$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8201f1e8-8965-3224-a256-b4abdfbe9f10.roa File: 8201f1e8-8965-3224-a256-b4abdfbe9f10.roa (raw, json) Hash identifier: QMfk0tN/5YSuAYU0yrsXGzFN+zUX2YpYl8PELG/s3VU= Subject key identifier: 55:49:EB:46:B3:9C:12:3C:58:19:55:D9:8B:17:C0:D1:C3:82:68:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC224D0026377486E855400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8201f1e8-8965-3224-a256-b4abdfbe9f10.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.176.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:24:d0:02:63:77:48:6e:85:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7f3408a9-70ca-4db4-b26c-779f6e283e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:59:3a:c6:ce:48:77:8a:3e:70:0e:b3:98: 40:d9:2c:a4:5b:91:12:ae:19:8f:5e:2c:ab:8d:b4: 39:5b:d1:dd:e4:d1:62:31:06:c5:ea:57:88:6c:4d: ee:eb:a5:a9:d6:59:1b:ac:e1:80:e2:30:11:f2:1f: 2a:c6:63:ae:bf:83:e1:89:ec:14:62:82:e6:19:51: 53:a7:ce:9a:fc:f0:33:97:e5:32:37:b0:60:52:6f: 5b:5f:6f:fd:24:c8:b2:d5:69:5d:6c:48:f7:43:bf: db:19:17:f7:e7:24:0a:7b:96:27:e9:2c:22:8b:5c: 81:08:9d:41:38:75:8a:49:44:3d:d2:a2:2f:7a:27: 86:fb:b2:2c:15:93:78:16:f4:79:37:78:e6:26:e9: 0b:63:ce:22:27:84:ee:18:f8:47:4d:a4:d8:26:b3: 61:15:d2:a8:0a:dc:a6:b3:d1:38:e7:14:a7:43:bf: 55:52:94:cf:a0:ba:f0:c6:88:96:35:22:ba:d9:07: d6:30:47:69:93:c1:c5:d2:ec:9e:1d:fe:23:77:4e: 6a:86:ec:69:47:f8:20:3a:38:58:04:ae:87:0c:e1: 58:6f:7a:6a:98:7f:1d:20:fa:35:2a:c8:c3:d0:e3: 21:74:27:cb:96:e3:ae:71:12:b3:14:8b:f3:5c:5f: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:49:EB:46:B3:9C:12:3C:58:19:55:D9:8B:17:C0:D1:C3:82:68:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8201f1e8-8965-3224-a256-b4abdfbe9f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:ae:5a:13:0e:ba:70:9f:44:d8:df:38:be:8e:b5:9b:2a:1d: 43:9c:aa:d3:c0:35:1d:23:ac:c5:d7:0e:9b:c5:1f:0b:9d:7b: fb:78:5d:7a:c4:25:35:3e:b6:66:9a:96:c2:28:04:28:5a:4e: be:43:da:99:f8:98:21:4a:5c:88:d4:d8:2c:a5:00:3f:02:08: 3f:4a:c2:8a:44:9e:81:31:51:10:e5:e1:18:91:61:0f:dd:76: f2:09:ce:86:ec:2a:39:57:30:7d:c1:6e:80:17:c5:7f:9e:0d: fb:56:85:c3:99:96:30:a2:c2:ac:03:ac:9e:cd:26:5d:af:d0: 9a:c6:82:c6:f1:a7:51:c7:3c:35:a0:16:97:23:d9:c3:a8:3a: 04:52:72:be:37:37:90:b7:3e:2b:42:65:da:02:a0:65:0b:56: 5c:d9:f3:1c:a2:81:a8:a2:ba:b5:73:7d:7e:76:22:f6:2b:cf: 5a:5e:99:6a:37:54:0b:30:f2:f2:96:f4:29:62:77:ec:b5:e0: bb:aa:0a:f6:4e:1a:46:c5:26:92:9c:d1:8a:1e:12:a7:64:dd: bf:74:ee:20:e6:ec:7d:30:5e:5e:55:c9:a1:1b:a8:c6:57:bc: 33:01:cd:fb:b4:21:b3:aa:4c:29:c9:f9:7b:c2:26:b5:0e:83: 89:11:f4:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswiTQAmN3SG6FVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2YzNDA4YTktNzBjYS00ZGI0LWIyNmMtNzc5ZjZlMjgzZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqJZOsbOSHeKPnAOs5hA2SykW5ESrhmPXiyr jbQ5W9Hd5NFiMQbF6leIbE3u66Wp1lkbrOGA4jAR8h8qxmOuv4PhiewUYoLmGVFT p86a/PAzl+UyN7BgUm9bX2/9JMiy1WldbEj3Q7/bGRf35yQKe5Yn6Swii1yBCJ1B OHWKSUQ90qIveieG+7IsFZN4FvR5N3jmJukLY84iJ4TuGPhHTaTYJrNhFdKoCtym s9E45xSnQ79VUpTPoLrwxoiWNSK62QfWMEdpk8HF0uyeHf4jd05qhuxpR/ggOjhY BK6HDOFYb3pqmH8dIPo1KsjD0OMhdCfLluOucRKzFIvzXF/riwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVJ60aznBI8WBlV2YsXwNHDgmiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODIwMWYxZTgtODk2NS0z MjI0LWEyNTYtYjRhYmRmYmU5ZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANauWhMOunCfRNjfOL6OtZsqHUOcqtPANR0jrMXXDpvFHwude/t4XXrE JTU+tmaalsIoBChaTr5D2pn4mCFKXIjU2CylAD8CCD9KwopEnoExURDl4RiRYQ/d dvIJzobsKjlXMH3BboAXxX+eDftWhcOZljCiwqwDrJ7NJl2v0JrGgsbxp1HHPDWg Fpcj2cOoOgRScr43N5C3PitCZdoCoGULVlzZ8xyigaiiurVzfX52IvYrz1pemWo3 VAsw8vKW9Clid+y14LuqCvZOGkbFJpKc0YoeEqdk3b907iDm7H0wXl5VyaEbqMZX vDMBzfu0IbOqTCnJ+XvCJrUOg4kR9AI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:38 2025 by rpki-client