$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2720ffaf-7234-3be9-b728-fbd98941ea5f.roa File: 2720ffaf-7234-3be9-b728-fbd98941ea5f.roa (raw, json) Hash identifier: oZs7o4HjX8UykIS0wjKSrwDiXndaw041FX0Z2kR6oqo= Subject key identifier: 96:10:B6:BF:D9:83:F2:60:E1:03:C4:CB:97:9E:2B:D0:7F:F0:DF:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC35B34B170791A4102BE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2720ffaf-7234-3be9-b728-fbd98941ea5f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 67.171.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:5b:34:b1:70:79:1a:41:02:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ed0fdd8b-8d8a-4573-b3dc-35a1b87e994f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:62:1f:cc:c1:1a:8c:4e:ba:79:ab:4a:85: f4:a8:91:56:59:93:7d:85:2e:e8:8f:cd:6a:b9:d6: 93:0d:ac:70:fe:21:44:e2:b2:85:60:bc:9a:1c:4a: c0:87:02:f1:dd:4a:b3:ff:9d:d9:28:03:58:92:8a: bd:4a:9a:6b:f6:91:be:3f:f2:02:49:ca:60:f1:21: 45:90:e4:69:5b:b9:1e:a4:35:e6:14:d8:a7:5b:81: f4:ab:9f:88:a5:bb:86:c4:89:40:44:1d:56:33:52: 46:5c:2b:e3:6a:2d:40:73:37:d9:17:c7:0a:75:f3: 76:c2:fd:69:63:3b:97:b6:be:ba:1c:6e:3c:23:f0: 23:42:e3:8b:98:80:5c:ec:ef:29:e8:4a:8c:c3:7a: 3d:2b:70:06:eb:e9:63:af:28:22:d5:6f:5d:aa:dc: da:a4:7e:6c:23:be:aa:e9:25:75:11:c7:02:61:a8: f9:a3:a8:94:e7:91:c4:b8:ad:cd:a0:6b:cf:2f:6a: bb:e0:ad:8e:73:bc:c6:cb:4a:c8:77:fd:bc:71:28: 6f:da:6f:1a:3e:3c:57:84:2b:4e:51:8f:56:c0:37: fd:95:3f:ed:18:33:ba:cb:a7:98:7e:ec:8b:55:b2: 26:cf:44:de:81:a3:93:e7:66:e7:19:dd:f5:07:2c: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:10:B6:BF:D9:83:F2:60:E1:03:C4:CB:97:9E:2B:D0:7F:F0:DF:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2720ffaf-7234-3be9-b728-fbd98941ea5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cd:6f:ef:70:1d:ce:6c:94:e9:34:50:b1:10:b2:e8:8d:7c: 57:97:b6:fc:b4:70:80:fb:8e:3f:35:0c:36:c0:df:4e:dd:62: e6:07:bc:b4:56:13:58:76:d9:10:94:c6:8c:c9:9c:4d:94:bf: a3:51:79:98:22:8c:f8:b5:7c:11:29:96:d4:f7:94:91:e7:e3: 07:37:ff:11:24:d1:b3:84:b8:4e:d0:c9:23:67:39:a2:6c:43: 1a:48:f0:2a:21:ef:bc:a9:9d:0f:7b:6b:20:38:f5:30:08:4f: 85:68:a3:0b:80:68:a4:c3:57:37:4b:4f:b0:76:f6:42:ac:d7: 2a:0f:3c:c9:57:a6:97:30:ad:47:a7:ab:8b:a0:9f:7f:ed:fe: 25:da:e4:2b:10:2c:13:e5:a9:37:0c:19:17:6f:04:ef:4e:2b: cc:33:e3:ca:16:52:db:38:7d:8f:eb:f9:39:36:76:03:5d:64: 01:81:f9:80:47:90:b1:41:5d:90:06:f3:66:c3:d1:d1:08:cc: a1:90:8e:db:d5:f6:d7:75:3a:ba:24:4e:c7:d0:b6:6b:96:38: 02:44:51:0e:91:b2:b5:6f:fb:1c:a8:9d:f3:67:47:26:38:e5: 92:53:9e:b1:b6:e7:6d:cc:c1:fb:dd:74:09:a1:d8:bb:53:4c: cd:4f:b0:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw1s0sXB5GkECvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWQwZmRkOGItOGQ4YS00NTczLWIzZGMtMzVhMWI4N2U5OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW1iH8zBGoxOunmrSoX0qJFWWZN9hS7oj81q udaTDaxw/iFE4rKFYLyaHErAhwLx3Uqz/53ZKANYkoq9Sppr9pG+P/ICScpg8SFF kORpW7kepDXmFNinW4H0q5+IpbuGxIlARB1WM1JGXCvjai1AczfZF8cKdfN2wv1p YzuXtr66HG48I/AjQuOLmIBc7O8p6EqMw3o9K3AG6+ljrygi1W9dqtzapH5sI76q 6SV1EccCYaj5o6iU55HEuK3NoGvPL2q74K2Oc7zGy0rId/28cShv2m8aPjxXhCtO UY9WwDf9lT/tGDO6y6eYfuyLVbImz0TegaOT52bnGd31ByyZ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYQtr/Zg/Jg4QPEy5eeK9B/8N/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjcyMGZmYWYtNzIzNC0z YmU5LWI3MjgtZmJkOTg5NDFlYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6t+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITNb+9wHc5slOk0ULEQsuiNfFeXtvy0cID7jj81DDbA307dYuYHvLRW E1h22RCUxozJnE2Uv6NReZgijPi1fBEpltT3lJHn4wc3/xEk0bOEuE7QySNnOaJs QxpI8Coh77ypnQ97ayA49TAIT4VoowuAaKTDVzdLT7B29kKs1yoPPMlXppcwrUen q4ugn3/t/iXa5CsQLBPlqTcMGRdvBO9OK8wz48oWUts4fY/r+Tk2dgNdZAGB+YBH kLFBXZAG82bD0dEIzKGQjtvV9td1OrokTsfQtmuWOAJEUQ6RsrVv+xyonfNnRyY4 5ZJTnrG2523MwfvddAmh2LtTTM1PsNc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:32:14 2025 by rpki-client