$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4bb4ae-eca1-320c-afca-97c184cfaf8b.roa File: 2e4bb4ae-eca1-320c-afca-97c184cfaf8b.roa (raw, json) Hash identifier: Ox/RjQ4RZUT0NioVQJPH6LtXfOZRD803A0uWC4r0aRw= Subject key identifier: 3C:73:A6:20:1D:A7:B9:D0:32:64:30:1B:C5:09:03:96:68:AD:42:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2ECFAAF9B2D7B24116100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4bb4ae-eca1-320c-afca-97c184cfaf8b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.169.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:ec:fa:af:9b:2d:7b:24:11:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e3f7cf7b-6d6f-4d0f-87fc-84acc6a6884d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:9d:f7:f2:45:3d:c2:7b:54:05:6d:87:37: 4a:c6:b2:e5:3c:c6:ce:f1:76:22:68:bb:6c:bf:27: fa:f9:3e:03:5b:57:3c:b4:99:66:a1:0f:d4:9e:99: 34:a1:38:96:42:53:ef:38:fa:f1:89:e2:13:99:a2: ed:f3:a0:a6:0f:75:a9:c5:4d:ed:ad:6b:84:a9:22: 5d:45:0a:4b:49:45:0c:75:89:82:e5:bc:2f:c7:a5: 7d:07:ba:b8:44:b1:52:03:81:47:5d:d3:0c:9e:33: 39:23:8e:15:3c:b5:16:57:04:80:3f:cd:d6:2c:06: d5:b5:14:b2:8d:a9:ed:57:ce:8f:41:6e:f7:d8:f1: cf:c0:23:51:8a:59:6a:cd:9a:6c:69:77:d4:02:15: a4:9f:0b:b3:f9:71:51:38:78:6b:c9:38:11:ef:45: e5:d7:52:4d:e7:a5:bc:9d:2a:66:fc:83:c0:6d:f9: bf:b1:a5:a7:5f:8d:48:b9:63:00:70:f1:ba:83:2a: eb:58:72:2d:fa:7f:16:eb:7d:c8:c0:e2:e2:48:90: d6:95:cf:c4:09:61:03:ab:50:58:c1:98:51:88:c8: 57:b2:4a:d1:e5:8b:ba:93:89:c2:a5:77:ac:52:43: e4:cc:59:ff:24:6d:a5:4f:20:a9:c5:47:fa:6e:d3: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:A6:20:1D:A7:B9:D0:32:64:30:1B:C5:09:03:96:68:AD:42:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4bb4ae-eca1-320c-afca-97c184cfaf8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:e9:85:87:38:5b:b3:2e:8f:d1:77:e8:2f:15:b2:a4:5f:26: 03:c9:2f:5d:80:e4:99:8d:c7:fb:9f:3b:d3:bf:e6:1f:bf:1e: d7:7f:e3:da:93:e3:63:91:27:e3:2d:54:b9:8a:ef:c6:4d:21: 06:42:4b:d8:22:3c:c8:f0:06:e4:8d:f2:a7:a1:fb:65:31:3b: c5:38:e6:61:8b:fd:68:fd:dd:d6:0f:e3:32:5d:f0:fe:f5:4f: da:19:e3:23:26:77:39:2e:fb:e7:26:28:7f:51:77:fd:06:0d: 83:66:7c:33:f9:98:8e:05:24:bc:e7:10:e0:0f:77:97:2e:44: 10:a7:40:f1:84:d4:04:01:3a:75:1c:cf:2b:3f:9d:cf:ed:fa: de:f6:cc:b3:8b:09:df:fa:78:ad:43:5a:30:ca:89:ac:80:f5: 31:02:5c:78:f1:25:72:e3:86:0e:76:59:b3:c5:4b:d3:cc:0a: 93:0e:95:86:23:25:ba:a5:d9:72:ba:ed:07:95:d5:53:82:c7: 32:23:c2:d0:fe:6e:15:72:cd:fb:f7:c9:22:ee:f5:2e:8c:86: af:a7:90:31:f2:aa:dc:4d:6b:da:49:bf:b0:a9:1d:71:c5:71: c9:8f:79:9a:2c:b9:8a:9f:fe:c9:10:3f:1e:14:3a:f7:3b:a8: e1:18:b0:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswuz6r5steyQRYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTNmN2NmN2ItNmQ2Zi00ZDBmLTg3ZmMtODRhY2M2YTY4ODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG6d9/JFPcJ7VAVthzdKxrLlPMbO8XYiaLts vyf6+T4DW1c8tJlmoQ/Unpk0oTiWQlPvOPrxieITmaLt86CmD3WpxU3trWuEqSJd RQpLSUUMdYmC5bwvx6V9B7q4RLFSA4FHXdMMnjM5I44VPLUWVwSAP83WLAbVtRSy jantV86PQW732PHPwCNRillqzZpsaXfUAhWknwuz+XFROHhryTgR70Xl11JN56W8 nSpm/IPAbfm/saWnX41IuWMAcPG6gyrrWHIt+n8W633IwOLiSJDWlc/ECWEDq1BY wZhRiMhXskrR5Yu6k4nCpXesUkPkzFn/JG2lTyCpxUf6btNBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxzpiAdp7nQMmQwG8UJA5ZorUI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU0YmI0YWUtZWNhMS0z MjBjLWFmY2EtOTdjMTg0Y2ZhZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXphYc4W7Muj9F36C8VsqRfJgPJL12A5JmNx/ufO9O/5h+/Htd/49qT 42ORJ+MtVLmK78ZNIQZCS9giPMjwBuSN8qeh+2UxO8U45mGL/Wj93dYP4zJd8P71 T9oZ4yMmdzku++cmKH9Rd/0GDYNmfDP5mI4FJLznEOAPd5cuRBCnQPGE1AQBOnUc zys/nc/t+t72zLOLCd/6eK1DWjDKiayA9TECXHjxJXLjhg52WbPFS9PMCpMOlYYj Jbql2XK67QeV1VOCxzIjwtD+bhVyzfv3ySLu9S6Mhq+nkDHyqtxNa9pJv7CpHXHF ccmPeZosuYqf/skQPx4UOvc7qOEYsBI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:12 2025 by rpki-client