$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2933a819-44a7-3087-b0fe-345c1a567263.roa File: 2933a819-44a7-3087-b0fe-345c1a567263.roa (raw, json) Hash identifier: 4TS3VyGb+1ODghRpWqgTe33TnR1AL0FGCpCrrn8PfUE= Subject key identifier: 5E:C2:6A:A0:86:C8:96:D5:72:19:2A:62:76:C8:F0:01:54:C7:84:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC432B39186BEE571A344A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2933a819-44a7-3087-b0fe-345c1a567263.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.175.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:32:b3:91:86:be:e5:71:a3:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7d8808e9-6fff-43b8-8dbc-a3a83bee09ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:a7:0b:dd:fb:dd:b1:92:7f:fe:2f:dd:b3: b7:53:4f:71:a2:49:6e:c2:63:aa:a3:7e:ca:aa:bc: 3f:f9:46:9e:bb:a5:0f:a9:09:dd:9a:c7:82:8b:32: 8c:63:9d:98:3d:7a:47:66:b6:9e:42:df:7a:23:e2: 0c:34:2c:e2:80:0b:6e:09:a6:12:6d:f0:b5:a7:24: 43:5e:e5:6c:9d:85:ef:c2:41:59:4e:3a:95:01:73: 73:42:68:53:39:f4:fa:fa:ba:ea:b1:38:a0:8f:7b: a2:9e:84:32:80:78:8d:22:2a:f7:54:2b:27:56:2b: 31:f0:8e:e4:e6:e2:8c:83:5d:6f:56:fd:37:b5:08: a3:0e:b4:04:33:eb:54:43:e6:6e:e7:d7:df:27:0f: f4:ba:42:97:bd:99:14:29:10:21:79:d6:35:0b:7e: ba:a3:a8:09:2f:fa:1c:b4:4d:eb:6e:0b:c0:6a:17: 59:76:4d:80:ef:85:47:8f:12:2e:b9:41:e6:75:ec: ce:de:16:73:28:73:ac:41:25:d2:de:be:15:a7:a4: e3:55:73:e1:cb:be:a0:ec:23:7c:64:8a:1b:b8:8b: e2:7d:56:7e:0d:bf:48:01:f1:77:92:25:d4:1b:28: 79:bd:c7:e5:4f:6f:06:dd:22:a2:48:63:e0:65:38: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C2:6A:A0:86:C8:96:D5:72:19:2A:62:76:C8:F0:01:54:C7:84:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2933a819-44a7-3087-b0fe-345c1a567263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.175.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:3a:71:b3:8b:68:8f:eb:33:0d:d8:5a:72:51:3c:1e:c6:97: 23:5a:6e:63:fc:73:f7:08:56:39:6d:6d:b4:de:17:0c:d5:b0: ab:58:97:a4:88:ef:fc:9e:de:66:1e:5b:57:17:50:1d:b6:d4: 87:a4:99:5c:df:96:69:9f:9a:ad:08:2b:b9:96:f2:82:07:2f: 60:61:59:0b:b2:fa:2d:47:9a:f8:28:b0:6f:c4:09:05:9a:d7: 7d:45:c8:ef:d5:f3:ec:2e:50:af:e3:2f:67:e0:3c:21:9e:95: 61:e7:d3:54:cf:31:0e:bc:61:d8:50:da:5d:02:f7:2f:40:c7: 7b:b2:3d:09:02:9d:15:e3:5a:bc:6a:ba:9b:8f:50:89:2d:56: 26:4b:29:f5:b3:84:4d:c4:88:e0:cf:44:e0:d8:9c:e4:b1:ae: 12:d9:5a:41:f7:90:7c:39:17:1a:1c:9a:9c:b2:ef:f2:38:e2: 8e:c0:18:1b:bc:a3:db:70:95:be:34:8e:ca:4a:83:a1:42:b8: 12:7a:b3:b3:68:f4:5e:25:3d:e2:82:b5:dc:73:38:ba:7d:93: f8:72:63:77:fc:e6:ce:d5:00:8d:ab:29:f1:2f:a2:59:b1:a1: b7:b5:47:0b:b6:f1:23:02:27:d5:f9:7f:fa:ad:45:db:52:6f: 3e:9c:7b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDKzkYa+5XGjRKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2Q4ODA4ZTktNmZmZi00M2I4LThkYmMtYTNhODNiZWUwOWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6+nC9373bGSf/4v3bO3U09xokluwmOqo37K qrw/+Uaeu6UPqQndmseCizKMY52YPXpHZraeQt96I+IMNCzigAtuCaYSbfC1pyRD XuVsnYXvwkFZTjqVAXNzQmhTOfT6+rrqsTigj3uinoQygHiNIir3VCsnVisx8I7k 5uKMg11vVv03tQijDrQEM+tUQ+Zu59ffJw/0ukKXvZkUKRAhedY1C366o6gJL/oc tE3rbgvAahdZdk2A74VHjxIuuUHmdezO3hZzKHOsQSXS3r4Vp6TjVXPhy76g7CN8 ZIobuIvifVZ+Db9IAfF3kiXUGyh5vcflT28G3SKiSGPgZThKQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7CaqCGyJbVchkqYnbI8AFUx4S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjkzM2E4MTktNDRhNy0z MDg3LWIwZmUtMzQ1YzFhNTY3MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMc6cbOLaI/rMw3YWnJRPB7GlyNabmP8c/cIVjltbbTeFwzVsKtYl6SI 7/ye3mYeW1cXUB221IekmVzflmmfmq0IK7mW8oIHL2BhWQuy+i1HmvgosG/ECQWa 131FyO/V8+wuUK/jL2fgPCGelWHn01TPMQ68YdhQ2l0C9y9Ax3uyPQkCnRXjWrxq upuPUIktViZLKfWzhE3EiODPRODYnOSxrhLZWkH3kHw5Fxocmpyy7/I44o7AGBu8 o9twlb40jspKg6FCuBJ6s7No9F4lPeKCtdxzOLp9k/hyY3f85s7VAI2rKfEvolmx obe1Rwu28SMCJ9X5f/qtRdtSbz6ceyk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:13 2025 by rpki-client