$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09d4a220-797d-387c-a7ee-76c38f85951b.roa File: 09d4a220-797d-387c-a7ee-76c38f85951b.roa (raw, json) Hash identifier: AEzdxpmNEUjwApPYOTuEXq9jIxO6aczbJ1SuLD87lbU= Subject key identifier: E9:37:A5:11:67:E4:2A:86:A7:2D:24:FA:A3:9C:CC:3D:99:6D:B2:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC21E469507285B74774F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09d4a220-797d-387c-a7ee-76c38f85951b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.165.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:1e:46:95:07:28:5b:74:77:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=24a99226-ff56-4739-9f5c-149b2e1733e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:8e:14:0d:a7:7c:c5:4e:56:13:ee:fa:c5: 7c:5b:73:b3:4f:d2:45:84:cf:17:ff:dd:d7:fb:76: f1:67:22:e5:9c:3f:03:79:c3:4d:57:c3:0b:e4:d2: e9:a9:72:9d:a7:08:5d:bc:77:23:f8:8a:fb:8f:ee: d9:f3:80:bb:3b:11:dc:77:f5:6d:4c:37:19:28:a0: 27:e7:f7:fd:9e:11:f9:d6:42:53:5d:74:70:47:c3: 99:c1:7c:a2:fa:6b:07:d5:52:c1:87:bb:84:11:82: ae:55:15:8c:10:3c:8a:9a:c1:28:bf:72:c2:c4:37: 3a:e7:53:0e:30:df:19:d6:ba:2f:ad:35:4b:d6:42: ec:b1:53:9f:ef:ee:d2:cc:c0:99:14:21:b9:3e:cb: 51:5a:74:b0:9d:72:48:1d:33:8b:75:71:43:f1:92: 3d:1c:06:82:5f:b7:ac:7a:f3:e1:4f:66:54:90:5e: 82:fe:89:37:bc:02:04:34:2a:11:ce:48:f7:84:b1: a9:2b:88:96:14:b0:a8:99:a4:4d:92:51:75:cc:fc: fd:fa:30:b9:9a:0e:8f:20:61:e0:0e:ff:41:e4:05: cf:85:6b:7e:77:ce:c7:ef:5a:e7:b7:e9:04:88:66: ae:c7:91:91:bf:82:42:14:17:11:58:04:f6:5f:94: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:37:A5:11:67:E4:2A:86:A7:2D:24:FA:A3:9C:CC:3D:99:6D:B2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09d4a220-797d-387c-a7ee-76c38f85951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.165.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:68:e7:e4:0c:b7:cb:90:de:80:43:b9:5e:7e:22:63:ee:23: c2:27:59:33:18:cd:a6:d3:63:42:99:ed:ff:41:dd:c0:2b:25: f6:b4:24:2a:fc:c5:2a:c0:82:3c:77:6e:70:fa:02:0c:fc:42: 0d:7d:c6:36:eb:84:7c:6e:7a:24:ae:53:b4:ae:29:31:04:06: 7e:69:8f:65:f1:ed:26:8d:c2:33:86:59:0d:08:24:24:68:8b: 4f:15:bc:da:fe:f4:30:5e:6b:80:ad:e8:4a:e1:cc:04:b3:a9: 24:49:0e:a4:78:5f:2b:1b:e4:1e:aa:4e:3a:42:22:40:43:41: dc:b6:f3:24:e9:0b:08:6b:24:56:e4:5e:74:39:3f:db:f0:12: e6:d4:18:95:ad:e2:02:0c:f8:94:e5:7e:9b:1c:ff:4c:60:47: 64:9a:d9:ca:b2:91:2c:28:61:4b:e7:bc:a5:a6:ee:02:ef:43: b3:75:87:80:e5:eb:f3:24:0e:1d:5f:0e:36:8d:08:97:0c:e1: a2:39:53:8b:f1:e3:05:8c:89:93:5f:44:61:93:d2:75:e4:52: fd:a9:92:a2:ea:1e:c3:de:25:e4:9e:22:24:94:d2:36:d4:33: db:14:ca:20:39:e1:02:66:8a:84:f7:21:ae:38:c9:4b:cb:e8: 2d:54:56:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswh5GlQcoW3R3T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjRhOTkyMjYtZmY1Ni00NzM5LTlmNWMtMTQ5YjJlMTczM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRmOFA2nfMVOVhPu+sV8W3OzT9JFhM8X/93X +3bxZyLlnD8DecNNV8ML5NLpqXKdpwhdvHcj+Ir7j+7Z84C7OxHcd/VtTDcZKKAn 5/f9nhH51kJTXXRwR8OZwXyi+msH1VLBh7uEEYKuVRWMEDyKmsEov3LCxDc651MO MN8Z1rovrTVL1kLssVOf7+7SzMCZFCG5PstRWnSwnXJIHTOLdXFD8ZI9HAaCX7es evPhT2ZUkF6C/ok3vAIENCoRzkj3hLGpK4iWFLComaRNklF1zPz9+jC5mg6PIGHg Dv9B5AXPhWt+d87H71rnt+kEiGaux5GRv4JCFBcRWAT2X5TKCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk3pRFn5CqGpy0k+qOczD2ZbbJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDlkNGEyMjAtNzk3ZC0z ODdjLWE3ZWUtNzZjMzhmODU5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM1o5+QMt8uQ3oBDuV5+ImPuI8InWTMYzabTY0KZ7f9B3cArJfa0JCr8 xSrAgjx3bnD6Agz8Qg19xjbrhHxueiSuU7SuKTEEBn5pj2Xx7SaNwjOGWQ0IJCRo i08VvNr+9DBea4Ct6ErhzASzqSRJDqR4Xysb5B6qTjpCIkBDQdy28yTpCwhrJFbk XnQ5P9vwEubUGJWt4gIM+JTlfpsc/0xgR2Sa2cqykSwoYUvnvKWm7gLvQ7N1h4Dl 6/MkDh1fDjaNCJcM4aI5U4vx4wWMiZNfRGGT0nXkUv2pkqLqHsPeJeSeIiSU0jbU M9sUyiA54QJmioT3Ia44yUvL6C1UVp0= -----END CERTIFICATE-----Generated at Sun Aug 24 01:12:58 2025 by rpki-client