$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33fc61ad-585a-3a1d-a8bf-f95442f0e370.roa File: 33fc61ad-585a-3a1d-a8bf-f95442f0e370.roa (raw, json) Hash identifier: JlJptqT5vc9xY83WmEGtgTTkBEVWydgrCYJs9CydhFk= Subject key identifier: 48:DE:E9:19:08:5E:C4:55:C7:88:EC:3D:0E:5B:73:87:9B:84:03:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A73F58D87AC0C0BF6EA500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33fc61ad-585a-3a1d-a8bf-f95442f0e370.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 67.160.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3f:58:d8:7a:c0:c0:bf:6e:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c59c289f-b6cd-4a76-9861-f633fa770f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:35:08:da:40:fd:d6:b9:4c:89:81:46:a8: 37:47:7f:d6:63:bb:9e:ad:77:24:d9:54:4d:aa:61: 5a:03:c0:6f:a9:3d:0d:71:0e:6b:87:06:c2:8f:e2: 96:44:2b:53:7a:ac:d9:e2:d4:07:9c:52:9c:45:c5: f1:47:6c:69:2a:64:ef:af:89:af:96:5b:47:44:91: 89:9e:c9:32:45:89:ce:3b:4a:89:a4:5f:87:ea:9d: b6:a8:4b:4d:4a:ce:3c:33:11:4d:31:96:13:6a:7b: 99:39:e4:96:2f:95:27:01:a0:43:46:2d:11:11:da: 07:95:23:f0:f2:39:15:c3:cf:be:4e:62:1c:79:b2: 78:8f:78:5e:01:07:6b:7c:70:74:8e:d2:7e:6f:de: 3c:04:fd:ab:d0:97:15:9b:38:b4:36:e9:ec:53:71: 23:1c:6a:4a:b3:7f:b0:ec:32:9b:bc:a6:ac:f4:69: 54:9e:2a:76:54:fe:e3:68:ff:0a:48:ca:ea:3f:ed: ea:2f:4a:c6:9f:73:a1:da:cb:2d:8e:57:18:28:9f: b6:5a:d2:5a:86:e4:59:69:4e:7d:cf:a4:28:31:19: e8:57:96:29:4f:f9:e7:a2:2b:3b:d5:17:87:08:c7: 47:eb:2b:7c:cf:6e:8c:fb:71:dd:9e:49:bd:29:db: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:E9:19:08:5E:C4:55:C7:88:EC:3D:0E:5B:73:87:9B:84:03:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33fc61ad-585a-3a1d-a8bf-f95442f0e370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.160.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4e:57:06:5f:f1:73:dc:e0:0e:e0:8e:0a:39:2e:09:a1:be: b1:aa:46:d5:d4:34:aa:a2:20:72:bb:5b:ec:b0:41:e8:4e:0e: 39:3e:de:3e:9e:8a:86:c8:28:7d:02:53:c9:94:f0:07:f3:04: 3b:f9:47:9d:b5:ab:e3:bc:45:9a:2f:e3:69:7c:bc:36:f5:5f: 5c:61:c9:b2:a7:6f:f1:ce:38:0b:7b:bd:51:b1:0e:b4:02:0a: 15:1f:49:fb:12:35:f3:3e:89:92:36:85:1a:a4:a6:a5:5a:1e: 10:20:48:a2:fc:3a:38:33:b3:4d:d4:06:29:2c:1b:68:1e:df: 21:1b:c1:c0:70:bc:b3:58:99:11:65:ae:1a:23:25:26:74:59: 64:73:64:7d:58:e8:a1:2d:12:66:ce:fa:95:de:b1:67:3f:89: db:d2:0b:6e:a1:2f:54:31:6f:ad:cb:d3:b7:78:bd:d6:8e:f1: 66:98:50:75:84:8f:45:45:0f:dd:62:b1:48:6d:af:4d:2a:ae: 43:e8:65:1e:d2:b5:33:3c:52:f8:8b:af:02:97:24:5e:ba:ee: 76:7f:f8:d6:f2:ef:a8:5e:ce:47:51:f1:3d:d4:b2:80:a7:f0: 38:bd:5c:f8:00:a1:69:af:a6:e7:77:97:d9:17:20:04:4a:2f: 7e:33:15:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpz9Y2HrAwL9upQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzU5YzI4OWYtYjZjZC00YTc2LTk4NjEtZjYzM2ZhNzcwZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS81CNpA/da5TImBRqg3R3/WY7uerXck2VRN qmFaA8BvqT0NcQ5rhwbCj+KWRCtTeqzZ4tQHnFKcRcXxR2xpKmTvr4mvlltHRJGJ nskyRYnOO0qJpF+H6p22qEtNSs48MxFNMZYTanuZOeSWL5UnAaBDRi0REdoHlSPw 8jkVw8++TmIcebJ4j3heAQdrfHB0jtJ+b948BP2r0JcVmzi0NunsU3EjHGpKs3+w 7DKbvKas9GlUnip2VP7jaP8KSMrqP+3qL0rGn3Oh2sstjlcYKJ+2WtJahuRZaU59 z6QoMRnoV5YpT/nnois71ReHCMdH6yt8z26M+3Hdnkm9KdukJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEje6RkIXsRVx4jsPQ5bc4ebhAONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNmYzYxYWQtNTg1YS0z YTFkLWE4YmYtZjk1NDQyZjBlMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6D6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1OVwZf8XPc4A7gjgo5LgmhvrGqRtXUNKqiIHK7W+ywQehODjk+3j6e iobIKH0CU8mU8AfzBDv5R521q+O8RZov42l8vDb1X1xhybKnb/HOOAt7vVGxDrQC ChUfSfsSNfM+iZI2hRqkpqVaHhAgSKL8Ojgzs03UBiksG2ge3yEbwcBwvLNYmRFl rhojJSZ0WWRzZH1Y6KEtEmbO+pXesWc/idvSC26hL1Qxb63L07d4vdaO8WaYUHWE j0VFD91isUhtr00qrkPoZR7StTM8UviLrwKXJF667nZ/+Nby76hezkdR8T3UsoCn 8Di9XPgAoWmvpud3l9kXIARKL34zFc8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:29 2025 by rpki-client