$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa File: 17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa (raw, json) Hash identifier: lLhPRfXrSErbYcHFSIUE4X9HpvFtcQ6bL/+cQ1WNiXo= Subject key identifier: D1:F8:F4:2D:E4:81:8A:49:61:5C:83:C4:5E:6F:D1:D0:B9:7B:95:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7AA0559E86D597D7BF780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33652 IP address blocks: 67.164.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:aa:05:59:e8:6d:59:7d:7b:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=16e12fcd-1338-4114-9c81-090ab1b87333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:56:66:80:f7:6c:0a:03:59:24:c9:cf:20: 89:d8:d3:a2:8a:ae:45:87:c9:49:0b:28:11:7c:d2: 8f:56:23:86:4f:d1:fb:ca:dc:fd:0e:32:09:99:b0: 87:fc:71:28:cb:27:2b:fd:d3:25:1e:1b:b2:5a:51: 5d:29:19:a0:02:2b:fd:11:66:27:ad:3b:f2:c2:0e: d9:29:97:65:69:57:ee:dc:df:10:a7:8c:25:06:a6: be:e4:16:d1:c0:dc:6d:ac:8b:75:3b:59:37:f8:26: 49:72:20:a9:7e:4d:6f:15:0b:e4:75:3c:d3:7d:71: fa:d8:6c:41:98:93:fb:d7:04:aa:3c:1f:e6:0e:c0: 7c:51:94:7a:7b:c5:a9:c7:02:8e:80:a4:09:f6:34: f9:6f:b7:6a:f4:30:64:3c:45:68:10:58:c0:96:69: 02:11:8d:9a:c0:9b:ee:9a:bc:e4:30:5f:da:fd:c9: 1c:88:38:c0:db:40:b5:0e:e5:56:05:dc:0b:5c:1a: 36:db:30:f3:c9:37:93:47:66:4c:55:40:95:02:b6: 29:ca:fe:7b:93:ab:65:e2:87:8e:44:4f:e2:a5:16: 8c:29:1a:36:61:d0:56:e9:8a:72:00:64:ac:53:1d: f1:81:16:71:d2:89:c6:80:3b:d7:99:4c:01:8e:f9: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:F4:2D:E4:81:8A:49:61:5C:83:C4:5E:6F:D1:D0:B9:7B:95:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.164.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:09:09:9d:96:d6:5c:27:2c:17:7c:72:06:64:8b:6c:38:54: ea:d9:8e:aa:a3:cb:bf:de:f4:d7:03:0e:b6:e7:04:87:93:28: 3b:e8:df:37:cc:c8:81:52:e7:92:97:16:8e:90:01:66:d7:5d: 0e:81:b4:c5:a3:26:b0:16:88:04:7e:c9:eb:fb:83:5b:07:d9: af:f7:17:82:d7:46:84:5c:4b:87:ac:a8:c9:21:9a:b8:e0:9d: c4:9c:e9:4c:75:c2:52:cc:ea:5f:58:52:24:46:ed:61:67:28: df:c3:a6:cb:b2:08:8a:9b:cd:b0:1e:d1:be:10:6b:e3:20:3d: 7a:6d:ea:4d:f7:22:96:d7:2f:fb:a6:9f:45:c5:5a:f7:4b:c2: 28:d5:c3:ca:b9:cf:e5:71:b9:8d:45:38:6d:a1:c5:77:6f:73: 7c:39:f3:0f:c4:fe:4e:57:fb:60:87:03:e8:78:de:f0:8d:4b: a4:17:8d:53:0d:f0:0a:29:5f:c9:77:a6:2a:ed:1c:26:c0:89: 10:dc:87:5d:c8:cf:f9:90:30:10:25:d1:51:b9:e6:3a:1b:2a: f5:ca:8c:f3:3e:bd:bd:e3:f2:ad:5d:15:52:c3:e2:bc:8b:91: 2e:4d:e6:ca:4b:3d:50:54:40:57:bc:d6:67:f8:4e:95:24:c3: 5c:35:90:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t6oFWehtWX1794AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTZlMTJmY2QtMTMzOC00MTE0LTljODEtMDkwYWIxYjg3MzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxtWZoD3bAoDWSTJzyCJ2NOiiq5Fh8lJCygR fNKPViOGT9H7ytz9DjIJmbCH/HEoyycr/dMlHhuyWlFdKRmgAiv9EWYnrTvywg7Z KZdlaVfu3N8Qp4wlBqa+5BbRwNxtrIt1O1k3+CZJciCpfk1vFQvkdTzTfXH62GxB mJP71wSqPB/mDsB8UZR6e8WpxwKOgKQJ9jT5b7dq9DBkPEVoEFjAlmkCEY2awJvu mrzkMF/a/ckciDjA20C1DuVWBdwLXBo22zDzyTeTR2ZMVUCVArYpyv57k6tl4oeO RE/ipRaMKRo2YdBW6YpyAGSsUx3xgRZx0onGgDvXmUwBjvmx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH49C3kgYpJYVyDxF5v0dC5e5ViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTdiZDQ5OGEtOGJjYi0z N2EyLTgyMzAtMjMyMmIzZjhmNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcJCZ2W1lwnLBd8cgZki2w4VOrZjqqjy7/e9NcDDrbnBIeTKDvo3zfM yIFS55KXFo6QAWbXXQ6BtMWjJrAWiAR+yev7g1sH2a/3F4LXRoRcS4esqMkhmrjg ncSc6Ux1wlLM6l9YUiRG7WFnKN/DpsuyCIqbzbAe0b4Qa+MgPXpt6k33IpbXL/um n0XFWvdLwijVw8q5z+VxuY1FOG2hxXdvc3w58w/E/k5X+2CHA+h43vCNS6QXjVMN 8AopX8l3pirtHCbAiRDch13Iz/mQMBAl0VG55jobKvXKjPM+vb3j8q1dFVLD4ryL kS5N5spLPVBUQFe81mf4TpUkw1w1kAY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:12:35 2025 by rpki-client