$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa File: 3afc778c-fe91-3470-95c6-7fc9caadde5f.roa (raw, json) Hash identifier: FCHVEq6iYTsjtUAucoK4mFKHrhtsamYmP/C+U1RrahY= Subject key identifier: 18:21:19:72:73:F7:E0:4C:CB:BF:B4:E0:9E:E8:94:3C:88:6F:A3:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F241081472CD0ADE9070 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.188.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f2:41:08:14:72:cd:0a:de:90:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=db74a0c2-9be2-46bf-be87-a3560e5ced61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:49:f5:a5:96:14:5c:50:9e:60:64:2a:19: 0c:3f:e1:9d:3d:91:79:e6:3a:50:90:b9:2e:36:fc: e3:12:1b:b1:cf:88:72:a9:c7:eb:0d:28:a2:60:0b: a2:4f:00:87:18:33:d9:6b:7c:e3:bb:73:23:d9:dd: a5:c6:b9:3d:6d:24:6f:0d:4b:7e:18:94:c8:26:03: d2:86:56:f4:a3:c9:b9:59:94:16:2e:a0:1e:38:a4: 62:2b:72:3d:c7:0b:dc:3b:dc:7c:42:8e:70:5e:3e: b7:6d:3b:ea:d8:a0:71:44:17:b1:9c:54:a7:4d:49: 09:45:1c:4c:79:9c:d4:e6:e8:4d:00:8d:83:ff:99: 27:42:a2:d5:f8:ca:77:39:40:f6:62:a5:a8:e4:fd: 29:ed:32:63:3e:f4:84:74:0e:01:dd:d8:8e:12:81: 50:19:81:5b:1b:2a:c7:74:51:cd:f6:9d:5f:2b:23: b3:bd:83:00:1d:c7:6c:f7:f0:4c:a4:bf:43:be:56: 53:93:3a:f9:da:85:70:fe:40:9f:05:61:1c:34:c6: d8:78:60:2e:f4:dd:5c:e5:69:15:e5:63:6c:ad:02: 78:d0:5f:c6:5e:ad:8b:c6:09:75:6e:dd:80:c6:9b: ae:6c:ea:5e:f5:e0:bd:77:d0:e8:71:60:16:42:a7: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:21:19:72:73:F7:E0:4C:CB:BF:B4:E0:9E:E8:94:3C:88:6F:A3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9a:79:55:e0:c7:05:1c:2e:b4:8c:2c:b1:6c:01:95:90:f6: eb:f4:c8:65:0f:25:2e:4e:88:69:b5:0a:32:a3:d2:67:f1:11: 7c:a0:99:f7:7c:64:9b:4b:9c:48:61:25:af:e4:4c:c0:a7:a6: f9:e7:e2:d7:f4:bd:3d:54:fc:04:16:e9:52:39:99:75:5d:8c: 83:dd:b6:df:14:02:f6:70:64:e9:27:bd:88:a0:d1:82:1f:4a: 0f:ce:1a:18:53:06:8f:a3:a5:90:5c:23:72:9b:14:3f:08:9e: a6:67:22:96:61:d4:0a:eb:3c:37:38:d1:b5:83:42:4c:96:94: e2:d3:71:fb:d1:cd:9d:ac:bf:8c:c1:ff:b4:65:eb:54:68:e3: 8a:b0:c5:b8:82:07:6b:03:16:2f:72:61:c8:52:56:0c:4d:5a: bf:84:c3:55:4b:8c:e8:cf:b2:b6:f5:87:26:12:31:fb:fc:be: b7:bc:36:27:4d:17:0b:42:18:95:0b:85:45:d9:39:cf:eb:cf: 2e:3c:6f:ec:c9:42:60:96:78:57:4c:a4:20:9f:c3:88:b7:25: 28:4a:33:9e:d4:32:9a:78:51:88:a5:32:f3:cd:3e:99:e0:ad: 8b:5f:f0:08:6a:32:f2:22:22:da:b7:aa:69:a5:b4:e6:43:30: b6:d0:4c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvJBCBRyzQrekHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGI3NGEwYzItOWJlMi00NmJmLWJlODctYTM1NjBlNWNlZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FJ9aWWFFxQnmBkKhkMP+GdPZF55jpQkLku NvzjEhuxz4hyqcfrDSiiYAuiTwCHGDPZa3zju3Mj2d2lxrk9bSRvDUt+GJTIJgPS hlb0o8m5WZQWLqAeOKRiK3I9xwvcO9x8Qo5wXj63bTvq2KBxRBexnFSnTUkJRRxM eZzU5uhNAI2D/5knQqLV+Mp3OUD2YqWo5P0p7TJjPvSEdA4B3diOEoFQGYFbGyrH dFHN9p1fKyOzvYMAHcds9/BMpL9DvlZTkzr52oVw/kCfBWEcNMbYeGAu9N1c5WkV 5WNsrQJ40F/GXq2Lxgl1bt2AxpuubOpe9eC9d9DocWAWQqe70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBghGXJz9+BMy7+04J7olDyIb6OnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FmYzc3OGMtZmU5MS0z NDcwLTk1YzYtN2ZjOWNhYWRkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ7ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiaeVXgxwUcLrSMLLFsAZWQ9uv0yGUPJS5OiGm1CjKj0mfxEXygmfd8 ZJtLnEhhJa/kTMCnpvnn4tf0vT1U/AQW6VI5mXVdjIPdtt8UAvZwZOknvYig0YIf Sg/OGhhTBo+jpZBcI3KbFD8InqZnIpZh1ArrPDc40bWDQkyWlOLTcfvRzZ2sv4zB /7Rl61Ro44qwxbiCB2sDFi9yYchSVgxNWr+Ew1VLjOjPsrb1hyYSMfv8vre8NidN FwtCGJULhUXZOc/rzy48b+zJQmCWeFdMpCCfw4i3JShKM57UMpp4UYilMvPNPpng rYtf8AhqMvIiItq3qmmltOZDMLbQTIA= -----END CERTIFICATE-----Generated at Sun Aug 24 04:04:11 2025 by rpki-client