$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e3a4ffc-b3b8-3e06-9c57-ff3496db1f4d.roa File: 2e3a4ffc-b3b8-3e06-9c57-ff3496db1f4d.roa (raw, json) Hash identifier: gCpyJueLt+q50a+pbzK/iA7qXNsPJZ3cORvoXieamMY= Subject key identifier: 56:D4:42:43:1D:46:77:33:63:9C:0A:52:E6:07:B2:56:29:07:6C:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC21DA47B97FB2C6B3BE100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e3a4ffc-b3b8-3e06-9c57-ff3496db1f4d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.163.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:1d:a4:7b:97:fb:2c:6b:3b:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=33bd2a23-6ddc-44ac-81e4-1ac38d7c8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d8:52:89:be:80:76:67:66:a6:39:2e:f2:5c: 48:8a:8b:76:0d:44:80:71:be:7e:9a:e8:f5:b5:c1: 85:e0:17:c7:35:c3:55:d3:16:b2:db:42:22:46:ac: 40:29:4b:46:38:11:6d:2a:a8:53:d7:00:73:18:aa: 85:ec:d2:7a:af:ca:e3:78:44:1e:13:e1:99:4c:b3: 94:ce:dc:58:c5:77:76:5c:0e:83:ea:16:2e:a3:3a: 17:ae:78:6c:80:47:db:11:2d:c9:2f:f7:ca:91:ad: 00:94:60:6a:47:8d:03:5b:13:6a:2a:e8:1f:57:9b: 69:4b:1d:db:27:cd:15:e8:1d:84:85:e6:a4:58:48: a9:6e:ba:b8:f3:0b:5b:06:8c:3c:47:c8:15:01:5b: 87:0a:28:73:46:e7:eb:17:2d:85:1d:91:d7:b9:16: 43:58:11:74:c0:1f:bc:46:d5:81:e9:f8:7b:49:16: 8e:40:e0:45:49:9e:ee:34:d0:5e:1b:db:79:b3:01: 4e:8f:5c:70:48:9b:48:3e:d2:38:6b:9e:42:62:f4: 9e:d2:32:4d:36:11:d8:9a:fc:3f:28:84:6c:b7:47: 3c:ab:b1:f1:7c:1b:5f:a1:31:9e:7c:39:f3:e3:c3: 71:25:b6:ce:9a:6f:c7:ec:b3:5d:0c:ec:4c:86:f2: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:42:43:1D:46:77:33:63:9C:0A:52:E6:07:B2:56:29:07:6C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e3a4ffc-b3b8-3e06-9c57-ff3496db1f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.163.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ac:a3:f3:df:0a:69:aa:f2:1a:67:69:80:8f:30:48:01:fb: 0d:04:99:e4:b6:58:5a:b6:02:01:a6:95:23:4b:b0:a1:b3:34: e9:ae:08:1c:27:a8:83:ca:ce:06:2d:dc:e2:56:24:3a:6f:d4: c6:08:b3:d1:f4:79:36:6c:8e:4e:53:53:c5:ad:32:12:a4:3c: 66:0e:2f:6a:10:ce:d6:11:17:e1:9a:7e:75:89:83:1a:70:53: 78:bd:a0:e8:bf:37:bf:71:cb:82:c3:02:b0:46:88:f0:9e:b2: 8f:7f:0b:b6:1f:15:8a:78:4d:51:c7:b3:47:c7:78:43:55:e5: 2e:dd:01:34:f0:33:a3:1a:fb:1a:3d:12:73:55:d9:2c:9e:26: 7e:74:9f:18:38:f6:2a:1d:17:a8:ae:41:ce:7c:09:dd:32:76: e4:15:16:d8:10:b7:7c:9b:61:a0:af:b1:05:d8:33:29:18:fa: b9:4d:7e:fd:4e:3b:71:4a:41:16:14:dd:58:71:51:80:08:f8: 11:08:da:ed:45:b3:55:37:55:af:4c:af:7d:02:9e:13:b9:4e: 3a:5a:f9:e3:6d:e0:76:26:55:30:d6:d4:94:fe:3f:e9:8d:9a: ad:8a:0b:40:86:48:67:63:9d:47:21:e5:14:93:58:81:35:9a: e2:70:f0:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswh2ke5f7LGs74QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzNiZDJhMjMtNmRkYy00NGFjLTgxZTQtMWFjMzhkN2M4NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgthSib6Admdmpjku8lxIiot2DUSAcb5+muj1 tcGF4BfHNcNV0xay20IiRqxAKUtGOBFtKqhT1wBzGKqF7NJ6r8rjeEQeE+GZTLOU ztxYxXd2XA6D6hYuozoXrnhsgEfbES3JL/fKka0AlGBqR40DWxNqKugfV5tpSx3b J80V6B2EheakWEipbrq48wtbBow8R8gVAVuHCihzRufrFy2FHZHXuRZDWBF0wB+8 RtWB6fh7SRaOQOBFSZ7uNNBeG9t5swFOj1xwSJtIPtI4a55CYvSe0jJNNhHYmvw/ KIRst0c8q7HxfBtfoTGefDnz48NxJbbOmm/H7LNdDOxMhvIR+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbUQkMdRnczY5wKUuYHslYpB2yZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmUzYTRmZmMtYjNiOC0z ZTA2LTljNTctZmYzNDk2ZGIxZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOso/PfCmmq8hpnaYCPMEgB+w0EmeS2WFq2AgGmlSNLsKGzNOmuCBwn qIPKzgYt3OJWJDpv1MYIs9H0eTZsjk5TU8WtMhKkPGYOL2oQztYRF+GafnWJgxpw U3i9oOi/N79xy4LDArBGiPCeso9/C7YfFYp4TVHHs0fHeENV5S7dATTwM6Ma+xo9 EnNV2SyeJn50nxg49iodF6iuQc58Cd0yduQVFtgQt3ybYaCvsQXYMykY+rlNfv1O O3FKQRYU3VhxUYAI+BEI2u1Fs1U3Va9Mr30CnhO5Tjpa+eNt4HYmVTDW1JT+P+mN mq2KC0CGSGdjnUch5RSTWIE1muJw8NM= -----END CERTIFICATE-----Generated at Sun Aug 24 03:53:30 2025 by rpki-client