$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48453d41-49b7-38e5-aef4-e7b5561da36e.roa File: 48453d41-49b7-38e5-aef4-e7b5561da36e.roa (raw, json) Hash identifier: T6cY6nZnj0qEZx3Wn2m1K+oZnWJrl+L7A5URWtV9R0E= Subject key identifier: A3:EE:E0:55:B9:2B:7C:E4:83:BD:FD:50:64:0B:C3:8B:B9:8D:C3:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC50967C51043A8FA512400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48453d41-49b7-38e5-aef4-e7b5561da36e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.174.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:09:67:c5:10:43:a8:fa:51:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0e643ce1-3129-47ed-969c-49c54f5205e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:49:76:99:cb:ef:3f:6d:59:31:40:b1:f7: 4d:0e:a6:04:c9:01:2d:34:a0:36:bc:06:c7:e5:fc: 8e:cc:60:a3:a1:e2:89:27:d0:f2:12:41:85:a5:41: 9d:24:d7:c6:d7:dc:7a:f0:71:8a:5a:a0:1b:49:66: 58:0f:4d:a7:f8:07:c6:11:7d:4a:3b:1f:54:1e:b8: d6:71:a0:4a:a8:71:a2:eb:6f:10:9c:57:ab:76:00: 31:d8:4a:7f:b4:a2:8a:e5:24:02:9b:0d:37:02:97: ce:d7:f3:fb:45:da:d2:e5:9a:08:d6:c9:0a:fb:fc: 35:5f:68:b9:eb:18:15:52:b3:b5:f2:b5:20:ce:59: 45:15:9f:34:67:19:64:1a:88:47:2a:11:23:59:d9: b7:50:f9:f5:5c:ae:f1:bd:08:5e:7e:a9:e4:7c:13: 9d:14:3c:63:ab:a4:da:33:e3:6b:33:cc:8d:22:b7: 16:08:a0:f5:35:ca:dd:82:ba:6a:93:40:50:0f:71: 59:e9:99:b3:ee:5c:b3:05:b2:db:e0:33:90:ab:90: 11:ea:9a:4a:cc:78:1b:60:d5:a7:f8:3e:2c:92:87: ac:6d:6f:f1:db:12:f7:39:8e:b1:fa:51:fb:cf:8f: 0b:96:81:5f:cd:d4:f1:5f:ff:05:81:8a:a2:b8:f6: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EE:E0:55:B9:2B:7C:E4:83:BD:FD:50:64:0B:C3:8B:B9:8D:C3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48453d41-49b7-38e5-aef4-e7b5561da36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.174.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:e9:5a:79:07:64:e0:5a:2b:f1:e0:31:7b:ba:53:4e:4a:d3: 80:7d:3a:73:c0:4f:c9:a2:1a:d6:17:0f:a0:de:c2:ee:9e:0b: e6:25:31:f9:ea:d6:7d:10:44:29:f5:34:9b:71:d7:5b:69:ed: ba:45:32:a6:23:52:d9:0e:be:fc:00:2f:c0:f2:e5:4d:73:c8: 3d:3a:4d:3e:3c:c1:6f:db:b3:e6:4c:84:8f:78:77:90:b5:7b: 04:c0:dc:70:02:73:3e:1a:e9:d1:fe:9e:10:b1:1c:8a:3e:0d: 0e:3c:63:36:13:2f:ad:d3:bd:dc:ee:a6:d7:0b:09:b3:64:51: ea:16:6a:d1:bf:4b:06:5f:f7:f8:40:68:85:5c:01:4a:9f:cd: 9f:9b:a1:4b:17:44:0c:8a:a5:93:72:40:cc:53:ec:5b:ef:df: f0:fd:f9:45:a9:87:e2:c9:02:b1:27:6f:62:be:c2:e0:83:9a: c2:d0:65:71:96:b3:e8:4a:54:14:8a:5d:4f:e5:ba:20:d5:fe: 16:d8:a0:f3:1d:20:a5:9a:ed:60:b9:58:41:c9:e9:59:d2:45: 8c:a3:8a:14:44:e8:9d:aa:4f:7f:ed:5f:e8:6d:9c:5b:98:68: c5:ab:11:e3:f2:6b:e9:ef:a1:81:99:f0:dc:3a:02:49:71:56: b9:52:62:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxQlnxRBDqPpRJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGU2NDNjZTEtMzEyOS00N2VkLTk2OWMtNDljNTRmNTIwNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk9JdpnL7z9tWTFAsfdNDqYEyQEtNKA2vAbH 5fyOzGCjoeKJJ9DyEkGFpUGdJNfG19x68HGKWqAbSWZYD02n+AfGEX1KOx9UHrjW caBKqHGi628QnFerdgAx2Ep/tKKK5SQCmw03ApfO1/P7RdrS5ZoI1skK+/w1X2i5 6xgVUrO18rUgzllFFZ80ZxlkGohHKhEjWdm3UPn1XK7xvQhefqnkfBOdFDxjq6Ta M+NrM8yNIrcWCKD1Ncrdgrpqk0BQD3FZ6Zmz7lyzBbLb4DOQq5AR6ppKzHgbYNWn +D4skoesbW/x2xL3OY6x+lH7z48LloFfzdTxX/8FgYqiuPatMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPu4FW5K3zkg739UGQLw4u5jcN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg0NTNkNDEtNDliNy0z OGU1LWFlZjQtZTdiNTU2MWRhMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ67gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPpWnkHZOBaK/HgMXu6U05K04B9OnPAT8miGtYXD6Dewu6eC+YlMfnq 1n0QRCn1NJtx11tp7bpFMqYjUtkOvvwAL8Dy5U1zyD06TT48wW/bs+ZMhI94d5C1 ewTA3HACcz4a6dH+nhCxHIo+DQ48YzYTL63TvdzuptcLCbNkUeoWatG/SwZf9/hA aIVcAUqfzZ+boUsXRAyKpZNyQMxT7Fvv3/D9+UWph+LJArEnb2K+wuCDmsLQZXGW s+hKVBSKXU/luiDV/hbYoPMdIKWa7WC5WEHJ6VnSRYyjihRE6J2qT3/tX+htnFuY aMWrEePya+nvoYGZ8Nw6AklxVrlSYpM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:05:38 2025 by rpki-client