$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a7bb4f-de1a-3a99-9ca8-73914da1f161.roa File: 38a7bb4f-de1a-3a99-9ca8-73914da1f161.roa (raw, json) Hash identifier: zQHly1ajypNGKvOGJH46cS+yoKJpAd1R+K+bgug1sa0= Subject key identifier: 2B:EF:74:86:85:3E:29:D9:AC:E8:F5:49:EC:37:FD:14:DC:F8:C3:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE0318AF3D1E29FB8E6ADE040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a7bb4f-de1a-3a99-9ca8-73914da1f161.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 33659 IP address blocks: 69.142.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:8a:f3:d1:e2:9f:b8:e6:ad:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=e809d8a6-95eb-4488-a7e7-c6d8efb99d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7e:22:3f:ca:fd:b0:d6:70:05:77:30:2e:93: 4c:be:ec:ff:b6:67:61:57:84:41:69:36:65:de:a2: 82:46:67:74:cb:c8:7d:1a:af:85:19:bc:a1:b1:8b: 1f:dc:cc:e0:19:9a:1e:65:c6:6a:18:67:8b:45:a7: d8:78:77:b3:1c:b7:56:66:d0:7e:c7:82:ec:91:07: 4f:df:e6:7c:89:5a:db:04:59:95:0a:3c:71:f5:4e: 68:66:df:7c:ac:9d:3c:11:45:85:32:13:76:17:ba: 22:27:7a:62:43:b6:70:f5:32:26:4f:62:77:40:84: 7a:2a:29:69:28:ea:7d:cb:30:4d:4b:4e:f9:7f:36: de:12:91:6d:ad:a9:83:3a:34:c4:1b:70:a8:3f:c9: dc:4a:b5:47:42:ce:2f:80:6d:0e:7f:c7:63:d1:a4: be:e9:6a:99:b4:eb:5b:d6:2d:46:1e:6a:09:78:88: 0f:2a:93:ae:22:a7:96:8f:9a:76:f8:26:ce:79:af: d1:06:62:a4:13:58:d2:b9:ef:ea:74:b9:fa:82:62: a5:e5:6b:60:67:84:26:23:bd:55:24:16:bc:0b:bd: dc:68:d3:d6:0f:fa:98:f9:1d:eb:85:12:89:59:8e: 33:2b:8f:99:b7:1b:44:b1:58:75:4a:7f:74:e2:ba: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EF:74:86:85:3E:29:D9:AC:E8:F5:49:EC:37:FD:14:DC:F8:C3:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a7bb4f-de1a-3a99-9ca8-73914da1f161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.142.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8d:7d:39:c3:99:49:73:07:68:0c:03:ca:da:44:35:07:33: fd:35:45:17:15:57:51:39:97:ab:55:dc:5a:0e:48:5f:49:91: 75:86:57:82:8b:59:29:2b:35:36:7b:40:98:50:1e:05:33:8f: 5e:6f:bb:e1:74:dc:e5:40:52:62:b9:6b:16:b4:77:83:3f:73: 0f:ae:c9:f5:06:a4:2d:b0:bf:50:1d:0b:45:dd:3f:5a:db:3a: 6b:a1:b8:06:83:ad:dd:24:ba:93:a1:35:2c:6c:7d:2f:b9:70: 84:09:0b:52:c4:c0:a7:6b:e8:4b:44:be:7a:41:8b:cc:b9:65: f3:b9:ec:c3:63:66:d0:7b:a6:0a:e4:d0:07:e6:3e:ce:80:25: 70:27:a9:ad:6c:54:9b:6a:0d:c7:1e:09:99:4a:e8:9e:a0:a9: 85:da:b1:65:69:a7:2d:d3:f4:13:f0:b2:2b:96:3f:1b:a9:2b: 1a:16:37:a2:a2:96:a0:13:e2:9b:b1:58:a9:a3:78:9d:15:a7: 8c:61:37:ea:29:b8:0a:57:03:88:66:35:13:cf:b4:68:e3:6c: 49:fd:a3:b8:e8:e7:e0:dd:15:00:35:2a:7b:6f:c3:5c:bd:9e: 6c:4a:09:cd:28:31:94:cf:7e:08:4c:c0:94:9c:27:9c:ef:2d: c1:7d:39:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMYrz0eKfuOat4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ZTgwOWQ4YTYtOTVlYi00NDg4LWE3ZTctYzZkOGVmYjk5ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9H4iP8r9sNZwBXcwLpNMvuz/tmdhV4RBaTZl 3qKCRmd0y8h9Gq+FGbyhsYsf3MzgGZoeZcZqGGeLRafYeHezHLdWZtB+x4LskQdP 3+Z8iVrbBFmVCjxx9U5oZt98rJ08EUWFMhN2F7oiJ3piQ7Zw9TImT2J3QIR6Kilp KOp9yzBNS075fzbeEpFtramDOjTEG3CoP8ncSrVHQs4vgG0Of8dj0aS+6WqZtOtb 1i1GHmoJeIgPKpOuIqeWj5p2+CbOea/RBmKkE1jSue/qdLn6gmKl5WtgZ4QmI71V JBa8C73caNPWD/qY+R3rhRKJWY4zK4+ZtxtEsVh1Sn904rovWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvvdIaFPinZrOj1Sew3/RTc+MPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhhN2JiNGYtZGUxYS0z YTk5LTljYTgtNzM5MTRkYTFmMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRY6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+NfTnDmUlzB2gMA8raRDUHM/01RRcVV1E5l6tV3FoOSF9JkXWGV4KL WSkrNTZ7QJhQHgUzj15vu+F03OVAUmK5axa0d4M/cw+uyfUGpC2wv1AdC0XdP1rb OmuhuAaDrd0kupOhNSxsfS+5cIQJC1LEwKdr6EtEvnpBi8y5ZfO57MNjZtB7pgrk 0AfmPs6AJXAnqa1sVJtqDcceCZlK6J6gqYXasWVppy3T9BPwsiuWPxupKxoWN6Ki lqAT4puxWKmjeJ0Vp4xhN+opuApXA4hmNRPPtGjjbEn9o7jo5+DdFQA1Kntvw1y9 nmxKCc0oMZTPfghMwJScJ5zvLcF9Oek= -----END CERTIFICATE-----Generated at Sat Aug 23 23:02:30 2025 by rpki-client