$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cc99a35-3a23-376f-ad08-44617d7c60b9.roa File: 2cc99a35-3a23-376f-ad08-44617d7c60b9.roa (raw, json) Hash identifier: 2wl2gu2CvOt3S0SsZIYmB+ri0umScBID81ZeqVUOteA= Subject key identifier: C9:95:BE:E9:73:EC:64:7D:94:DB:DA:D9:CB:2A:E8:A3:8B:34:78:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3DD62DD13D2922A172440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cc99a35-3a23-376f-ad08-44617d7c60b9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 69.253.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:dd:62:dd:13:d2:92:2a:17:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b2de25ee-6892-43fc-bbca-cd58ab05142f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:c0:5a:ef:65:07:9c:b0:46:88:cd:09:b6: 94:68:75:82:41:58:ac:b7:a4:20:88:42:0e:6c:82: ee:63:b2:2a:83:e9:49:1a:ee:f3:ed:dd:a5:0d:e1: 11:9f:72:b7:0c:57:8f:61:cd:8c:8d:42:00:3b:02: 8f:e0:ec:b6:e5:3c:af:c5:84:ae:33:84:59:9c:66: 47:46:36:ec:5a:f1:51:64:68:fc:8c:df:c4:7b:1c: 71:1b:16:1c:9a:54:a9:ca:6a:56:45:0d:11:6d:6c: ed:9b:76:64:6e:38:a9:e7:6f:41:cf:b4:05:50:45: 69:37:fc:11:f9:48:f0:5c:e5:0c:b1:6a:34:21:ee: 2a:d2:5d:78:8e:be:e4:4e:4d:55:76:ba:70:3e:b6: 89:79:d5:3e:3c:d4:5b:03:ef:c4:66:86:89:f1:29: 8d:a6:0f:0c:7a:c8:fb:e5:b7:d1:f0:25:42:fa:1b: eb:5a:7d:bd:17:ec:a8:e0:90:e6:9b:6b:be:47:b3: 9a:91:bb:5b:96:18:95:18:bf:f5:32:eb:28:df:f9: a7:de:19:cf:00:86:d9:e8:b1:b7:85:eb:bd:9f:55: 78:ff:84:7d:7a:78:3d:03:e1:47:cc:0a:5a:15:f6: d7:dc:7f:95:d9:af:68:ff:86:ef:ca:b0:58:78:14: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:BE:E9:73:EC:64:7D:94:DB:DA:D9:CB:2A:E8:A3:8B:34:78:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cc99a35-3a23-376f-ad08-44617d7c60b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:57:90:52:f0:85:1d:d6:56:e2:35:81:79:91:33:1c:f3:80: 10:0c:25:ed:6f:79:64:2f:46:b6:3f:16:60:10:51:9e:df:27: a1:b1:3b:f2:a6:5b:b9:9d:a7:32:08:84:ae:cd:d5:2e:a5:a5: 2c:3d:11:ef:57:1e:8c:29:6a:34:df:08:cf:1d:89:9b:f7:08: 85:5e:41:97:30:d8:a8:3f:7c:59:2a:b0:86:b5:ca:c9:47:be: 28:e5:ff:bd:88:4d:62:1d:64:ab:d4:29:67:a0:76:66:e5:42: 90:fc:fe:79:34:37:23:a1:7e:78:35:da:ff:3c:cc:d2:f0:10: 73:1a:69:fd:a2:aa:a8:57:40:c9:17:e1:b3:b8:75:60:38:ba: 05:10:0f:e5:6e:3e:92:e8:d3:9b:76:65:07:f1:48:35:41:37: fd:8c:cb:ea:e4:02:24:13:38:73:1d:6c:6c:ab:13:df:62:87: da:4c:e4:65:35:25:03:1e:22:1e:f9:0f:c9:ad:a4:11:48:65: 40:f9:0d:68:33:b6:17:a9:3d:4a:c3:3e:b8:7d:d6:97:4c:31: 78:56:b0:ce:0a:48:c4:47:4d:5d:20:9d:59:3f:aa:e6:73:7d: 7b:e5:ca:10:49:d1:a2:c2:48:d8:a2:13:fb:74:45:49:26:1b: 95:7c:c9:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw91i3RPSkioXJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjJkZTI1ZWUtNjg5Mi00M2ZjLWJiY2EtY2Q1OGFiMDUxNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jjAWu9lB5ywRojNCbaUaHWCQVist6QgiEIO bILuY7Iqg+lJGu7z7d2lDeERn3K3DFePYc2MjUIAOwKP4Oy25TyvxYSuM4RZnGZH RjbsWvFRZGj8jN/EexxxGxYcmlSpympWRQ0RbWztm3Zkbjip529Bz7QFUEVpN/wR +UjwXOUMsWo0Ie4q0l14jr7kTk1VdrpwPraJedU+PNRbA+/EZoaJ8SmNpg8Mesj7 5bfR8CVC+hvrWn29F+yo4JDmm2u+R7OakbtblhiVGL/1Muso3/mn3hnPAIbZ6LG3 heu9n1V4/4R9eng9A+FHzApaFfbX3H+V2a9o/4bvyrBYeBS9BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmVvulz7GR9lNva2csq6KOLNHh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNjOTlhMzUtM2EyMy0z NzZmLWFkMDgtNDQ2MTdkN2M2MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRf1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVXkFLwhR3WVuI1gXmRMxzzgBAMJe1veWQvRrY/FmAQUZ7fJ6GxO/Km W7mdpzIIhK7N1S6lpSw9Ee9XHowpajTfCM8diZv3CIVeQZcw2Kg/fFkqsIa1yslH vijl/72ITWIdZKvUKWegdmblQpD8/nk0NyOhfng12v88zNLwEHMaaf2iqqhXQMkX 4bO4dWA4ugUQD+VuPpLo05t2ZQfxSDVBN/2My+rkAiQTOHMdbGyrE99ih9pM5GU1 JQMeIh75D8mtpBFIZUD5DWgzthepPUrDPrh91pdMMXhWsM4KSMRHTV0gnVk/quZz fXvlyhBJ0aLCSNiiE/t0RUkmG5V8yVs= -----END CERTIFICATE-----Generated at Sat Aug 23 23:09:59 2025 by rpki-client