$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c5c637c-3ce3-33a8-9874-59ef24b467e9.roa File: 5c5c637c-3ce3-33a8-9874-59ef24b467e9.roa (raw, json) Hash identifier: xIr3CPCg9W5L7QfrWX9RUQVYbX0FFmRHkODir28whv8= Subject key identifier: 87:9A:EA:98:47:C8:E6:E3:58:6A:5B:63:A6:AF:9E:8A:98:2A:6F:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1D73A8ECADBF32CFEE000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c5c637c-3ce3-33a8-9874-59ef24b467e9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 69.253.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:d7:3a:8e:ca:db:f3:2c:fe:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a40a89fa-662e-4020-a24f-e748861e240e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:f6:8b:f9:ab:5e:26:6b:2a:91:43:12:78: 64:af:a3:98:d9:a0:1b:7e:e2:0c:31:53:8f:2a:b8: 69:5d:54:77:0d:e8:2d:ca:5d:d9:04:32:0a:16:64: 9e:82:30:b9:b8:ce:f2:a0:a8:67:af:df:56:5d:20: a6:c0:cc:70:06:19:14:a8:23:ac:bc:58:72:08:54: b8:9c:92:22:6c:e1:15:f6:8b:59:9a:c0:bb:ef:f9: 8f:55:9a:f2:eb:6c:8e:fd:c4:ab:a8:e6:35:18:6b: d6:cd:53:bc:40:25:20:4f:2a:ce:a2:c4:92:18:50: ec:d8:36:60:d7:80:ae:66:1f:38:89:de:74:61:ff: ad:57:29:4c:e0:eb:d7:07:41:b2:d7:71:59:8d:89: 79:49:86:23:92:49:cd:7f:20:9c:0f:b7:15:0a:61: c4:b5:bf:18:c9:78:e6:83:dc:c9:0e:bc:6d:78:1c: 12:0a:2a:52:9a:25:f4:a7:50:c1:c7:05:6e:3f:f1: 9f:48:7f:db:12:73:09:17:9a:59:10:a6:22:96:2b: 15:c7:81:18:94:93:7c:c1:f0:40:76:8e:40:6c:e8: 01:24:6d:d1:79:05:f2:0b:ee:64:b3:1f:f0:b2:f0: 30:0a:cc:58:e4:6c:e8:de:38:a8:0c:c1:c5:4e:bd: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9A:EA:98:47:C8:E6:E3:58:6A:5B:63:A6:AF:9E:8A:98:2A:6F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c5c637c-3ce3-33a8-9874-59ef24b467e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ac:a7:03:a9:f0:9e:38:ef:e5:d7:dd:7e:95:2d:16:28:6a: 4b:c6:f6:41:e7:98:76:62:db:92:85:1c:50:db:1c:d2:e0:5e: 6d:09:d0:f9:95:b7:f4:6e:49:f6:98:59:1d:48:26:78:ea:93: a0:5d:f2:6d:1b:b4:82:cf:72:b5:26:17:f7:fe:64:c3:78:6d: a2:b2:31:61:b2:7f:76:3e:dc:c6:55:cd:67:8f:94:7c:58:f9: fc:84:43:bd:8a:6f:03:68:41:5b:c9:4d:28:0d:31:3a:cc:f7: 56:e8:1d:07:44:39:46:55:52:c6:2b:58:dc:fa:93:f6:ab:d7: c0:d0:8a:95:b5:b6:1a:a9:ea:2c:3c:a7:cc:c6:b6:3e:35:c3: 30:0e:de:11:41:bb:43:1a:2c:7a:9e:40:ce:dd:09:14:44:da: b3:4b:cd:3a:da:58:7f:c8:7b:b9:4e:aa:10:8b:7f:fe:79:28: b4:33:1d:1d:dd:3f:4b:49:aa:8d:57:09:07:c3:6a:39:e3:18: 9f:da:1b:93:f3:3a:c7:ba:96:84:8f:e5:61:ce:7c:11:b1:6b: 4d:a5:20:05:d4:fe:52:6d:20:31:e2:33:18:9b:83:e4:43:28: 5e:53:1c:bb:d6:45:7c:63:a1:eb:88:6a:94:eb:a8:28:bf:27: 7d:02:ca:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswdc6jsrb8yz+4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTQwYTg5ZmEtNjYyZS00MDIwLWEyNGYtZTc0ODg2MWUyNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm/2i/mrXiZrKpFDEnhkr6OY2aAbfuIMMVOP KrhpXVR3Degtyl3ZBDIKFmSegjC5uM7yoKhnr99WXSCmwMxwBhkUqCOsvFhyCFS4 nJIibOEV9otZmsC77/mPVZry62yO/cSrqOY1GGvWzVO8QCUgTyrOosSSGFDs2DZg 14CuZh84id50Yf+tVylM4OvXB0Gy13FZjYl5SYYjkknNfyCcD7cVCmHEtb8YyXjm g9zJDrxteBwSCipSmiX0p1DBxwVuP/GfSH/bEnMJF5pZEKYilisVx4EYlJN8wfBA do5AbOgBJG3ReQXyC+5ksx/wsvAwCsxY5Gzo3jioDMHFTr3o4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIea6phHyObjWGpbY6avnoqYKm/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM1YzYzN2MtM2NlMy0z M2E4LTk4NzQtNTllZjI0YjQ2N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRf2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaspwOp8J447+XX3X6VLRYoakvG9kHnmHZi25KFHFDbHNLgXm0J0PmV t/RuSfaYWR1IJnjqk6Bd8m0btILPcrUmF/f+ZMN4baKyMWGyf3Y+3MZVzWePlHxY +fyEQ72KbwNoQVvJTSgNMTrM91boHQdEOUZVUsYrWNz6k/ar18DQipW1thqp6iw8 p8zGtj41wzAO3hFBu0MaLHqeQM7dCRRE2rNLzTraWH/Ie7lOqhCLf/55KLQzHR3d P0tJqo1XCQfDajnjGJ/aG5PzOse6loSP5WHOfBGxa02lIAXU/lJtIDHiMxibg+RD KF5THLvWRXxjoeuIapTrqCi/J30CyiQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:03:52 2025 by rpki-client