$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3ce13c-db4e-38f4-a290-d984702e6308.roa File: 1a3ce13c-db4e-38f4-a290-d984702e6308.roa (raw, json) Hash identifier: vbrW5Fe1BfviOlLrH7qDI2DCb2vWt09k2gYDmcifgaQ= Subject key identifier: 02:DC:D9:61:D6:E1:3C:95:28:26:70:55:0A:EB:92:5C:3C:12:F8:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A77C319127842CB744D5A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3ce13c-db4e-38f4-a290-d984702e6308.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 67.167.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:7c:31:91:27:84:2c:b7:44:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=f7f68790-be72-40e5-b9ba-7ff1ecd7c00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:f0:91:96:2a:46:b8:a6:e5:c7:56:8b:d5: f0:b8:ce:52:35:50:16:43:34:0f:c7:9c:fd:92:66: c5:26:d8:88:85:d8:79:1b:c1:cb:05:a2:13:9a:c2: fa:3a:22:b4:bf:59:50:e0:3e:7b:a0:1f:aa:e2:d1: 2f:a6:f0:70:34:50:ae:28:ac:7a:9c:60:47:d0:1e: 90:d5:b1:4b:36:c1:29:77:3c:86:de:9a:f9:a5:ce: ef:ed:66:6e:75:af:92:84:18:4c:9e:c7:73:31:8f: 3f:cd:be:1d:98:59:42:4e:91:08:8f:56:39:1e:42: bd:c6:2a:fd:d1:69:af:2f:84:24:6e:ef:5f:9c:e0: 92:c5:3e:23:ca:a8:ea:fc:d5:9a:a7:8f:43:19:e0: e8:99:9c:89:a7:19:9f:5a:9e:8c:59:2b:cc:c9:04: db:fe:a6:38:9a:26:69:a1:4b:2f:2f:f9:e3:6f:64: 91:73:92:c5:6c:15:5b:fc:fd:ef:42:98:41:86:2d: 63:0d:53:62:39:e7:ec:8e:16:be:e7:a5:96:26:c7: 1f:90:03:fa:0c:11:c5:79:a6:ea:7d:52:7c:ef:8f: 11:07:bb:6f:05:51:d4:df:5b:38:ae:8d:a4:f4:e6: ac:71:3d:41:6c:f1:e7:a6:23:c2:18:94:53:98:17: c4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DC:D9:61:D6:E1:3C:95:28:26:70:55:0A:EB:92:5C:3C:12:F8:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3ce13c-db4e-38f4-a290-d984702e6308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c9:c5:e7:15:8f:7c:00:b9:01:ff:45:14:88:92:7f:1f:6d: f7:dd:b0:91:c1:bf:d4:0f:80:7a:af:23:5b:0d:49:b9:99:7f: 49:20:6a:21:7a:59:f8:5e:05:27:15:68:20:02:af:bb:8f:38: d4:43:26:67:44:5e:7e:16:37:b6:3c:1c:19:89:84:01:90:7e: a5:bc:88:74:af:b5:72:0f:3e:81:78:7e:74:0b:a4:db:cb:c4: 2a:18:d1:10:6b:dd:99:ba:0a:2a:47:d1:b0:7f:c5:1e:6f:58: 42:0d:06:11:f2:fa:82:15:37:52:c9:40:9c:ce:78:c8:c8:53: 26:54:c7:68:f4:0c:58:1b:8b:af:f3:f2:55:2e:78:cc:25:f3: 93:db:23:f3:6b:a4:4b:0c:9d:a6:ea:d4:41:fa:2e:76:c9:34: 60:b8:da:4f:0d:5f:12:9e:f4:30:35:96:66:6b:c2:74:f1:88: 5e:8d:13:d0:4e:cd:82:37:54:15:08:1c:3f:b9:79:f2:49:7f: 4e:d8:4b:bb:e2:fc:07:1c:f8:97:66:e3:09:79:be:63:f7:11: ff:11:19:36:4f:b6:e0:c6:93:2c:5c:bf:59:70:c1:db:59:4a: 57:5e:cd:45:d4:22:0c:55:b6:d5:26:44:ae:58:67:ec:f0:83: 9d:26:5e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3wxkSeELLdE1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZjdmNjg3OTAtYmU3Mi00MGU1LWI5YmEtN2ZmMWVjZDdjMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIHwkZYqRrim5cdWi9XwuM5SNVAWQzQPx5z9 kmbFJtiIhdh5G8HLBaITmsL6OiK0v1lQ4D57oB+q4tEvpvBwNFCuKKx6nGBH0B6Q 1bFLNsEpdzyG3pr5pc7v7WZuda+ShBhMnsdzMY8/zb4dmFlCTpEIj1Y5HkK9xir9 0WmvL4Qkbu9fnOCSxT4jyqjq/NWap49DGeDomZyJpxmfWp6MWSvMyQTb/qY4miZp oUsvL/njb2SRc5LFbBVb/P3vQphBhi1jDVNiOefsjha+56WWJscfkAP6DBHFeabq fVJ8748RB7tvBVHU31s4ro2k9OascT1BbPHnpiPCGJRTmBfE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALc2WHW4TyVKCZwVQrrklw8EvjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWEzY2UxM2MtZGI0ZS0z OGY0LWEyOTAtZDk4NDcwMmU2MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/JxecVj3wAuQH/RRSIkn8fbffdsJHBv9QPgHqvI1sNSbmZf0kgaiF6 WfheBScVaCACr7uPONRDJmdEXn4WN7Y8HBmJhAGQfqW8iHSvtXIPPoF4fnQLpNvL xCoY0RBr3Zm6CipH0bB/xR5vWEINBhHy+oIVN1LJQJzOeMjIUyZUx2j0DFgbi6/z 8lUueMwl85PbI/NrpEsMnabq1EH6LnbJNGC42k8NXxKe9DA1lmZrwnTxiF6NE9BO zYI3VBUIHD+5efJJf07YS7vi/Acc+Jdm4wl5vmP3Ef8RGTZPtuDGkyxcv1lwwdtZ SldezUXUIgxVttUmRK5YZ+zwg50mXjE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:15 2025 by rpki-client