$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89afb169-1360-3eeb-80be-97a0ab258b09.roa File: 89afb169-1360-3eeb-80be-97a0ab258b09.roa (raw, json) Hash identifier: R9xZOJnR/a7NmSS3ViKyPb75bszMnjXedU5jWBcDiQs= Subject key identifier: D1:70:38:93:02:2F:7E:2D:4A:E3:88:A4:94:94:88:15:5F:B3:F1:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4349354458BA7E6220A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89afb169-1360-3eeb-80be-97a0ab258b09.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.176.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:34:93:54:45:8b:a7:e6:22:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=697b810a-9974-4281-a369-ea1b343ff36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:3d:e6:46:87:1a:e8:6b:33:37:01:dc:34: ba:29:1c:73:aa:ce:dc:31:5c:9a:ec:e1:8e:79:9d: eb:dd:8e:22:e7:cf:6b:3d:b4:d3:40:37:32:5d:f1: 21:0e:0d:f5:c6:34:99:fb:9d:f7:f5:ec:49:28:cc: 6e:4e:f9:85:89:a9:24:e7:dd:b6:0c:90:34:7a:f0: 14:22:ad:f8:ee:53:eb:04:a2:c2:d5:d8:8a:62:e7: 3d:b3:e3:38:50:db:ca:28:27:8e:86:1d:7b:ad:54: 09:99:67:77:92:b8:89:1a:16:fa:11:c5:58:74:38: da:c8:2e:5a:44:b8:5d:97:af:4a:d0:08:2c:e7:3f: d0:89:42:0a:48:1d:fe:21:6c:44:fe:96:2c:c6:2e: de:d4:72:06:3d:76:0c:bf:c4:8a:a0:b0:1e:f2:0e: 2a:70:4b:a7:81:92:d5:bc:b1:83:ec:70:da:fa:28: 0a:a4:42:3b:32:b5:27:e9:73:5a:f8:ad:d2:d6:3b: 66:d2:b3:eb:8a:7a:4d:42:1d:44:88:60:62:00:ee: ed:99:b6:f0:51:ae:e2:2b:7c:e5:f5:49:05:17:96: 71:16:cf:62:52:f1:57:f1:8e:9d:58:fa:45:09:a8: 7d:60:8b:e3:8e:3f:d9:9f:c2:65:7d:a4:f8:68:0f: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:38:93:02:2F:7E:2D:4A:E3:88:A4:94:94:88:15:5F:B3:F1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89afb169-1360-3eeb-80be-97a0ab258b09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:55:f7:52:56:bb:f3:08:cd:1f:db:5d:50:c9:af:99:b5:8d: 38:09:70:da:7a:1b:9f:69:d1:c1:70:ce:e2:97:64:dd:a0:86: 0e:bc:1d:ab:37:bf:d9:1e:94:03:96:4a:73:00:f3:d2:bc:dd: 1f:8a:04:a3:fb:ff:7b:ff:98:74:e5:d2:13:39:75:ce:2f:3e: 2d:1d:7d:67:39:f4:4d:11:d9:71:c0:cb:46:7e:af:9a:3a:3d: 18:13:5c:be:41:25:cc:05:ac:bb:52:a6:b2:1b:cd:3f:f7:0d: 06:cb:ce:65:17:62:bd:7d:8c:65:24:52:5f:1d:38:11:79:19: d4:3b:a9:d0:e3:da:f4:07:2f:88:4d:4b:db:97:35:e9:e5:bb: c0:24:22:aa:25:39:fb:50:bf:07:36:65:5c:c2:64:99:51:56: ed:bb:fa:62:91:e6:f3:50:d3:95:4e:a4:11:02:09:a4:86:c3: d2:fe:73:5b:51:bc:a6:df:b0:3a:3e:14:57:3f:a1:b6:80:a1: e1:69:7b:b3:e0:57:4c:20:38:74:90:e8:c8:64:35:bf:8c:eb: 55:39:06:70:28:c7:ed:27:b1:ed:1b:32:a9:ee:fc:6f:6e:df: f7:5b:9e:63:b4:f5:64:3d:88:46:bd:4d:1c:53:2e:e1:b2:1f: 13:3d:4b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDSTVEWLp+YiCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Njk3YjgxMGEtOTk3NC00MjgxLWEzNjktZWExYjM0M2ZmMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDQ95kaHGuhrMzcB3DS6KRxzqs7cMVya7OGO eZ3r3Y4i589rPbTTQDcyXfEhDg31xjSZ+5339exJKMxuTvmFiakk5922DJA0evAU Iq347lPrBKLC1diKYuc9s+M4UNvKKCeOhh17rVQJmWd3kriJGhb6EcVYdDjayC5a RLhdl69K0Ags5z/QiUIKSB3+IWxE/pYsxi7e1HIGPXYMv8SKoLAe8g4qcEungZLV vLGD7HDa+igKpEI7MrUn6XNa+K3S1jtm0rPrinpNQh1EiGBiAO7tmbbwUa7iK3zl 9UkFF5ZxFs9iUvFX8Y6dWPpFCah9YIvjjj/Zn8JlfaT4aA+RtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFwOJMCL34tSuOIpJSUiBVfs/G3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODlhZmIxNjktMTM2MC0z ZWViLTgwYmUtOTdhMGFiMjU4YjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7C0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9V91JWu/MIzR/bXVDJr5m1jTgJcNp6G59p0cFwzuKXZN2ghg68Has3 v9kelAOWSnMA89K83R+KBKP7/3v/mHTl0hM5dc4vPi0dfWc59E0R2XHAy0Z+r5o6 PRgTXL5BJcwFrLtSprIbzT/3DQbLzmUXYr19jGUkUl8dOBF5GdQ7qdDj2vQHL4hN S9uXNenlu8AkIqolOftQvwc2ZVzCZJlRVu27+mKR5vNQ05VOpBECCaSGw9L+c1tR vKbfsDo+FFc/obaAoeFpe7PgV0wgOHSQ6MhkNb+M61U5BnAox+0nse0bMqnu/G9u 3/dbnmO09WQ9iEa9TRxTLuGyHxM9S4Q= -----END CERTIFICATE-----Generated at Sat Aug 23 23:32:38 2025 by rpki-client