$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38c64e9e-cf73-310b-bb3f-045c79871535.roa File: 38c64e9e-cf73-310b-bb3f-045c79871535.roa (raw, json) Hash identifier: NTRJ/9FxHVLU9kIXL+QsAOPtUC8cTOjWqBArwjAb9CQ= Subject key identifier: DE:A4:A0:20:8C:09:2F:F2:F3:E4:6C:8F:61:C4:9E:16:B9:55:B0:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC43017291BE9DB75410700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38c64e9e-cf73-310b-bb3f-045c79871535.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.173.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:30:17:29:1b:e9:db:75:41:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=06583490-77b6-4761-a3ed-8d9a00cb788d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:df:d1:fa:8c:0d:d4:b1:83:68:75:8e:86: 60:f4:f3:f1:7a:51:5d:d3:a0:6a:f2:01:9e:c1:a4: ce:33:d8:1f:97:d3:11:bb:6c:4e:b5:c1:88:73:37: 8f:96:4d:da:25:d5:b8:18:a7:9d:a5:73:98:3a:57: 50:98:eb:90:ce:a9:28:a6:39:ab:03:31:fc:b9:65: 11:a1:d0:63:c3:1b:fc:09:29:b2:8d:19:2c:54:b8: 2a:c8:e5:2a:68:8f:12:23:5a:76:4c:aa:56:12:8a: 8d:50:dc:1a:ce:10:3d:37:78:d2:be:d3:7b:4b:b4: 16:40:1c:11:24:6c:2b:09:de:b1:ea:0e:51:5f:46: 96:53:e3:11:ef:9d:20:0e:cc:ce:53:35:56:ea:bc: 38:a1:ba:74:10:6a:ae:b6:ee:37:6b:63:6f:69:c4: 6f:34:41:d7:c3:19:0a:e4:19:6f:62:cb:81:4c:23: 30:91:93:6d:05:c9:cd:fc:77:f7:73:1b:c0:d9:85: 46:38:8f:1e:2c:1d:b2:24:34:ae:af:04:db:5d:ae: b0:92:2e:52:4d:8c:54:0f:f8:bf:d0:f3:37:0e:92: 71:f4:04:64:a0:b2:23:26:0e:00:25:7f:98:1a:9c: 83:94:54:99:5b:ea:98:0f:86:22:0e:3f:a5:4c:c3: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A4:A0:20:8C:09:2F:F2:F3:E4:6C:8F:61:C4:9E:16:B9:55:B0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38c64e9e-cf73-310b-bb3f-045c79871535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:30:78:0d:01:86:a8:b3:42:29:98:55:87:c1:40:dd:eb:b2: 39:72:2a:8d:41:e1:47:b0:29:9d:de:91:4d:02:35:df:42:a6: 04:68:25:56:01:f4:e9:39:0c:d7:3b:d2:f2:2e:d3:d9:e0:de: bb:0e:73:fd:0c:9c:73:54:dd:58:8d:72:ec:cf:ae:4e:6f:22: 62:58:96:ad:6c:c6:84:46:e5:ad:6b:04:3a:7d:99:90:8c:fb: 94:aa:26:3b:53:a2:72:f8:03:4c:f9:a4:59:cd:4d:b9:b2:43: c4:7c:ee:08:8b:64:00:7c:66:e9:90:d6:f8:bd:a9:aa:38:d6: 28:87:92:93:f6:50:ee:e1:a0:bb:2d:bb:12:0b:e3:94:f8:f3: f8:3d:56:e5:cf:68:88:34:e6:62:2f:33:29:16:78:9c:82:f7: 09:cb:da:80:9a:16:bd:bd:b1:3d:02:a0:72:e1:d8:24:69:88: fc:36:ab:10:af:49:2b:95:e8:c6:8c:c5:6f:80:49:ad:7b:df: 8e:4e:d7:72:13:2f:bc:15:f7:a5:03:9c:aa:ea:8c:59:1a:e1: 66:df:52:eb:eb:11:f6:aa:10:eb:7a:d4:44:8c:77:93:34:b2: de:d1:d9:55:87:37:f3:b3:d0:60:43:41:42:b8:f3:28:c8:e6: 43:5a:8e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDAXKRvp23VBBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDY1ODM0OTAtNzdiNi00NzYxLWEzZWQtOGQ5YTAwY2I3ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfXf0fqMDdSxg2h1joZg9PPxelFd06Bq8gGe waTOM9gfl9MRu2xOtcGIczePlk3aJdW4GKedpXOYOldQmOuQzqkopjmrAzH8uWUR odBjwxv8CSmyjRksVLgqyOUqaI8SI1p2TKpWEoqNUNwazhA9N3jSvtN7S7QWQBwR JGwrCd6x6g5RX0aWU+MR750gDszOUzVW6rw4obp0EGqutu43a2NvacRvNEHXwxkK 5BlvYsuBTCMwkZNtBcnN/Hf3cxvA2YVGOI8eLB2yJDSurwTbXa6wki5STYxUD/i/ 0PM3DpJx9ARkoLIjJg4AJX+YGpyDlFSZW+qYD4YiDj+lTMPMCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6koCCMCS/y8+Rsj2HEnha5VbC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhjNjRlOWUtY2Y3My0z MTBiLWJiM2YtMDQ1Yzc5ODcxNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ61oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwweA0BhqizQimYVYfBQN3rsjlyKo1B4UewKZ3ekU0CNd9CpgRoJVYB 9Ok5DNc70vIu09ng3rsOc/0MnHNU3ViNcuzPrk5vImJYlq1sxoRG5a1rBDp9mZCM +5SqJjtTonL4A0z5pFnNTbmyQ8R87giLZAB8ZumQ1vi9qao41iiHkpP2UO7hoLst uxIL45T48/g9VuXPaIg05mIvMykWeJyC9wnL2oCaFr29sT0CoHLh2CRpiPw2qxCv SSuV6MaMxW+ASa17345O13ITL7wV96UDnKrqjFka4WbfUuvrEfaqEOt61ESMd5M0 st7R2VWHN/Oz0GBDQUK48yjI5kNajms= -----END CERTIFICATE-----Generated at Sun Aug 24 04:03:55 2025 by rpki-client