$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cfcf950-12a1-3757-bc70-37970a1f5457.roa File: 0cfcf950-12a1-3757-bc70-37970a1f5457.roa (raw, json) Hash identifier: VEZDPRo562JMVgwu9NZ3KQXTn6adLbU36ekLbOZTa3g= Subject key identifier: D1:83:66:CC:55:E9:57:84:DC:F7:27:79:44:3B:01:51:8F:4C:10:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC21FECDAE7F3C8FB726000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cfcf950-12a1-3757-bc70-37970a1f5457.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.173.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:1f:ec:da:e7:f3:c8:fb:72:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=417acd17-6280-44db-af4a-15be9ed03886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:ac:c2:0d:7b:46:d2:b6:7b:7e:2f:96:6e: 5e:ce:08:13:ff:79:f0:06:99:ff:44:11:6b:24:5d: c0:a8:11:cb:1d:da:e3:c1:81:0f:9e:9a:bd:76:f0: ca:3d:e9:17:ec:13:27:36:4b:e1:a1:5d:9b:bb:33: 8f:f9:ee:03:ed:c4:25:50:49:6f:79:2e:48:98:9d: 50:15:94:42:de:23:a7:55:57:7e:b4:bc:ee:de:43: 8c:c8:4b:52:28:a0:cc:44:d3:97:83:4a:bd:b9:5f: 4a:43:57:8b:a5:4c:9c:8e:ee:8d:38:e0:d5:c3:8d: 14:ec:64:0f:31:0a:26:28:ac:7c:0c:99:1a:89:5e: 02:b3:92:c0:c5:93:b3:65:38:da:1a:71:4e:30:1d: b4:c1:2f:97:4f:51:7e:d2:3c:7a:14:16:63:25:8a: b9:ff:07:c4:6d:61:fb:a9:8a:de:b3:c4:df:1d:71: bb:aa:f1:08:4b:d8:dd:49:49:f8:b4:19:c8:de:9b: 33:a5:0a:8d:ec:0d:ff:f0:25:64:f3:d9:1b:45:0c: 86:74:68:9c:db:7d:0e:4d:29:d8:a9:13:57:e2:09: 8c:fd:35:8b:e9:71:e3:f1:c6:6f:fb:0a:46:93:f6: 74:2b:f6:6d:e2:c3:02:d3:e3:94:3f:25:0d:10:64: e7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:66:CC:55:E9:57:84:DC:F7:27:79:44:3B:01:51:8F:4C:10:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cfcf950-12a1-3757-bc70-37970a1f5457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:41:0d:fd:62:a3:fb:e9:32:34:f2:63:46:25:49:6f:84:90: 12:5c:75:c4:f1:12:8b:40:84:d7:e3:37:35:3f:ed:83:83:8f: b9:b3:a0:ca:6d:64:bd:85:35:6f:88:9a:85:00:2a:f8:60:83: 15:6b:ae:32:e3:3f:85:d8:0b:59:a7:db:92:e2:33:25:c9:c0: b3:64:f6:36:93:ae:d5:bb:ce:91:b1:f7:93:f3:1f:28:a1:8f: 51:26:4b:cb:c7:3a:60:f6:90:1e:e0:ef:f6:66:bc:05:cb:8d: 65:31:ba:de:41:2b:52:50:5f:79:8d:a8:f2:e4:48:92:52:d6: 9f:49:72:51:c0:41:e7:cf:56:44:ba:30:51:74:71:67:77:c2: 3e:de:19:91:d3:63:27:12:8f:9d:92:41:e2:8f:4b:9e:e7:00: 3b:10:99:fa:5f:3d:f9:f7:36:93:ca:02:93:ed:24:03:fb:f6: f1:db:82:e7:15:8c:6f:e9:fa:9b:23:89:0b:24:38:b2:c7:c7: f8:c5:c9:50:50:a2:99:7b:01:e2:f1:2b:10:5a:67:83:88:46: 45:98:82:14:e2:e2:d2:ff:76:43:f7:c5:e6:ab:63:00:7f:40: 70:6b:f0:ef:b6:11:27:64:ef:80:b0:d5:2e:c9:b3:2c:b7:39: 1f:08:99:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswh/s2ufzyPtyYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDE3YWNkMTctNjI4MC00NGRiLWFmNGEtMTViZTllZDAzODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCuswg17RtK2e34vlm5ezggT/3nwBpn/RBFr JF3AqBHLHdrjwYEPnpq9dvDKPekX7BMnNkvhoV2buzOP+e4D7cQlUElveS5ImJ1Q FZRC3iOnVVd+tLzu3kOMyEtSKKDMRNOXg0q9uV9KQ1eLpUycju6NOODVw40U7GQP MQomKKx8DJkaiV4Cs5LAxZOzZTjaGnFOMB20wS+XT1F+0jx6FBZjJYq5/wfEbWH7 qYres8TfHXG7qvEIS9jdSUn4tBnI3pszpQqN7A3/8CVk89kbRQyGdGic230OTSnY qRNX4gmM/TWL6XHj8cZv+wpGk/Z0K/Zt4sMC0+OUPyUNEGTnWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGDZsxV6VeE3PcneUQ7AVGPTBCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNmY2Y5NTAtMTJhMS0z NzU3LWJjNzAtMzc5NzBhMWY1NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ62KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlBDf1io/vpMjTyY0YlSW+EkBJcdcTxEotAhNfjNzU/7YODj7mzoMpt ZL2FNW+ImoUAKvhggxVrrjLjP4XYC1mn25LiMyXJwLNk9jaTrtW7zpGx95PzHyih j1EmS8vHOmD2kB7g7/ZmvAXLjWUxut5BK1JQX3mNqPLkSJJS1p9JclHAQefPVkS6 MFF0cWd3wj7eGZHTYycSj52SQeKPS57nADsQmfpfPfn3NpPKApPtJAP79vHbgucV jG/p+psjiQskOLLHx/jFyVBQopl7AeLxKxBaZ4OIRkWYghTi4tL/dkP3xearYwB/ QHBr8O+2ESdk74Cw1S7Jsyy3OR8ImTg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:29:23 2025 by rpki-client