$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aea708a-26b8-3d06-86fb-fe2ef4bff05c.roa File: 4aea708a-26b8-3d06-86fb-fe2ef4bff05c.roa (raw, json) Hash identifier: 0zzMTXnhRniXVs0yBENZPVon+/8CR/JXEwXLNtNt8v4= Subject key identifier: 27:CA:0D:37:11:1A:58:6E:D3:5D:C3:5C:62:A6:8A:58:3F:8D:98:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A74017AFF34E16F1C3BB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aea708a-26b8-3d06-86fb-fe2ef4bff05c.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 67.178.39.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:40:17:af:f3:4e:16:f1:c3:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=d1f4bffc-505e-4b51-a779-59311730571b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:1e:de:06:1b:9e:a7:38:74:66:8d:88:fb: 0b:bb:12:b5:fa:86:36:4b:24:37:ad:fe:ab:27:36: 97:fb:45:e6:c9:d7:e6:d6:f4:1e:80:09:a8:91:8c: 09:96:66:cc:fe:a2:0e:99:ac:b2:bb:5c:99:48:9e: 26:00:e7:20:67:f5:70:ae:27:7a:44:a6:00:4e:2c: 2a:ea:c4:a1:e6:4e:93:85:76:85:3d:5e:bf:14:6b: a3:19:be:55:e9:06:2a:74:59:bb:b8:bd:81:5f:a2: 7e:28:1f:79:ad:00:83:83:cd:65:40:52:2f:5a:5e: f3:14:57:61:f1:da:10:61:c4:01:76:f7:a0:89:3a: 8f:5e:77:6c:b9:73:f2:14:ba:33:52:d3:a6:df:fa: 66:45:1a:dc:4a:5e:ac:b6:d6:37:a6:c2:09:0e:4c: bd:f4:26:b7:44:79:df:00:a7:8a:b1:f6:b7:61:cc: 52:d3:dc:82:07:de:bf:e6:1f:22:8f:63:90:50:47: bf:fb:6a:96:05:bc:10:5a:f7:25:bc:21:bc:5d:48: 74:d9:15:66:57:69:e1:52:a1:6c:77:24:72:95:25: 01:96:3c:81:e6:ba:6a:b5:62:4a:14:bf:a6:d9:06: 01:d9:5e:4c:75:ab:b6:6b:67:81:61:0c:e2:b1:4d: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CA:0D:37:11:1A:58:6E:D3:5D:C3:5C:62:A6:8A:58:3F:8D:98:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aea708a-26b8-3d06-86fb-fe2ef4bff05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.178.39.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:07:c4:d6:8c:4a:6b:46:a7:47:10:cb:03:58:47:07:20:c2: 5e:af:dd:98:b4:c0:3e:21:68:b2:62:a0:fd:42:7e:12:d1:2b: 5a:34:94:6a:50:7c:37:58:24:3e:21:3b:ec:5a:1c:55:a3:fd: 5a:22:e3:38:f8:d4:3f:ae:a1:cc:12:05:99:13:a3:ed:13:8b: 31:e6:40:2a:32:aa:f2:c1:26:2c:73:27:90:7e:32:e9:5d:e9: 1f:01:e5:6d:e2:62:9f:59:a0:37:83:73:bc:00:e5:2d:12:6d: 79:44:94:09:67:8a:34:ec:58:a5:56:1d:af:4d:1b:92:b2:3b: 69:0d:90:55:57:01:de:2f:e9:9f:8b:74:cd:b1:c7:b6:ea:69: fb:ed:aa:5e:d5:3c:ca:11:26:b6:bf:3d:4e:d8:41:58:d1:96: 02:82:8d:6c:d1:da:db:e4:09:89:7b:2b:21:9b:21:62:21:b2: b8:6a:65:b7:71:5c:2d:df:1f:8a:4e:89:50:85:be:4e:6f:17: 21:14:6e:da:58:2e:02:4a:27:0e:1f:85:ad:45:87:cf:f2:af: 22:e6:70:50:b1:a8:4b:f6:96:4e:c4:f3:44:38:d5:3f:a3:03: 9b:dc:30:49:1c:2c:3b:ee:29:62:45:0c:1a:8a:28:60:ac:8b: 1d:22:49:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtSp0AXr/NOFvHDu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZDFmNGJmZmMtNTA1ZS00YjUxLWE3NzktNTkzMTE3MzA1NzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Ye3gYbnqc4dGaNiPsLuxK1+oY2SyQ3rf6r JzaX+0Xmydfm1vQegAmokYwJlmbM/qIOmayyu1yZSJ4mAOcgZ/Vwrid6RKYATiwq 6sSh5k6ThXaFPV6/FGujGb5V6QYqdFm7uL2BX6J+KB95rQCDg81lQFIvWl7zFFdh 8doQYcQBdvegiTqPXndsuXPyFLozUtOm3/pmRRrcSl6sttY3psIJDky99Ca3RHnf AKeKsfa3YcxS09yCB96/5h8ij2OQUEe/+2qWBbwQWvclvCG8XUh02RVmV2nhUqFs dyRylSUBljyB5rpqtWJKFL+m2QYB2V5Mdau2a2eBYQzisU0YZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCfKDTcRGlhu013DXGKmilg/jZijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFlYTcwOGEtMjZiOC0z ZDA2LTg2ZmItZmUyZWY0YmZmMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEQ7IngDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+B8TWjEprRqdHEMsDWEcHIMJer92YtMA+IWiyYqD9Qn4S0StaNJRq UHw3WCQ+ITvsWhxVo/1aIuM4+NQ/rqHMEgWZE6PtE4sx5kAqMqrywSYscyeQfjLp XekfAeVt4mKfWaA3g3O8AOUtEm15RJQJZ4o07FilVh2vTRuSsjtpDZBVVwHeL+mf i3TNsce26mn77ape1TzKESa2vz1O2EFY0ZYCgo1s0drb5AmJeyshmyFiIbK4amW3 cVwt3x+KTolQhb5ObxchFG7aWC4CSicOH4WtRYfP8q8i5nBQsahL9pZOxPNEONU/ owOb3DBJHCw77iliRQwaiihgrIsdIknc -----END CERTIFICATE-----Generated at Mon Oct 20 10:07:34 2025 by rpki-client