$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df67e958-9986-3c2a-a16a-082df970b9f2.roa File: df67e958-9986-3c2a-a16a-082df970b9f2.roa (raw, json) Hash identifier: szAmHSibYVfeA1L3yW1tPYDaf9bVmsr/OEHxdByB2lI= Subject key identifier: 2A:D3:AC:28:40:8D:10:FF:D3:D3:1E:0C:B4:6F:A5:3F:9C:92:5D:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC415105533E4FE1D979DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df67e958-9986-3c2a-a16a-082df970b9f2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 174.62.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:15:10:55:33:e4:fe:1d:97:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=28e9abfd-cf45-492a-863c-14d9ecd85970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5c:d3:19:2b:01:95:1d:21:3a:01:b8:86:cc: 2b:d9:df:5e:72:d5:7d:00:15:4f:56:25:cf:2f:bc: 75:3d:fc:d2:a5:1d:d3:4d:fc:a0:18:26:f4:15:16: 7d:a0:e5:73:5b:f4:34:ac:b0:a6:79:14:43:6c:98: 07:39:67:c0:11:f2:dc:a6:f9:d0:da:02:39:c3:09: 68:9e:9c:99:35:27:9e:11:43:96:92:0f:f3:37:0e: 93:f2:7c:21:e8:03:64:e2:99:7d:34:df:7c:26:56: 96:53:23:80:04:32:c9:2d:73:54:68:c5:5e:0c:e6: c7:db:e5:bd:d1:a8:5a:db:3c:2f:13:8b:4d:71:43: e4:20:ab:c6:6d:5f:77:d0:6f:1a:07:9d:70:4d:dc: 36:bd:20:2e:56:ed:ea:0c:cb:2e:0a:4b:c6:eb:8f: de:49:88:57:93:c0:bc:14:7b:21:47:01:9f:2f:55: 8c:e3:7f:ca:cc:22:7f:57:da:a4:ac:06:b1:19:67: c8:c5:e7:12:6f:c2:13:e6:97:92:b0:ed:af:a5:c2: 76:8d:86:6d:27:f2:80:42:41:ab:94:d0:d0:a5:75: f9:24:9c:52:ed:fb:9e:8c:10:53:a4:c3:23:9b:8b: e8:6a:d6:9c:c6:9f:fd:26:55:02:fa:16:6c:39:26: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D3:AC:28:40:8D:10:FF:D3:D3:1E:0C:B4:6F:A5:3F:9C:92:5D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df67e958-9986-3c2a-a16a-082df970b9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.62.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:66:20:fd:13:3b:e1:1d:d1:75:14:aa:fd:e2:61:3e:9e:6a: f6:17:e1:49:be:33:f3:c1:9b:51:58:c8:a2:70:7e:40:5b:b2: 15:89:5c:f4:6d:f7:cb:c2:84:09:15:7b:38:08:50:dd:65:2b: ca:ef:4d:48:fa:0c:b7:7a:b8:ef:b2:df:90:bd:ea:f5:69:9f: 8e:93:b1:1a:60:36:5c:d0:22:f2:fb:fc:9c:af:d5:2b:98:0a: d9:6d:41:a6:73:5d:08:c6:0a:12:4e:15:df:71:42:23:d7:eb: 89:c8:94:87:43:c3:8e:91:07:4b:a5:74:19:89:e9:0f:14:ab: 0c:f6:52:64:dd:a7:7f:27:fb:8b:35:53:b3:8d:d3:f5:4f:57: 97:ad:64:98:74:5a:fd:b6:c2:69:26:f8:7d:b0:97:41:ef:0d: a9:d1:e2:28:ff:5a:b9:ac:0e:d8:9b:bd:8f:73:9a:57:27:08: 22:6c:dc:d4:51:5a:a4:c0:a7:92:e7:33:26:04:90:b8:0b:6d: 66:63:80:c4:87:52:9a:80:f0:bb:a2:d9:0b:5d:1e:59:b8:6c: c1:2e:33:fe:4d:6c:76:da:5d:25:44:5a:a4:ef:a2:b2:60:fe: f3:74:46:76:74:67:ad:91:ea:56:30:13:1a:fe:18:a6:15:42: 13:9f:40:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxBUQVTPk/h2XncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjhlOWFiZmQtY2Y0NS00OTJhLTg2M2MtMTRkOWVjZDg1OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lzTGSsBlR0hOgG4hswr2d9ectV9ABVPViXP L7x1PfzSpR3TTfygGCb0FRZ9oOVzW/Q0rLCmeRRDbJgHOWfAEfLcpvnQ2gI5wwlo npyZNSeeEUOWkg/zNw6T8nwh6ANk4pl9NN98JlaWUyOABDLJLXNUaMVeDObH2+W9 0aha2zwvE4tNcUPkIKvGbV930G8aB51wTdw2vSAuVu3qDMsuCkvG64/eSYhXk8C8 FHshRwGfL1WM43/KzCJ/V9qkrAaxGWfIxecSb8IT5peSsO2vpcJ2jYZtJ/KAQkGr lNDQpXX5JJxS7fuejBBTpMMjm4voatacxp/9JlUC+hZsOSbGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrTrChAjRD/09MeDLRvpT+ckl2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY2N2U5NTgtOTk4Ni0z YzJhLWExNmEtMDgyZGY5NzBiOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArj6uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFmIP0TO+Ed0XUUqv3iYT6eavYX4Um+M/PBm1FYyKJwfkBbshWJXPRt 98vChAkVezgIUN1lK8rvTUj6DLd6uO+y35C96vVpn46TsRpgNlzQIvL7/Jyv1SuY CtltQaZzXQjGChJOFd9xQiPX64nIlIdDw46RB0uldBmJ6Q8Uqwz2UmTdp38n+4s1 U7ON0/VPV5etZJh0Wv22wmkm+H2wl0HvDanR4ij/WrmsDtibvY9zmlcnCCJs3NRR WqTAp5LnMyYEkLgLbWZjgMSHUpqA8Lui2QtdHlm4bMEuM/5NbHbaXSVEWqTvorJg /vN0RnZ0Z62R6lYwExr+GKYVQhOfQFs= -----END CERTIFICATE-----Generated at Sun Aug 24 09:36:15 2025 by rpki-client