$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0845a26-2a4f-3ed8-b8cd-0423798bc92d.roa File: a0845a26-2a4f-3ed8-b8cd-0423798bc92d.roa (raw, json) Hash identifier: Uiyadpk8jyyHkKEWyRxiNeN3loDsTDq6hALonQPxFus= Subject key identifier: 7A:71:BC:80:88:91:B9:5B:10:16:B2:CA:F3:8D:9C:6F:C3:31:BB:D2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC18120B488234A49856840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0845a26-2a4f-3ed8-b8cd-0423798bc92d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 69.248.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:81:20:b4:88:23:4a:49:85:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ab89d0ce-daa7-4f08-b65c-0cca9b14adc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b8:d2:8c:63:a8:73:f9:b9:b9:5a:a7:6c:00: 24:ff:b4:ac:ca:fb:f9:31:0f:fe:58:52:b0:57:01: 0e:06:3c:db:a8:e4:c9:6f:5e:9e:59:e2:35:f2:da: 36:71:66:9e:d3:98:c6:3f:9d:2a:32:37:fa:b2:d9: e6:d0:9e:13:57:4d:c3:47:99:ab:3e:02:be:78:ba: a8:48:d9:1f:1a:e6:83:db:47:45:96:99:ca:df:db: 12:f2:6c:69:ee:6c:13:62:66:f0:71:70:90:48:06: 13:74:aa:06:2b:fc:08:94:10:a4:e8:58:62:03:e4: 32:d1:8c:e5:1d:5c:5c:26:0b:c5:f9:b9:09:7b:d8: 64:26:13:1a:88:4b:a1:c9:61:62:7e:3d:a1:d2:bd: d2:38:34:77:fc:56:d2:18:17:20:cf:8f:5e:a5:2e: a3:b6:15:37:4c:01:d8:44:6c:9b:7e:18:5b:4c:24: ad:7d:92:1e:da:db:24:af:c2:ad:78:4a:f5:47:ab: fc:99:2e:87:64:98:22:4f:07:74:6b:eb:31:24:cb: 18:c7:cb:16:0d:95:e2:6b:9f:b4:84:8f:82:7e:55: 18:15:37:28:37:08:2c:67:00:24:6c:1a:77:3d:80: 90:cb:43:de:a0:51:fe:24:d8:a3:29:0f:98:15:1e: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:71:BC:80:88:91:B9:5B:10:16:B2:CA:F3:8D:9C:6F:C3:31:BB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0845a26-2a4f-3ed8-b8cd-0423798bc92d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.248.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a0:5f:96:08:3c:25:16:24:23:d4:3f:62:ea:80:aa:e3:97: 43:a5:7d:bb:56:21:ee:8d:c6:f3:3f:b9:2d:55:09:d4:1f:53: 8d:97:60:e6:89:0e:bd:bc:5b:e5:2e:da:5b:ff:85:41:4d:03: 39:5d:4c:a2:dc:b4:02:9b:d5:62:dd:eb:d0:84:30:92:b8:6b: ec:5e:2a:8b:ba:76:63:3f:14:9e:bf:08:6f:1d:d4:84:e1:fa: 7c:2c:25:a2:28:4e:28:23:1d:0f:34:bb:07:ff:ad:c9:a5:83: 48:0b:e6:6b:82:76:62:ee:fa:c1:b0:ba:f1:98:21:12:9c:77: 43:4f:5c:c6:8d:2c:04:d9:27:58:77:ff:71:c1:f3:9d:76:43: 08:df:42:6d:81:46:4f:20:2d:0d:7b:89:aa:b9:9f:69:f4:9e: 6b:bb:4d:18:ea:e7:da:64:1b:02:b8:4c:a9:97:3d:70:20:59: 35:0b:3c:d0:de:26:0d:ad:e0:f0:41:75:9a:df:48:ba:96:e0: b6:74:32:db:62:3b:cb:f5:71:03:72:24:14:fd:24:3c:7e:00: 1b:54:83:b6:78:4c:05:22:fb:1c:9c:b5:40:ef:fa:e7:f3:10: 10:7a:05:fe:8a:43:75:1b:18:3e:7d:a2:40:83:27:51:9c:3a: 9e:68:fd:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswYEgtIgjSkmFaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWI4OWQwY2UtZGFhNy00ZjA4LWI2NWMtMGNjYTliMTRhZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bjSjGOoc/m5uVqnbAAk/7Ssyvv5MQ/+WFKw VwEOBjzbqOTJb16eWeI18to2cWae05jGP50qMjf6stnm0J4TV03DR5mrPgK+eLqo SNkfGuaD20dFlpnK39sS8mxp7mwTYmbwcXCQSAYTdKoGK/wIlBCk6FhiA+Qy0Yzl HVxcJgvF+bkJe9hkJhMaiEuhyWFifj2h0r3SODR3/FbSGBcgz49epS6jthU3TAHY RGybfhhbTCStfZIe2tskr8KteEr1R6v8mS6HZJgiTwd0a+sxJMsYx8sWDZXia5+0 hI+CflUYFTcoNwgsZwAkbBp3PYCQy0PeoFH+JNijKQ+YFR5INwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpxvICIkblbEBayyvONnG/DMbvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA4NDVhMjYtMmE0Zi0z ZWQ4LWI4Y2QtMDQyMzc5OGJjOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAigX5YIPCUWJCPUP2LqgKrjl0OlfbtWIe6NxvM/uS1VCdQfU42XYOaJ Dr28W+Uu2lv/hUFNAzldTKLctAKb1WLd69CEMJK4a+xeKou6dmM/FJ6/CG8d1ITh +nwsJaIoTigjHQ80uwf/rcmlg0gL5muCdmLu+sGwuvGYIRKcd0NPXMaNLATZJ1h3 /3HB8512QwjfQm2BRk8gLQ17iaq5n2n0nmu7TRjq59pkGwK4TKmXPXAgWTULPNDe Jg2t4PBBdZrfSLqW4LZ0MttiO8v1cQNyJBT9JDx+ABtUg7Z4TAUi+xyctUDv+ufz EBB6Bf6KQ3UbGD59okCDJ1GcOp5o/XE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:54:49 2025 by rpki-client