$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420a14a2-8692-34b6-8a06-08d1c09ee44b.roa File: 420a14a2-8692-34b6-8a06-08d1c09ee44b.roa (raw, json) Hash identifier: LWj+vsDSmrw000vgaac0RhQxTzOmhBVpveXALIlGB10= Subject key identifier: 25:67:C8:99:7A:5F:F6:82:C2:7B:43:BA:86:EE:47:46:90:71:86:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC432E9CA237F624F5FCB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420a14a2-8692-34b6-8a06-08d1c09ee44b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.175.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:32:e9:ca:23:7f:62:4f:5f:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f32731d7-64b9-4aa4-8e22-9d48d1c27eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:f9:a4:1c:1c:32:3a:64:f3:7f:06:1a:2a: b3:b6:16:5e:b9:99:91:d0:d5:c7:fb:e5:7b:89:e0: 9a:96:dc:93:f8:93:7a:e6:c3:c0:ac:38:6c:de:2c: 52:ff:8e:77:0d:9e:fa:fa:80:c5:58:b9:ee:18:e5: 8c:51:5d:e8:df:ef:2b:01:72:91:ae:5f:1a:bf:4b: ca:cd:55:f1:14:32:c1:f6:fc:d2:af:c9:74:53:78: 16:43:1b:df:be:3f:24:37:6c:c4:f2:17:fe:fe:0e: 78:3d:0b:7c:b5:06:4d:20:43:e2:c9:3d:03:da:bb: fa:b4:5a:8b:ef:d1:24:87:d5:e7:5d:d4:94:c9:45: 9b:98:0f:92:35:65:70:ac:ed:d9:68:b0:9d:a6:7a: 0b:48:d3:04:b8:17:15:3b:63:1a:2e:39:0e:6d:43: c7:fb:b1:bd:6f:39:b7:32:00:51:61:3b:cf:38:25: f7:62:8b:a0:a0:73:cf:40:bd:8e:d8:4a:83:8a:df: 7d:c3:82:37:70:af:c2:5d:ac:87:3b:73:ca:37:e8: 31:af:a4:32:f1:39:ec:f4:ad:4d:bd:dd:25:83:b3: f1:f5:de:b5:7e:38:30:ab:13:e3:48:5a:cc:57:8c: af:46:51:54:46:ef:f7:ff:28:f4:33:1e:3a:5d:1a: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:67:C8:99:7A:5F:F6:82:C2:7B:43:BA:86:EE:47:46:90:71:86:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420a14a2-8692-34b6-8a06-08d1c09ee44b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.175.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:50:e6:b2:ce:20:7a:45:34:6b:8b:89:bb:a6:11:b9:3a:39: 27:5e:e7:3e:7b:fc:7a:d7:df:2a:a3:ed:41:be:c2:7a:42:48: 31:96:87:e7:06:bb:6f:15:6d:d2:7d:4d:14:69:3c:91:c6:a7: a2:30:0d:3c:2a:ec:f6:39:dc:5f:ac:7c:94:83:e3:96:65:ff: db:4c:69:bf:7a:e1:75:94:4b:21:27:dd:b1:f7:31:2e:b9:4a: 00:7e:50:e3:cb:84:d5:4c:11:13:76:9b:78:3f:21:56:d2:c5: 29:2a:6e:b6:4c:06:6d:b7:9f:6d:7d:40:ec:dd:09:be:2a:87: f1:33:0c:d3:14:94:22:85:25:0c:8d:1b:fe:0e:6d:3c:1a:a2: 8b:2d:73:36:56:0e:46:42:69:da:3c:12:ab:f0:84:95:c2:b8: 3f:b3:aa:9c:7c:73:32:4c:da:2a:9f:b4:04:47:8a:69:5c:33: c0:be:e4:83:b6:7a:ba:c3:04:fa:86:7f:da:8b:6e:02:5a:7b: fd:8c:05:4f:df:cb:db:ec:ff:77:dd:61:23:c6:14:46:74:b2: 71:51:70:a3:ba:bc:0c:9e:6b:a5:20:2a:fc:96:7b:7c:22:82: bf:21:12:d9:53:44:08:df:af:77:b1:31:d5:e4:5c:67:2b:30: b7:c8:cb:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDLpyiN/Yk9fy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjMyNzMxZDctNjRiOS00YWE0LThlMjItOWQ0OGQxYzI3ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps/5pBwcMjpk838GGiqzthZeuZmR0NXH++V7 ieCaltyT+JN65sPArDhs3ixS/453DZ76+oDFWLnuGOWMUV3o3+8rAXKRrl8av0vK zVXxFDLB9vzSr8l0U3gWQxvfvj8kN2zE8hf+/g54PQt8tQZNIEPiyT0D2rv6tFqL 79Ekh9XnXdSUyUWbmA+SNWVwrO3ZaLCdpnoLSNMEuBcVO2MaLjkObUPH+7G9bzm3 MgBRYTvPOCX3YougoHPPQL2O2EqDit99w4I3cK/CXayHO3PKN+gxr6Qy8Tns9K1N vd0lg7Px9d61fjgwqxPjSFrMV4yvRlFURu/3/yj0Mx46XRrkbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVnyJl6X/aCwntDuobuR0aQcYb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDIwYTE0YTItODY5Mi0z NGI2LThhMDYtMDhkMWMwOWVlNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ68YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpQ5rLOIHpFNGuLibumEbk6OSde5z57/HrX3yqj7UG+wnpCSDGWh+cG u28VbdJ9TRRpPJHGp6IwDTwq7PY53F+sfJSD45Zl/9tMab964XWUSyEn3bH3MS65 SgB+UOPLhNVMERN2m3g/IVbSxSkqbrZMBm23n219QOzdCb4qh/EzDNMUlCKFJQyN G/4ObTwaoostczZWDkZCado8EqvwhJXCuD+zqpx8czJM2iqftARHimlcM8C+5IO2 errDBPqGf9qLbgJae/2MBU/fy9vs/3fdYSPGFEZ0snFRcKO6vAyea6UgKvyWe3wi gr8hEtlTRAjfr3exMdXkXGcrMLfIy4g= -----END CERTIFICATE-----Generated at Sat Aug 23 23:10:29 2025 by rpki-client