$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f45098b2-1831-3d46-b526-e1418bfee1f3.roa File: f45098b2-1831-3d46-b526-e1418bfee1f3.roa (raw, json) Hash identifier: lJ49WKfUw6CDMwzW7FvUlaw2+qth1fNtikpOmKIk9SI= Subject key identifier: 87:1E:0A:77:48:F3:08:8C:51:A3:E9:B8:21:8A:DA:1F:AE:87:57:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC209CC70FC19A25F741D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f45098b2-1831-3d46-b526-e1418bfee1f3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 174.62.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:09:cc:70:fc:19:a2:5f:74:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=484a1fcd-4aff-4de6-813b-374b599b33af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:7b:6c:e1:e6:79:7c:19:93:f4:26:6c:2e: 69:5d:de:a6:86:d1:84:19:a2:d9:18:f8:ad:45:c6: 00:04:ad:25:08:38:7f:ed:12:43:29:bb:ad:99:8f: 52:a4:a4:f3:cc:e2:53:5d:72:95:bd:23:67:8a:13: 19:08:20:3d:7b:67:c5:20:62:2f:0d:51:61:9b:9f: 64:28:68:5f:6c:b9:b9:f2:4b:85:3f:39:ef:32:01: 03:21:71:c4:1a:39:71:4d:5a:9d:0a:97:c0:6b:2c: b4:3c:55:a5:92:1f:cd:aa:f1:85:dd:3b:71:f7:1e: a5:aa:83:fe:09:b1:25:c0:1a:e7:fa:9a:47:6b:c9: c6:87:f6:81:85:1f:36:b5:5f:16:02:69:73:25:21: 92:73:05:41:78:5c:04:cc:0c:a9:62:68:9d:1b:6c: e4:3f:fc:f5:4d:f5:ce:9b:4d:ab:0c:32:f3:05:1c: b8:a6:ef:e5:c0:5a:3a:f8:fa:55:e1:88:5b:07:7a: cd:c1:1b:5d:24:48:2a:31:ce:87:69:50:d8:e4:4c: 80:0b:9a:8b:e7:19:e3:ba:41:5f:dd:da:5b:36:9f: 97:4a:80:65:68:2a:f1:82:dc:71:78:36:92:06:06: 0e:15:dc:11:73:fb:d2:0a:77:72:5d:e5:94:dd:2f: a9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1E:0A:77:48:F3:08:8C:51:A3:E9:B8:21:8A:DA:1F:AE:87:57:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f45098b2-1831-3d46-b526-e1418bfee1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.62.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:de:8f:cf:cb:a7:4a:50:25:5a:7c:7a:d4:5d:45:f6:67:24: 72:eb:76:66:f7:57:03:fe:46:f2:d3:4a:8b:23:25:58:7b:9e: b8:9e:e4:6e:3b:bf:63:a3:38:d0:aa:ca:78:9f:23:0a:09:dd: 4c:9e:1f:e2:64:63:19:30:da:69:31:54:c6:a1:24:02:ec:37: 86:78:c0:16:74:ef:14:4a:be:e9:dd:d3:9a:02:7e:fd:ac:18: fd:cc:6c:21:47:59:c8:0a:22:24:0e:87:84:78:06:41:35:2f: 7d:49:81:bf:0b:2b:15:93:40:f8:1e:6f:d6:e6:4f:46:41:8d: 1e:fb:1e:e1:3e:37:78:30:9c:21:87:e1:f2:e9:05:06:9e:75: ad:52:c5:3a:52:dc:e8:e4:52:18:86:8c:8f:78:3f:8c:7d:78: 1f:94:1c:70:f4:8c:6e:cf:d0:b3:62:9d:82:24:0f:93:83:7e: 7c:9b:7a:70:62:b9:8c:37:46:b5:96:a1:2d:45:ef:4f:08:d1: 26:0f:6e:f9:1f:a4:b5:4e:1b:fa:5f:10:aa:bd:96:0e:f2:5b: ce:d0:b3:e1:16:03:a3:38:2e:15:e5:a6:62:b1:53:a8:4e:01: 7b:15:b1:20:20:f2:90:75:07:78:10:19:78:23:36:85:df:af: bc:9c:4b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswgnMcPwZol90HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDg0YTFmY2QtNGFmZi00ZGU2LTgxM2ItMzc0YjU5OWIzM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwR7bOHmeXwZk/QmbC5pXd6mhtGEGaLZGPit RcYABK0lCDh/7RJDKbutmY9SpKTzzOJTXXKVvSNnihMZCCA9e2fFIGIvDVFhm59k KGhfbLm58kuFPznvMgEDIXHEGjlxTVqdCpfAayy0PFWlkh/NqvGF3Ttx9x6lqoP+ CbElwBrn+ppHa8nGh/aBhR82tV8WAmlzJSGScwVBeFwEzAypYmidG2zkP/z1TfXO m02rDDLzBRy4pu/lwFo6+PpV4YhbB3rNwRtdJEgqMc6HaVDY5EyAC5qL5xnjukFf 3dpbNp+XSoBlaCrxgtxxeDaSBgYOFdwRc/vSCndyXeWU3S+pBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIceCndI8wiMUaPpuCGK2h+uh1ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ1MDk4YjItMTgzMS0z ZDQ2LWI1MjYtZTE0MThiZmVlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArj73MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7ej8/Lp0pQJVp8etRdRfZnJHLrdmb3VwP+RvLTSosjJVh7nrie5G47 v2OjONCqynifIwoJ3UyeH+JkYxkw2mkxVMahJALsN4Z4wBZ07xRKvund05oCfv2s GP3MbCFHWcgKIiQOh4R4BkE1L31Jgb8LKxWTQPgeb9bmT0ZBjR77HuE+N3gwnCGH 4fLpBQaeda1SxTpS3OjkUhiGjI94P4x9eB+UHHD0jG7P0LNinYIkD5ODfnybenBi uYw3RrWWoS1F708I0SYPbvkfpLVOG/pfEKq9lg7yW87Qs+EWA6M4LhXlpmKxU6hO AXsVsSAg8pB1B3gQGXgjNoXfr7ycS50= -----END CERTIFICATE-----Generated at Sun Aug 24 08:04:11 2025 by rpki-client