$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa File: e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa (raw, json) Hash identifier: P888d+e9pGnj/WQ6qBLGMaFEToOD+Fcb5SHouluN5N0= Subject key identifier: 16:56:66:4B:1A:64:9E:5E:BA:26:43:B4:54:59:45:3E:00:65:2E:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8DC929E810ED750A62BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 174.161.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:dc:92:9e:81:0e:d7:50:a6:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=12e0e47a-3a94-40c1-ad89-42b09bde6bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:f7:5a:c7:ab:38:3e:1b:a0:f9:93:d0:d7: ad:f6:7d:b2:f3:3f:f8:9f:57:50:89:96:27:cb:48: e1:40:5e:4e:71:b4:61:80:0e:0f:58:8c:1f:52:29: fe:16:b4:2f:ff:a4:87:ea:af:66:35:2f:09:87:94: 8e:be:e1:12:3f:95:09:dc:42:ab:53:f5:05:fa:48: bd:fa:20:34:1c:3a:cf:93:a1:4e:ad:c7:d7:75:c7: b9:5e:00:64:2b:ae:ad:8b:39:ba:ef:dd:9a:6f:73: a4:7d:3f:ab:1b:31:3d:97:a9:46:1f:ef:58:c1:ad: ad:30:a7:95:bb:cf:b3:2f:26:e0:65:8b:bf:1c:19: 91:c2:42:cf:5d:54:7b:44:1b:e0:cf:a7:d9:bc:52: 16:d4:3d:a7:14:fe:36:42:21:54:b6:06:48:ad:21: b4:5d:2e:6c:e3:d5:70:1a:29:f1:b4:b6:55:17:f5: 26:ca:df:cb:5d:9c:d3:27:5d:b2:9e:5b:b9:3d:a7: e7:0f:38:dd:f3:5a:98:5d:e3:30:54:36:4b:2c:fb: 15:ee:1c:80:11:5d:b0:97:0d:c4:c5:53:96:ab:52: f1:d7:7b:b4:02:ec:b3:6c:be:0b:8d:dc:b0:58:7f: aa:9d:35:84:b1:82:0c:f6:af:bc:0f:18:c3:0e:44: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:56:66:4B:1A:64:9E:5E:BA:26:43:B4:54:59:45:3E:00:65:2E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ac:60:b3:9c:b9:15:04:12:3d:af:a9:0b:6b:5f:5b:99:e6: f9:22:d7:6d:ba:b2:03:f1:e9:9b:47:ae:c7:f2:c3:56:ac:ad: 7b:22:4c:3c:b6:c0:fd:d9:c1:94:87:76:c4:7d:bd:e1:df:21: 41:c1:ac:c3:96:fc:40:49:07:dc:78:f3:c5:df:cb:f5:fa:04: 8a:90:d0:92:ed:56:42:4e:69:28:a7:94:23:fa:b6:95:ed:9b: d5:ee:7d:8c:72:a4:3d:8a:d6:ca:ad:19:9b:b4:82:a0:bd:a5: 6d:bd:30:16:f8:48:6b:af:3e:6c:85:7a:d5:e4:c7:42:a6:87: b1:0a:77:c7:0e:4a:1f:98:ce:72:78:76:3c:aa:d5:47:54:85: 7e:18:29:7b:57:32:18:48:3e:1b:96:7f:1e:db:eb:1e:2d:e6: da:74:e7:7e:6e:fd:16:ee:e6:45:03:0d:82:0f:0b:79:2d:93: 11:63:fe:7a:15:12:d2:84:e3:20:16:99:bb:7a:0c:83:37:91: 53:38:db:88:ac:35:5c:ef:46:3e:89:fd:16:76:ac:ca:ee:b3: a4:39:dd:a5:40:4d:6a:d1:c6:e9:4d:2a:42:ba:2c:58:7d:44: 46:4d:7c:f1:19:d1:3d:69:7b:11:e6:bd:96:5a:5c:09:b9:aa: 23:18:9a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uNySnoEO11CmK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTJlMGU0N2EtM2E5NC00MGMxLWFkODktNDJiMDliZGU2YmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNv3WserOD4boPmT0Net9n2y8z/4n1dQiZYn y0jhQF5OcbRhgA4PWIwfUin+FrQv/6SH6q9mNS8Jh5SOvuESP5UJ3EKrU/UF+ki9 +iA0HDrPk6FOrcfXdce5XgBkK66tizm6792ab3OkfT+rGzE9l6lGH+9Ywa2tMKeV u8+zLybgZYu/HBmRwkLPXVR7RBvgz6fZvFIW1D2nFP42QiFUtgZIrSG0XS5s49Vw GinxtLZVF/Umyt/LXZzTJ12ynlu5PafnDzjd81qYXeMwVDZLLPsV7hyAEV2wlw3E xVOWq1Lx13u0AuyzbL4LjdywWH+qnTWEsYIM9q+8DxjDDkRtmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZWZksaZJ5euiZDtFRZRT4AZS6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTJmZGRmNGItYzVjNy0z ZDJmLTgwYzItOTY0NzEzZDc2MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6sYLOcuRUEEj2vqQtrX1uZ5vki1226sgPx6ZtHrsfyw1asrXsiTDy2 wP3ZwZSHdsR9veHfIUHBrMOW/EBJB9x488Xfy/X6BIqQ0JLtVkJOaSinlCP6tpXt m9XufYxypD2K1sqtGZu0gqC9pW29MBb4SGuvPmyFetXkx0Kmh7EKd8cOSh+YznJ4 djyq1UdUhX4YKXtXMhhIPhuWfx7b6x4t5tp0535u/Rbu5kUDDYIPC3ktkxFj/noV EtKE4yAWmbt6DIM3kVM424isNVzvRj6J/RZ2rMrus6Q53aVATWrRxulNKkK6LFh9 REZNfPEZ0T1pexHmvZZaXAm5qiMYmkE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:50 2025 by rpki-client