$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91889bf3-a19a-3b88-928c-df5636544d38.roa File: 91889bf3-a19a-3b88-928c-df5636544d38.roa (raw, json) Hash identifier: 9lRO6uGVFuS+CvJ9Kcq6hJYnPFIuIxgRjUm3l2LOrqs= Subject key identifier: A0:C7:BE:DA:97:41:F1:33:37:2F:E9:D8:5C:E1:34:78:17:0B:A8:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC42F1747EB1BA7DD647C20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91889bf3-a19a-3b88-928c-df5636544d38.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.167.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:2f:17:47:eb:1b:a7:dd:64:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=163f96ff-2dcc-46cc-b42c-7dd1a9676d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:59:b9:cd:7c:c0:16:b5:ff:4a:e4:f1:90: 2f:07:fb:0f:4d:d6:36:26:b0:c1:5e:15:2a:3f:1a: d2:39:86:7b:7d:9d:a0:31:99:15:08:f6:19:40:a0: ec:6f:02:61:8a:1b:e2:47:97:73:81:97:eb:33:08: 41:f5:e2:6d:25:38:7b:44:ac:35:99:e6:53:78:09: 0d:ed:43:51:46:4a:34:6d:af:48:09:f2:73:55:2b: 0a:fd:3f:5b:8f:4f:c9:a9:01:38:2b:51:59:8c:50: 0f:f2:fe:a9:dd:9e:45:fc:b9:60:bb:fa:73:de:26: 91:11:05:cd:b5:91:1b:7b:96:52:54:33:d1:e5:b7: 80:f6:eb:46:5c:9f:98:22:b2:71:f5:1e:38:40:60: 77:1b:8f:2a:44:37:9b:77:3b:24:22:62:5e:28:8b: 14:58:b2:d5:96:fd:a3:e3:ff:16:eb:60:cf:3f:24: e2:6a:5e:7a:49:be:c7:a3:29:ef:b4:37:e2:3d:5b: f2:a6:04:ed:63:c5:eb:30:3d:e5:38:e2:89:1e:aa: 5d:43:fa:07:6a:c4:32:71:22:70:ab:c9:00:b4:1f: 32:8c:fd:1e:76:2c:ce:4a:45:ca:89:97:be:aa:b2: cd:74:9f:84:b3:ed:69:9b:53:a1:39:8a:01:b9:9c: 62:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:BE:DA:97:41:F1:33:37:2F:E9:D8:5C:E1:34:78:17:0B:A8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91889bf3-a19a-3b88-928c-df5636544d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:78:00:d1:5b:49:35:c5:9e:92:a3:03:08:d8:71:10:86:81: 84:23:e8:bc:a6:6a:16:65:55:f6:cc:a2:4c:24:76:67:a1:3b: 43:de:d0:d3:ae:01:66:12:d8:97:61:66:fc:61:14:8b:95:2c: af:10:cf:30:83:2b:94:b2:36:91:ad:b3:d9:1c:e3:c5:27:7f: 14:92:b7:33:3a:85:43:09:0c:a5:c0:61:a1:ba:1f:3a:37:f8: cc:00:10:c2:11:c0:20:da:1e:9f:97:0b:43:ad:53:af:ae:dd: ba:16:a8:e4:fe:a7:96:7c:6b:43:98:c0:2e:34:ba:a5:e8:f5: ff:f0:cd:9d:57:b0:8d:3b:8d:d6:f1:4c:92:d6:79:e1:7d:20: 68:e0:e4:a5:20:e0:a1:52:28:22:76:da:2f:db:39:79:8e:06: 7b:5b:11:c9:7d:31:e9:67:8e:42:c2:7d:57:c4:8e:be:f3:c2: fe:95:6a:d6:95:03:9a:c6:b6:31:f1:91:fb:c6:5a:f4:8a:a6: 65:8d:b2:de:74:8d:74:bc:f0:55:74:ff:05:97:08:26:ea:ce: 0e:ad:28:65:19:8c:ff:77:a3:9a:a6:0e:94:01:7a:d2:f2:78: 94:7d:4c:43:b3:24:81:5f:c5:14:24:d3:b3:24:fc:b4:0b:fd: d8:80:7a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxC8XR+sbp91kfCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTYzZjk2ZmYtMmRjYy00NmNjLWI0MmMtN2RkMWE5Njc2ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BdZuc18wBa1/0rk8ZAvB/sPTdY2JrDBXhUq PxrSOYZ7fZ2gMZkVCPYZQKDsbwJhihviR5dzgZfrMwhB9eJtJTh7RKw1meZTeAkN 7UNRRko0ba9ICfJzVSsK/T9bj0/JqQE4K1FZjFAP8v6p3Z5F/Llgu/pz3iaREQXN tZEbe5ZSVDPR5beA9utGXJ+YIrJx9R44QGB3G48qRDebdzskImJeKIsUWLLVlv2j 4/8W62DPPyTial56Sb7HoynvtDfiPVvypgTtY8XrMD3lOOKJHqpdQ/oHasQycSJw q8kAtB8yjP0edizOSkXKiZe+qrLNdJ+Es+1pm1OhOYoBuZxieQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDHvtqXQfEzNy/p2FzhNHgXC6iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTE4ODliZjMtYTE5YS0z Yjg4LTkyOGMtZGY1NjM2NTQ0ZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6fgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN4ANFbSTXFnpKjAwjYcRCGgYQj6LymahZlVfbMokwkdmehO0Pe0NOu AWYS2JdhZvxhFIuVLK8QzzCDK5SyNpGts9kc48UnfxSStzM6hUMJDKXAYaG6Hzo3 +MwAEMIRwCDaHp+XC0OtU6+u3boWqOT+p5Z8a0OYwC40uqXo9f/wzZ1XsI07jdbx TJLWeeF9IGjg5KUg4KFSKCJ22i/bOXmOBntbEcl9MelnjkLCfVfEjr7zwv6VataV A5rGtjHxkfvGWvSKpmWNst50jXS88FV0/wWXCCbqzg6tKGUZjP93o5qmDpQBetLy eJR9TEOzJIFfxRQk07Mk/LQL/diAeos= -----END CERTIFICATE-----Generated at Sat Aug 23 23:02:54 2025 by rpki-client