvLMLKJGPZOKJJe2HOO zVjtrbOEXOjcohMmMOyJo8pqWSyr8lIhAo5OzgXBImtJcUugdE+wDfobtx0AakiX PBhZX6BJIpE/Fo/bbYziUjEEerhVlNojb4jN5ddcntQFdNL53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8orEn9Gn4X0kp/ny16JVd7Tgp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGEzZWZjYmQtYzQzNy0z NTVmLTlkMWEtMjA4YmQyNmY1MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH6ZCxY0m7BMvlfUZyF1sRPxDFhzPc0trTWPG/k9SIQ7YAFkHUHKIZY 8h7vVpfh2NoHVHERT/TQ6hFtNGviHnhVwkHv9TJvU8RJKj+ReooakLMF8Urh/R2V PCijHDVJX5bZDfpUvEgEygxNnOajrvPPhl92V3LQReYujvhW5izs4ox9FuoXUqcb jHoVx3wwtmOZA0FLQmMI6kB6qf2C7RKW8X9S4wQenwUfHyP8BW2vFc8AEBUiG799 ddBngpMN26VrFbmZXVWZpX3yYRefjqMGp5paadew438RgvUKxKMHiUD+/RtJInVe 3ulfAzdkcOS2v/MOvCk0XYx1JYRD9eY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:17 2025 by rpki-client