$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68aa435a-aee0-3e3b-87f0-015273b56522.roa File: 68aa435a-aee0-3e3b-87f0-015273b56522.roa (raw, json) Hash identifier: NTyp4KMeONi3aifcZ4ypKf01iQidPxaT6IRYXEParnE= Subject key identifier: B7:5D:87:5C:79:79:BF:E1:3A:A3:F4:C6:F3:4A:D1:AB:ED:2D:00:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F1E8B65D239E03CB0500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68aa435a-aee0-3e3b-87f0-015273b56522.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.188.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f1:e8:b6:5d:23:9e:03:cb:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a276cfb9-31cd-4b64-893c-7de4a822a0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:01:02:cb:9c:1f:b9:c8:92:ce:a7:95:33: bf:e2:0e:c8:a8:d7:9d:87:e2:93:e6:b8:cc:1d:cc: 03:e9:d6:39:f6:0c:c4:b5:d1:37:cf:22:9c:bd:96: 17:fb:3d:a3:9f:9b:a0:41:5c:87:bd:e8:0f:f0:3f: d0:cd:33:a3:f7:75:15:1c:7a:fc:12:58:66:5e:ae: 91:20:89:f5:2d:a9:64:01:c8:1e:da:a9:1b:87:7a: 5e:4b:d5:ec:29:9b:5c:e8:e0:02:75:b9:98:d6:24: b0:54:a1:0a:fb:61:af:c7:42:c5:c2:b0:cb:8b:84: b1:33:19:94:d0:1f:e1:93:e2:e7:6a:11:1d:39:b1: 75:3a:7b:f4:eb:09:4e:09:7a:00:8b:07:69:b7:5c: ec:8d:13:b7:1d:7a:e1:82:c9:1b:47:4d:1c:05:eb: d2:91:0b:6a:5e:79:d6:89:e7:46:b5:32:ad:90:ea: 11:ce:e8:63:30:d9:1e:ba:d4:82:b1:7f:fe:01:20: d1:75:c7:89:7b:90:3a:af:f2:45:76:9a:de:f4:ff: 2a:4f:87:27:6a:8a:7a:3e:9d:11:42:96:80:f1:18: a3:dc:3d:8b:a6:75:d2:2f:f1:aa:41:63:37:e4:b3: 5e:f0:76:fc:57:54:a4:f3:d4:fe:b6:be:38:ba:11: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:87:5C:79:79:BF:E1:3A:A3:F4:C6:F3:4A:D1:AB:ED:2D:00:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68aa435a-aee0-3e3b-87f0-015273b56522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f8:b8:c5:a1:41:49:ea:0d:fb:81:49:33:92:1f:e3:e0:e3: 11:3a:c7:32:b6:8b:ea:36:6f:b0:12:28:5e:cd:92:63:af:2d: b6:fb:84:a5:ed:3b:33:31:64:48:f7:97:55:05:03:cc:40:d7: c6:50:f1:1d:af:b4:87:91:8f:ea:be:5f:79:9c:7e:9f:3b:b0: f4:30:d0:39:a8:dc:c6:92:e0:ad:64:7a:64:75:bb:25:7a:7a: 59:c2:18:d2:5b:e6:ac:1a:cb:42:37:3e:63:96:d8:6d:53:d6: c1:5f:31:ed:e0:28:bb:2f:39:b0:0f:15:fc:2f:2e:b5:9e:83: 2e:87:59:8c:92:52:c4:08:a1:c8:fe:44:1e:75:26:d2:d2:93: 65:50:9b:eb:9a:dc:ce:39:2f:ce:88:8f:56:87:95:6d:8d:cd: 4d:45:53:13:f2:cc:3b:83:40:a6:ab:eb:9d:00:bd:23:47:5c: a3:cc:85:ff:5a:43:da:4b:0a:51:f4:07:31:ab:c4:94:de:bc: 64:ff:aa:81:91:bd:01:b0:fc:ef:4c:ce:20:84:2b:6e:b5:2c: 99:f4:28:b6:0d:39:51:c9:33:d1:e3:d1:89:6f:a7:8a:70:94: 8e:f1:23:77:4a:c0:8a:ec:5f:48:d7:8b:5b:31:ee:21:b0:66: 0d:f3:de:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvHotl0jngPLBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTI3NmNmYjktMzFjZC00YjY0LTg5M2MtN2RlNGE4MjJhMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKABAsucH7nIks6nlTO/4g7IqNedh+KT5rjM HcwD6dY59gzEtdE3zyKcvZYX+z2jn5ugQVyHvegP8D/QzTOj93UVHHr8ElhmXq6R IIn1LalkAcge2qkbh3peS9XsKZtc6OACdbmY1iSwVKEK+2Gvx0LFwrDLi4SxMxmU 0B/hk+LnahEdObF1Onv06wlOCXoAiwdpt1zsjRO3HXrhgskbR00cBevSkQtqXnnW iedGtTKtkOoRzuhjMNkeutSCsX/+ASDRdceJe5A6r/JFdpre9P8qT4cnaop6Pp0R QpaA8Rij3D2LpnXSL/GqQWM35LNe8Hb8V1Sk89T+tr44uhH3swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLddh1x5eb/hOqP0xvNK0avtLQCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhhYTQzNWEtYWVlMC0z ZTNiLTg3ZjAtMDE1MjczYjU2NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP4uMWhQUnqDfuBSTOSH+Pg4xE6xzK2i+o2b7ASKF7NkmOvLbb7hKXt OzMxZEj3l1UFA8xA18ZQ8R2vtIeRj+q+X3mcfp87sPQw0Dmo3MaS4K1kemR1uyV6 elnCGNJb5qway0I3PmOW2G1T1sFfMe3gKLsvObAPFfwvLrWegy6HWYySUsQIocj+ RB51JtLSk2VQm+ua3M45L86Ij1aHlW2NzU1FUxPyzDuDQKar650AvSNHXKPMhf9a Q9pLClH0BzGrxJTevGT/qoGRvQGw/O9MziCEK261LJn0KLYNOVHJM9Hj0Ylvp4pw lI7xI3dKwIrsX0jXi1sx7iGwZg3z3us= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:30 2025 by rpki-client