$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28db0ed2-5b3b-311a-893d-10cbec430e7d.roa File: 28db0ed2-5b3b-311a-893d-10cbec430e7d.roa (raw, json) Hash identifier: wZNhoZhs59r7CVRz8FQi4JUg6AQCTqjNYVeS0jwRuTE= Subject key identifier: EE:B3:8F:86:21:15:D0:D4:7A:F8:44:32:AF:15:96:65:00:F2:D4:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3DFBF56B070220D66D180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28db0ed2-5b3b-311a-893d-10cbec430e7d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 69.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:df:bf:56:b0:70:22:0d:66:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=48dfad44-a240-47e7-b5b5-694da9d906ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:4d:0a:05:62:19:9d:e1:6e:80:a6:b2:4c: 13:91:15:51:21:58:20:bc:a6:0a:a7:ef:b0:7a:2a: b6:c6:a6:97:e1:5a:c5:0a:e9:95:4d:1f:a7:dd:10: 57:94:2d:59:c2:20:29:af:c2:dc:d6:40:e6:66:7b: be:d5:45:5a:54:a3:53:61:c4:f6:0f:7e:f2:d6:4f: fe:a2:14:64:97:62:94:93:97:f2:14:ec:9b:03:5f: ba:59:1f:af:71:41:b4:79:54:48:df:52:a4:10:73: 8d:d6:a9:45:e9:26:d6:19:af:c0:12:e8:00:39:bb: 17:40:d1:f4:2c:80:5d:5e:aa:4f:d1:52:11:86:d6: 72:b3:3b:80:06:e8:07:9c:26:31:d2:f5:f2:e8:b1: 38:04:23:67:c0:2a:32:87:04:40:a9:c2:d3:f1:d6: 29:ed:38:ae:3f:89:c3:81:5d:0e:91:ed:ef:fe:e1: 72:6a:af:0c:a4:f0:c0:67:9f:8f:76:83:70:0b:06: 32:b9:06:e4:12:82:46:17:13:46:f8:63:0f:e2:23: 2b:81:34:d9:53:d2:3e:f9:b6:eb:37:cc:7d:16:63: 28:43:61:ef:94:e1:63:00:5c:d5:c2:d7:32:bf:48: a2:35:67:2d:35:91:d1:97:40:be:b0:a6:f4:3a:da: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B3:8F:86:21:15:D0:D4:7A:F8:44:32:AF:15:96:65:00:F2:D4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28db0ed2-5b3b-311a-893d-10cbec430e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:63:fb:53:16:68:56:78:3a:93:bd:4f:bd:8b:91:1e:8f:5f: e3:e3:20:94:84:48:7d:d3:99:d5:85:52:4d:55:84:a0:c0:60: 46:f1:51:25:44:08:3e:af:34:99:93:40:f6:75:fd:1d:04:dd: af:4c:f3:f2:ee:62:bd:8b:8b:15:f5:c6:ec:58:b9:8e:99:da: c2:ce:b7:5f:ac:bb:fb:da:8b:c8:d9:ea:b0:4a:ea:79:4f:f4: e0:22:c6:33:50:0e:7f:dd:0c:a0:b3:4c:32:cd:a0:3f:b5:aa: 52:2d:a7:24:a8:d2:66:46:d9:9c:75:b0:ea:94:84:a6:c4:c9: ae:83:12:f6:0a:5a:59:2c:66:dd:3a:6d:c0:52:65:fa:75:d8: bc:41:ce:1e:e8:4e:fc:c4:65:75:a3:32:6f:d1:e4:ed:2a:62: 06:55:3b:56:88:34:6a:25:be:c3:e3:82:ad:4a:de:d0:27:d0: 73:1d:21:bd:0c:48:32:84:ba:a3:37:dd:6f:96:03:33:af:11: e4:16:c2:d1:4d:de:00:55:6d:ab:ff:68:01:ca:5f:14:a2:75: dc:06:40:58:2a:46:05:fa:66:8d:58:92:da:b8:73:12:22:6f: 77:59:13:64:bd:62:d6:63:4f:51:10:ce:2e:73:22:53:45:c9: 0a:1e:34:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw9+/VrBwIg1m0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDhkZmFkNDQtYTI0MC00N2U3LWI1YjUtNjk0ZGE5ZDkwNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFtNCgViGZ3hboCmskwTkRVRIVggvKYKp++w eiq2xqaX4VrFCumVTR+n3RBXlC1ZwiApr8Lc1kDmZnu+1UVaVKNTYcT2D37y1k/+ ohRkl2KUk5fyFOybA1+6WR+vcUG0eVRI31KkEHON1qlF6SbWGa/AEugAObsXQNH0 LIBdXqpP0VIRhtZyszuABugHnCYx0vXy6LE4BCNnwCoyhwRAqcLT8dYp7TiuP4nD gV0Oke3v/uFyaq8MpPDAZ5+PdoNwCwYyuQbkEoJGFxNG+GMP4iMrgTTZU9I++bbr N8x9FmMoQ2HvlOFjAFzVwtcyv0iiNWctNZHRl0C+sKb0OtplKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6zj4YhFdDUevhEMq8VlmUA8tS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhkYjBlZDItNWIzYi0z MTFhLTg5M2QtMTBjYmVjNDMwZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARf35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpj+1MWaFZ4OpO9T72LkR6PX+PjIJSESH3TmdWFUk1VhKDAYEbxUSVE CD6vNJmTQPZ1/R0E3a9M8/LuYr2LixX1xuxYuY6Z2sLOt1+su/vai8jZ6rBK6nlP 9OAixjNQDn/dDKCzTDLNoD+1qlItpySo0mZG2Zx1sOqUhKbEya6DEvYKWlksZt06 bcBSZfp12LxBzh7oTvzEZXWjMm/R5O0qYgZVO1aINGolvsPjgq1K3tAn0HMdIb0M SDKEuqM33W+WAzOvEeQWwtFN3gBVbav/aAHKXxSiddwGQFgqRgX6Zo1Yktq4cxIi b3dZE2S9YtZjT1EQzi5zIlNFyQoeNHQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:05 2025 by rpki-client