$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa File: 3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa (raw, json) Hash identifier: BAFg5Ge0BkV0oY+ADUAjGFbbQFxS8bpevLdNFFHKPx8= Subject key identifier: 88:34:4F:59:C5:67:0E:F9:0C:7E:5E:EC:5E:E9:99:42:3F:A3:0C:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC35A48559FD85CFCFF1180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 67.166.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:5a:48:55:9f:d8:5c:fc:ff:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6d389dd6-334a-4f51-a1a5-25a8207dc49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:71:bb:33:e4:95:79:b5:24:8d:31:50:43: 6e:65:79:d1:b1:0e:f0:8c:80:ce:ed:53:ff:4c:f6: bc:6d:5d:a5:c1:2c:cf:02:46:d4:50:7c:58:66:d6: 5b:ef:20:1c:ee:85:27:36:83:4e:5b:f1:5d:d4:4c: 07:66:e1:c5:bc:35:9e:c9:63:f0:82:24:ea:39:d1: 25:bb:82:e7:d9:14:17:63:11:90:cf:da:86:94:0c: 6a:05:d8:78:04:6d:4c:14:d6:8d:ae:6f:6d:24:f8: f1:bb:3e:18:75:d0:e7:69:b4:bb:af:20:0f:60:95: c6:2d:0f:85:a7:43:4d:ba:f9:1d:2d:9f:d2:2b:84: 48:a8:42:cf:4d:0a:1c:9c:7a:bd:c0:6d:4e:1c:04: 43:7f:79:9d:ea:8e:97:4d:1e:a6:57:8f:30:8d:2d: 5c:a2:41:da:61:3a:3b:d9:b4:9a:da:5e:dd:11:ba: 82:dc:aa:c1:c8:ca:e8:ed:1f:c4:46:19:39:20:bd: 42:84:02:8c:e3:9a:02:e7:49:d0:c2:b1:05:04:f9: a8:eb:d8:88:37:44:6e:2d:37:c6:85:dc:e0:1e:57: 92:2f:b1:55:09:2a:7c:a4:f1:d9:76:72:0b:18:68: 9f:50:17:8b:90:9a:96:06:01:f1:de:8d:1e:78:33: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:34:4F:59:C5:67:0E:F9:0C:7E:5E:EC:5E:E9:99:42:3F:A3:0C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.166.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f6:33:ee:15:8f:cb:b2:da:e4:8b:5e:0d:de:04:8a:03:36: ea:7f:00:2d:7e:34:74:c6:36:5f:20:25:1a:28:0f:ee:cd:c6: 35:79:1b:61:87:54:ef:1a:c1:e5:ca:00:b2:41:57:ed:89:5c: 34:ca:82:73:93:b2:1b:49:cc:da:03:7b:19:a1:df:84:c4:ac: f3:21:97:cc:c1:20:b4:33:5b:0c:f3:69:04:6f:28:d9:9e:9c: 1f:e9:7d:2a:2e:a5:2d:fd:81:7f:48:2e:53:52:85:67:5e:ca: e5:02:b6:34:2a:e0:0a:e0:a5:8d:0a:85:68:a8:64:1e:e2:9a: f0:3c:03:98:4d:86:68:4b:c3:86:ae:33:a3:7b:8a:9b:73:aa: 66:68:be:0f:5f:c0:09:3d:d7:33:c9:00:54:9e:1e:20:83:d1: e9:f0:0e:59:63:19:8c:6e:4a:e0:25:22:e5:2c:2d:fc:87:48: 81:24:23:8f:13:03:78:31:53:b6:4e:5e:ae:30:d0:6c:df:5e: 82:f3:1b:61:14:95:8b:64:c3:cf:b3:ec:5d:1d:d2:8a:91:c3: c8:b1:3f:74:a6:1f:31:b6:ec:39:3a:ec:5a:76:0f:dd:8b:78: c0:84:c4:2d:b7:96:86:44:e8:0c:9b:ff:6c:e9:76:30:c0:da: 29:e4:e3:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw1pIVZ/YXPz/EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmQzODlkZDYtMzM0YS00ZjUxLWExYTUtMjVhODIwN2RjNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIxxuzPklXm1JI0xUENuZXnRsQ7wjIDO7VP/ TPa8bV2lwSzPAkbUUHxYZtZb7yAc7oUnNoNOW/Fd1EwHZuHFvDWeyWPwgiTqOdEl u4Ln2RQXYxGQz9qGlAxqBdh4BG1MFNaNrm9tJPjxuz4YddDnabS7ryAPYJXGLQ+F p0NNuvkdLZ/SK4RIqELPTQocnHq9wG1OHARDf3md6o6XTR6mV48wjS1cokHaYTo7 2bSa2l7dEbqC3KrByMro7R/ERhk5IL1ChAKM45oC50nQwrEFBPmo69iIN0RuLTfG hdzgHleSL7FVCSp8pPHZdnILGGifUBeLkJqWBgHx3o0eeDNMmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg0T1nFZw75DH5e7F7pmUI/owwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk3NWFhMmUtMzFjYS0z NTZmLWI0NDItMmY3ZGM0MzYwZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA32M+4Vj8uy2uSLXg3eBIoDNup/AC1+NHTGNl8gJRooD+7NxjV5G2GH VO8aweXKALJBV+2JXDTKgnOTshtJzNoDexmh34TErPMhl8zBILQzWwzzaQRvKNme nB/pfSoupS39gX9ILlNShWdeyuUCtjQq4ArgpY0KhWioZB7imvA8A5hNhmhLw4au M6N7iptzqmZovg9fwAk91zPJAFSeHiCD0enwDlljGYxuSuAlIuUsLfyHSIEkI48T A3gxU7ZOXq4w0GzfXoLzG2EUlYtkw8+z7F0d0oqRw8ixP3SmHzG27Dk67Fp2D92L eMCExC23loZE6Ayb/2zpdjDA2ink46E= -----END CERTIFICATE-----Generated at Sun Aug 24 06:28:13 2025 by rpki-client