$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cae876a-8856-3942-bfab-40064ff6ecb5.roa File: 0cae876a-8856-3942-bfab-40064ff6ecb5.roa (raw, json) Hash identifier: WsZzx9ZzytZw5qF4QyOBxEBQZxBFag6XrzlNybN17KE= Subject key identifier: 48:01:F0:39:8F:AA:00:12:70:4A:06:A9:CD:F9:E9:C9:10:79:BD:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE03200C655D04FCF3C873C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cae876a-8856-3942-bfab-40064ff6ecb5.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 33490 IP address blocks: 67.168.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:00:c6:55:d0:4f:cf:3c:87:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=3d9a11e9-a6be-4be7-a966-62483f6c94c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:99:d3:99:3c:0f:a1:e9:b3:a1:2e:99:20: b0:2d:6c:b2:ca:73:29:4c:fb:12:46:6d:69:b1:94: 9a:d1:f8:b9:f7:f0:b2:64:ed:95:0c:5a:47:da:42: 4f:1b:49:9c:e0:52:f4:c3:78:f2:a9:e4:d8:97:f5: b8:4b:91:ec:cd:dd:00:ed:d8:e9:fd:02:07:a4:af: 08:dc:ef:09:ea:0c:16:c5:e9:79:ba:da:39:27:5e: 04:a9:b5:2f:5c:18:d1:74:84:89:a3:06:45:cd:f0: 83:07:b6:ce:93:db:40:0c:5f:ff:94:ac:50:55:5b: c5:86:72:8d:ce:b6:5e:58:e8:19:a8:10:0d:3d:33: cb:75:9c:63:4a:37:2a:56:1b:5f:7e:8f:5b:7b:c3: 1c:37:02:7d:52:4c:d0:8d:c9:35:6d:51:7a:57:c7: 00:eb:27:f4:b5:43:ce:cb:4b:a0:d7:8d:79:96:cc: b1:41:31:31:63:b0:39:8e:89:fb:c9:cb:df:2b:ef: f2:0b:63:92:0d:49:bc:aa:87:36:a3:5e:36:fd:96: 1c:13:bf:23:18:e0:7a:5f:91:da:9b:4b:7d:86:77: 3e:16:03:dd:98:eb:6b:aa:36:28:47:bf:d6:99:b1: f2:0c:e9:ad:0a:4a:5a:bb:64:ca:c1:94:f2:e0:c1: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:F0:39:8F:AA:00:12:70:4A:06:A9:CD:F9:E9:C9:10:79:BD:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cae876a-8856-3942-bfab-40064ff6ecb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.168.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fd:64:30:6d:32:81:2c:d2:9f:32:75:8e:8d:77:1a:64:af: cb:93:a3:6d:82:ec:df:27:c4:67:23:17:ce:00:35:b8:0d:c2: 17:bf:3e:d3:11:13:67:c3:c6:8b:62:9c:36:77:42:b6:a7:44: 5e:bf:a7:81:c0:41:1d:ac:e1:fa:25:b0:f2:03:e2:6b:54:5d: 37:f7:ba:12:d3:eb:00:c4:f0:40:e5:ed:ec:d2:ba:3b:29:9e: ed:52:71:5e:0e:f0:b5:67:14:b2:78:a1:2b:14:de:eb:69:5f: c1:f9:53:1d:59:74:35:c9:0c:58:23:46:05:c9:4f:63:92:8d: 8f:94:c2:ab:bd:ec:f1:60:8a:20:da:fa:11:cb:17:9e:6f:28: f1:6e:07:52:2b:ef:3f:84:82:c6:aa:d6:1b:84:d9:1c:b1:c6: df:f7:83:14:79:55:a4:c5:9a:9e:1d:43:88:00:1c:cf:9d:88: e8:76:2d:bd:6d:9f:02:14:d1:45:db:24:05:5d:bf:6f:e3:0a: db:4f:3f:07:15:7b:c5:a7:48:b7:db:25:6b:0b:b9:4c:ba:cb: 58:19:dc:51:04:dc:a3:4a:d8:14:bb:29:4a:6e:95:35:b8:6c: 1b:33:49:76:d5:9e:b8:72:99:c7:a1:64:f6:5d:b6:0f:97:93: d1:77:85:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMgDGVdBPzzyHPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk M2Q5YTExZTktYTZiZS00YmU3LWE5NjYtNjI0ODNmNmM5NGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrSZ05k8D6Hps6EumSCwLWyyynMpTPsSRm1p sZSa0fi59/CyZO2VDFpH2kJPG0mc4FL0w3jyqeTYl/W4S5Hszd0A7djp/QIHpK8I 3O8J6gwWxel5uto5J14EqbUvXBjRdISJowZFzfCDB7bOk9tADF//lKxQVVvFhnKN zrZeWOgZqBANPTPLdZxjSjcqVhtffo9be8McNwJ9UkzQjck1bVF6V8cA6yf0tUPO y0ug1415lsyxQTExY7A5jon7ycvfK+/yC2OSDUm8qoc2o142/ZYcE78jGOB6X5Ha m0t9hnc+FgPdmOtrqjYoR7/WmbHyDOmtCkpau2TKwZTy4MEY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgB8DmPqgAScEoGqc356ckQeb1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNhZTg3NmEtODg1Ni0z OTQyLWJmYWItNDAwNjRmZjZlY2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6jEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb9ZDBtMoEs0p8ydY6Ndxpkr8uTo22C7N8nxGcjF84ANbgNwhe/PtMR E2fDxotinDZ3QranRF6/p4HAQR2s4folsPID4mtUXTf3uhLT6wDE8EDl7ezSujsp nu1ScV4O8LVnFLJ4oSsU3utpX8H5Ux1ZdDXJDFgjRgXJT2OSjY+Uwqu97PFgiiDa +hHLF55vKPFuB1Ir7z+Egsaq1huE2Ryxxt/3gxR5VaTFmp4dQ4gAHM+diOh2Lb1t nwIU0UXbJAVdv2/jCttPPwcVe8WnSLfbJWsLuUy6y1gZ3FEE3KNK2BS7KUpulTW4 bBszSXbVnrhymcehZPZdtg+Xk9F3hRY= -----END CERTIFICATE-----Generated at Sun Aug 24 01:38:09 2025 by rpki-client