$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9de9a020-b4ee-3555-86a0-b92552f3509d.roa File: 9de9a020-b4ee-3555-86a0-b92552f3509d.roa (raw, json) Hash identifier: AbDPTQhBd1Mn2blMwd81RiJQpqARrwbNcqLC4m9TmMw= Subject key identifier: FD:A4:7F:23:32:FB:64:40:96:5F:11:DE:65:53:9A:FF:88:CF:77:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2ED8FC08ABD6F0E8B8D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9de9a020-b4ee-3555-86a0-b92552f3509d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.169.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:ed:8f:c0:8a:bd:6f:0e:8b:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3e37b167-b505-4252-9a22-33fc4e240b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fb:d9:bd:9a:39:88:62:eb:ca:39:bd:c8:d6: e8:32:df:89:df:8c:91:45:f2:c4:ee:90:eb:2d:ec: e1:99:47:75:b1:1b:a7:6a:2c:56:b7:5e:20:f0:ba: e7:a9:95:f1:d6:c7:95:74:0c:23:60:dd:0a:9d:04: 01:2d:06:b9:53:d7:4f:10:a3:50:d2:85:30:5e:58: 58:6a:73:61:3a:68:42:14:4e:1d:da:19:d1:66:0c: de:da:3c:e0:44:3a:64:18:b4:d2:b0:a7:33:a0:d6: 00:d1:b9:09:db:3a:18:a6:b8:50:ae:14:eb:3c:80: e9:79:ea:7b:11:3a:51:b7:d4:bf:ba:05:57:ce:45: d2:1e:a9:b2:8c:9b:bc:1c:d1:22:99:4a:c0:77:bd: e9:8f:b4:92:d6:26:5d:b0:1f:f9:25:51:1f:fc:51: 79:52:71:cc:ef:b2:18:1d:01:33:31:00:d0:b6:a1: c2:3e:d4:3e:52:09:61:31:21:21:c9:b0:64:95:bc: eb:d6:08:ff:da:ee:2c:8b:5f:5b:20:20:59:52:27: 35:c9:50:9a:40:1e:69:2e:52:bf:1f:37:ab:37:4c: 34:74:9e:5a:b4:a1:59:6a:87:d3:c7:c5:a2:dc:fe: 31:df:f1:aa:7c:55:92:76:c5:f3:43:9a:cc:99:31: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A4:7F:23:32:FB:64:40:96:5F:11:DE:65:53:9A:FF:88:CF:77:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9de9a020-b4ee-3555-86a0-b92552f3509d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:31:9c:74:c7:56:57:8c:97:81:00:e2:32:d2:d0:a6:45:cf: 0e:8e:51:fd:6d:ab:16:6f:f5:bc:a0:7a:21:87:d8:23:07:0d: 1b:a2:06:cb:97:e5:67:a5:f3:d8:ef:a3:0c:b1:7f:05:52:dc: 38:24:b1:b7:2b:a9:f9:08:18:3f:57:b0:b9:95:80:b3:ed:94: cc:42:1c:c2:ac:4c:b2:e1:26:11:42:ca:37:31:2e:ed:4f:8b: 80:5a:ca:68:3f:d7:55:d8:63:18:49:cc:ca:b0:c1:51:05:d0: 10:1f:1f:45:dd:d8:b8:4d:8b:da:c0:32:a9:1c:d2:79:03:b9: e1:c5:18:31:f6:d3:97:b4:82:e4:69:5b:41:74:85:f2:0a:7d: 65:9b:b5:d7:b4:1e:fa:63:28:77:8c:f7:28:c7:28:bb:f8:98: 22:26:b6:9c:c1:d5:70:2b:a5:b9:31:62:2c:22:97:a0:94:24: ee:05:33:b3:13:12:30:f1:77:04:e1:0e:a4:10:79:82:df:62: 2b:09:b4:fc:a4:33:a5:e0:ee:05:81:6f:43:0f:49:32:55:f4: 90:ed:8e:b2:a7:9b:19:08:34:ce:d0:ac:48:f8:af:d2:22:d9: d9:c4:86:ce:79:b8:32:32:26:c6:98:2e:d1:c6:ee:9b:3f:09: a6:0e:94:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswu2PwIq9bw6LjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2UzN2IxNjctYjUwNS00MjUyLTlhMjItMzNmYzRlMjQwYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fvZvZo5iGLryjm9yNboMt+J34yRRfLE7pDr LezhmUd1sRunaixWt14g8LrnqZXx1seVdAwjYN0KnQQBLQa5U9dPEKNQ0oUwXlhY anNhOmhCFE4d2hnRZgze2jzgRDpkGLTSsKczoNYA0bkJ2zoYprhQrhTrPIDpeep7 ETpRt9S/ugVXzkXSHqmyjJu8HNEimUrAd73pj7SS1iZdsB/5JVEf/FF5UnHM77IY HQEzMQDQtqHCPtQ+UglhMSEhybBklbzr1gj/2u4si19bICBZUic1yVCaQB5pLlK/ HzerN0w0dJ5atKFZaofTx8Wi3P4x3/GqfFWSdsXzQ5rMmTF9WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2kfyMy+2RAll8R3mVTmv+Iz3eFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWRlOWEwMjAtYjRlZS0z NTU1LTg2YTAtYjkyNTUyZjM1MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6lMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFExnHTHVleMl4EA4jLS0KZFzw6OUf1tqxZv9bygeiGH2CMHDRuiBsuX 5Wel89jvowyxfwVS3DgksbcrqfkIGD9XsLmVgLPtlMxCHMKsTLLhJhFCyjcxLu1P i4Baymg/11XYYxhJzMqwwVEF0BAfH0Xd2LhNi9rAMqkc0nkDueHFGDH205e0guRp W0F0hfIKfWWbtde0HvpjKHeM9yjHKLv4mCImtpzB1XArpbkxYiwil6CUJO4FM7MT EjDxdwThDqQQeYLfYisJtPykM6Xg7gWBb0MPSTJV9JDtjrKnmxkINM7QrEj4r9Ii 2dnEhs55uDIyJsaYLtHG7ps/CaYOlNk= -----END CERTIFICATE-----Generated at Sun Aug 24 06:08:39 2025 by rpki-client