$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d7a1e82-3872-343c-9ef1-b486b1387c67.roa File: 9d7a1e82-3872-343c-9ef1-b486b1387c67.roa (raw, json) Hash identifier: DtB+fmo2vBhtH+SoHxJ9Av4IlckJXTfXEWnHGlMaQ8k= Subject key identifier: 4D:E3:44:E5:98:E3:9F:63:D6:F3:35:92:27:B0:E8:CD:B9:96:90:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC43193B41F2C01D92BE4A8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d7a1e82-3872-343c-9ef1-b486b1387c67.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.173.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:31:93:b4:1f:2c:01:d9:2b:e4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0f8c5a13-0dc6-4ac9-a7cf-3cc1d0d6a325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:fe:ed:a1:a5:60:84:7f:5b:99:30:f4:13: 96:ce:70:83:71:e9:65:a7:61:99:1b:0f:a7:8c:f4: c9:16:97:6c:e9:01:7c:7d:ac:7a:1c:72:9a:db:0b: f4:e8:fd:e1:3b:ea:69:1e:5c:3c:08:09:f1:29:12: 58:20:3e:45:07:35:9b:7e:fb:3f:f7:3b:31:f5:2f: ef:d5:f8:fe:ac:60:5e:c1:ae:8c:a3:32:f6:1c:e8: 34:54:fe:70:87:e1:51:25:ab:35:81:ce:36:62:70: 4a:73:9c:52:ea:3f:08:ea:20:1a:4b:75:c4:c6:44: bf:42:dc:8b:10:c0:fb:55:d7:7c:8d:92:1e:1b:2d: b1:3e:a5:ac:4c:24:a0:43:d2:44:aa:ab:05:37:24: 3f:1a:58:24:b6:3a:e6:73:eb:3f:c4:05:75:a1:59: 35:02:ff:3a:65:56:3c:17:3c:8a:ec:4e:f6:37:24: 2e:cf:76:04:61:78:54:a9:b9:89:86:e2:e2:1d:c8: 4b:9c:79:7e:76:86:55:3a:2f:03:a1:ad:cd:55:c8: 46:62:85:ee:b7:fd:db:d1:fa:68:33:c8:9b:a0:c6: f2:cd:a0:c5:c1:f1:da:60:f7:19:46:ba:cd:5a:05: f3:52:94:b5:8e:7f:68:83:32:06:ed:6f:b9:47:ea: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E3:44:E5:98:E3:9F:63:D6:F3:35:92:27:B0:E8:CD:B9:96:90:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d7a1e82-3872-343c-9ef1-b486b1387c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:25:db:f6:4e:1a:2e:bd:62:76:a3:4a:0d:a1:7c:fc:94:71: 06:93:47:b3:95:b2:d6:a7:4a:37:68:73:1d:08:00:b1:73:69: f2:4e:3f:b1:e2:38:93:6e:c6:87:8a:43:10:a2:f0:2b:5e:f0: b5:b7:5b:c5:5e:48:2c:9f:7f:f9:5e:54:dd:38:5b:2c:8c:17: bd:8e:13:ac:98:3e:83:6f:4b:95:f4:af:b5:21:5a:c5:58:ea: 28:96:e2:99:d5:38:09:19:92:e9:72:d3:9a:b2:41:7d:27:0b: f8:95:03:ec:55:29:b4:c7:29:32:50:39:13:7c:4f:27:24:b8: b6:38:35:c6:bb:17:e3:df:fa:5f:a6:c1:a8:25:85:26:49:0e: 98:a2:a2:65:bb:93:22:eb:1b:21:04:e2:26:72:04:08:5e:09: d3:df:f9:7b:51:94:e7:2c:53:a0:9b:f2:83:71:f6:0b:34:e6: ef:ef:64:24:14:3e:05:3d:b2:f3:7a:6d:65:14:af:5c:ee:84: c7:7e:1f:9e:8c:92:24:d2:8a:d2:8a:49:db:a6:e6:02:ad:59: ed:81:92:73:1c:4a:9c:70:ba:6e:04:71:79:5d:10:ac:95:f1: 44:c3:02:15:19:2d:66:51:cb:5d:7e:e3:23:a0:8e:11:83:25: 51:0a:ce:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDGTtB8sAdkr5KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGY4YzVhMTMtMGRjNi00YWM5LWE3Y2YtM2NjMWQwZDZhMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0/+7aGlYIR/W5kw9BOWznCDcellp2GZGw+n jPTJFpds6QF8fax6HHKa2wv06P3hO+ppHlw8CAnxKRJYID5FBzWbfvs/9zsx9S/v 1fj+rGBewa6MozL2HOg0VP5wh+FRJas1gc42YnBKc5xS6j8I6iAaS3XExkS/QtyL EMD7Vdd8jZIeGy2xPqWsTCSgQ9JEqqsFNyQ/Glgktjrmc+s/xAV1oVk1Av86ZVY8 FzyK7E72NyQuz3YEYXhUqbmJhuLiHchLnHl+doZVOi8Doa3NVchGYoXut/3b0fpo M8iboMbyzaDFwfHaYPcZRrrNWgXzUpS1jn9ogzIG7W+5R+ot4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3jROWY459j1vM1kiew6M25lpCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQ3YTFlODItMzg3Mi0z NDNjLTllZjEtYjQ4NmIxMzg3YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ61EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUl2/ZOGi69YnajSg2hfPyUcQaTR7OVstanSjdocx0IALFzafJOP7Hi OJNuxoeKQxCi8Cte8LW3W8VeSCyff/leVN04WyyMF72OE6yYPoNvS5X0r7UhWsVY 6iiW4pnVOAkZkuly05qyQX0nC/iVA+xVKbTHKTJQORN8TyckuLY4Nca7F+Pf+l+m waglhSZJDpiiomW7kyLrGyEE4iZyBAheCdPf+XtRlOcsU6Cb8oNx9gs05u/vZCQU PgU9svN6bWUUr1zuhMd+H56MkiTSitKKSdum5gKtWe2BknMcSpxwum4EcXldEKyV 8UTDAhUZLWZRy11+4yOgjhGDJVEKznI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:13:59 2025 by rpki-client