$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab63ecb-fdbe-316f-ad24-55a77a6907f9.roa File: 1ab63ecb-fdbe-316f-ad24-55a77a6907f9.roa (raw, json) Hash identifier: sTXSIlLQ4daEqWUUwCV9gWFHdLy1ggwtF3IYfud4ga8= Subject key identifier: 84:87:51:9D:A3:46:E4:76:58:E6:71:B4:05:83:E9:FF:0F:F2:0E:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9B7F77F0C458730D4A400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab63ecb-fdbe-316f-ad24-55a77a6907f9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 67.189.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:b7:f7:7f:0c:45:87:30:d4:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=897ab550-45cf-4ae2-8869-bfe1b3c88b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:41:f3:d2:4b:29:c8:c0:cc:2e:9b:3e:90: f7:fd:8c:4d:4d:5a:9f:02:d0:ab:0f:43:bf:8b:39: 1f:87:85:39:93:0c:dd:2f:c2:e5:95:09:e9:14:1a: af:82:51:a0:62:23:02:fc:0a:45:6a:f5:63:07:27: a0:4a:82:71:97:48:7d:1a:2a:aa:26:ee:67:cc:d5: d5:4d:75:48:5e:75:e0:5e:d7:54:f6:be:8a:9d:a0: 14:94:4c:20:a3:d3:a6:70:03:a9:73:a4:c4:c5:49: a4:00:15:47:4b:ce:ce:45:72:db:f0:9c:5c:40:16: 8c:57:00:1c:b4:81:22:ab:20:26:a5:21:cf:81:b3: fc:f0:90:76:5e:f8:33:26:53:90:99:02:23:1e:91: 69:72:b4:50:1a:0a:56:75:2f:dd:e8:42:cd:e7:a8: 56:6d:a2:39:ea:d4:b4:c6:74:78:79:d7:6e:18:06: 34:7d:1b:83:1b:a6:eb:91:8a:d8:6e:a6:d1:76:6c: b2:1e:e6:d7:a8:15:2a:87:f6:72:8d:e0:26:ba:37: ab:a4:35:97:f7:90:09:c9:de:6d:a4:44:ca:9c:5f: d1:78:69:69:50:05:bd:ec:9f:7a:a5:d4:25:52:f5: 60:69:24:61:b0:fd:3a:0e:8a:6f:69:f1:07:57:77: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:87:51:9D:A3:46:E4:76:58:E6:71:B4:05:83:E9:FF:0F:F2:0E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab63ecb-fdbe-316f-ad24-55a77a6907f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:1a:1e:3a:2a:0b:cc:f7:71:2a:1c:c1:a0:27:85:a5:f1:e6: e3:08:ce:77:af:ab:7d:a9:75:da:c2:2b:cf:aa:78:78:a5:65: da:f5:53:32:6c:e0:f9:84:38:86:5d:f3:d1:07:66:dc:8a:38: 95:8a:a8:76:a6:fd:e9:e0:4b:49:e2:c6:a8:71:6b:3a:6f:be: 55:4e:ac:ef:71:98:4f:90:f4:41:96:6e:8f:ff:0f:27:94:4a: d8:99:cc:3f:09:c3:7d:d4:b7:60:49:50:2a:2f:c8:7e:72:e4: fb:cb:34:16:59:83:0b:96:bb:78:58:c9:14:53:0c:92:c1:75: d9:30:e1:2e:5b:d9:00:5a:77:ee:20:ed:c3:6c:d9:9a:29:56: e8:32:46:00:6a:e2:b5:fc:2c:67:28:9f:ec:26:8b:8b:09:cb: 89:c6:2e:51:cd:6a:45:bf:56:fd:b6:b0:bc:83:c7:77:58:9f: d0:ce:f6:91:d7:81:4f:71:ae:e6:a7:15:a0:be:92:fb:bb:47: 2e:75:af:30:16:7a:d3:4a:84:62:3c:db:83:b7:e8:e7:87:24: a2:55:4a:d0:56:34:43:1a:6c:7c:df:28:2c:b8:9c:bd:e4:d3: c4:b9:d2:f1:8a:31:ce:61:de:a9:34:b4:9b:da:0b:67:e5:ad: 66:0f:db:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqbf3fwxFhzDUpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODk3YWI1NTAtNDVjZi00YWUyLTg4NjktYmZlMWIzYzg4YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkplB89JLKcjAzC6bPpD3/YxNTVqfAtCrD0O/ izkfh4U5kwzdL8LllQnpFBqvglGgYiMC/ApFavVjByegSoJxl0h9GiqqJu5nzNXV TXVIXnXgXtdU9r6KnaAUlEwgo9OmcAOpc6TExUmkABVHS87ORXLb8JxcQBaMVwAc tIEiqyAmpSHPgbP88JB2XvgzJlOQmQIjHpFpcrRQGgpWdS/d6ELN56hWbaI56tS0 xnR4edduGAY0fRuDG6brkYrYbqbRdmyyHubXqBUqh/ZyjeAmujerpDWX95AJyd5t pETKnF/ReGlpUAW97J96pdQlUvVgaSRhsP06DopvafEHV3dsHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISHUZ2jRuR2WOZxtAWD6f8P8g79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFiNjNlY2ItZmRiZS0z MTZmLWFkMjQtNTVhNzdhNjkwN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ738MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIaHjoqC8z3cSocwaAnhaXx5uMIznevq32pddrCK8+qeHilZdr1UzJs 4PmEOIZd89EHZtyKOJWKqHam/engS0nixqhxazpvvlVOrO9xmE+Q9EGWbo//DyeU StiZzD8Jw33Ut2BJUCovyH5y5PvLNBZZgwuWu3hYyRRTDJLBddkw4S5b2QBad+4g 7cNs2ZopVugyRgBq4rX8LGcon+wmi4sJy4nGLlHNakW/Vv22sLyDx3dYn9DO9pHX gU9xruanFaC+kvu7Ry51rzAWetNKhGI824O36OeHJKJVStBWNEMabHzfKCy4nL3k 08S50vGKMc5h3qk0tJvaC2flrWYP24Y= -----END CERTIFICATE-----Generated at Mon Oct 20 21:03:03 2025 by rpki-client