$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa File: a09e28ba-fe6d-341e-a943-aa48a8252436.roa (raw, json) Hash identifier: 8v//sbGsj+c6+dUiwwbuv1kLJMoFn/3JvWbU4RBksUM= Subject key identifier: 34:BA:D5:A4:DF:23:E2:CB:0C:81:79:DA:6F:17:A9:16:D6:70:4E:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F39EB593621F952B53C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.188.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f3:9e:b5:93:62:1f:95:2b:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a0d4f215-c6d9-47ab-a05a-aad1fb041f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:b1:65:76:ad:b4:e6:f4:05:38:3a:c2:48: 58:e2:ba:9b:16:1e:91:c7:08:38:77:53:b3:75:32: 15:99:4e:75:d8:80:a5:a6:47:4b:25:0c:fc:b6:3f: 66:d8:e5:1f:a9:0f:19:00:18:04:0b:21:3f:57:48: dd:ca:a3:53:48:0a:9a:a1:74:02:40:c1:e9:ae:e1: ae:6a:38:64:16:2e:9b:a5:89:93:4f:db:98:17:bf: c2:b2:6c:b5:fa:b9:e5:aa:0d:6a:a4:98:86:3b:5c: a4:e8:2e:5f:c2:8a:e3:d4:12:f1:ad:da:71:b9:cb: cc:b8:9f:49:c9:4d:90:cc:c5:b5:89:98:0a:e3:97: 91:ff:2d:70:4f:90:77:12:71:d1:16:48:80:ca:29: 1a:26:c5:f1:de:86:af:50:ec:bf:1e:5b:cd:c6:7a: 57:77:73:4c:35:3c:f8:cf:2d:d3:8c:79:cd:92:6f: 3a:0b:39:8e:28:f1:8b:79:d6:c5:7c:f2:ac:0a:c7: 11:30:3c:1a:ba:d8:99:07:5f:0c:6d:76:20:90:28: 26:f3:b2:96:cf:ed:88:c0:4a:07:fc:8c:05:dc:39: 2f:79:cd:35:9e:6d:91:69:60:9d:9b:45:c1:96:d9: 13:8c:ca:26:c8:3f:90:96:5e:4e:71:4f:ad:fc:c8: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BA:D5:A4:DF:23:E2:CB:0C:81:79:DA:6F:17:A9:16:D6:70:4E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:11:b7:ff:61:f0:92:75:aa:6a:8e:80:3c:86:1f:58:4e:0c: 58:fa:c5:88:98:67:59:71:c4:74:05:6c:bf:e9:21:81:d7:08: 6a:77:13:49:62:f1:3e:f0:9b:ac:bd:02:18:49:c8:1f:14:c8: 56:bc:be:9c:61:d9:28:0f:49:3f:e6:58:66:d7:59:22:d2:03: 2f:07:c8:58:3f:14:c4:02:66:15:e4:61:50:3a:02:e0:4c:11: c9:73:a0:05:37:30:c1:b9:68:05:66:c1:ce:13:e6:48:cd:64: 78:b9:1d:eb:3d:3f:40:5c:38:9c:09:55:15:1d:7a:a5:06:e0: 65:3c:a7:53:c1:67:be:1f:86:b2:50:90:5f:7a:ec:db:81:56: f1:dd:f8:9d:1a:3c:02:fe:7d:80:14:99:30:c7:9e:a7:f4:fa: 65:e2:9c:84:71:76:ad:21:f7:cb:90:80:89:da:13:10:04:a9: 9f:21:dd:dc:cc:52:6d:56:99:b2:cb:70:ba:90:3f:b2:6d:ec: 78:75:10:26:68:8f:db:1a:b6:7a:c6:df:69:5e:97:52:11:7d: bb:f3:be:72:f1:09:0b:6c:f5:6b:b1:9e:7e:79:63:df:6c:28: f3:89:b1:e3:16:1f:e3:20:8d:5c:b3:a0:22:52:b0:9a:9e:40: 96:b0:31:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvOetZNiH5UrU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTBkNGYyMTUtYzZkOS00N2FiLWEwNWEtYWFkMWZiMDQxZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kaxZXattOb0BTg6wkhY4rqbFh6Rxwg4d1Oz dTIVmU512IClpkdLJQz8tj9m2OUfqQ8ZABgECyE/V0jdyqNTSAqaoXQCQMHpruGu ajhkFi6bpYmTT9uYF7/Csmy1+rnlqg1qpJiGO1yk6C5fworj1BLxrdpxucvMuJ9J yU2QzMW1iZgK45eR/y1wT5B3EnHRFkiAyikaJsXx3oavUOy/HlvNxnpXd3NMNTz4 zy3TjHnNkm86CzmOKPGLedbFfPKsCscRMDwautiZB18MbXYgkCgm87KWz+2IwEoH /IwF3Dkvec01nm2RaWCdm0XBltkTjMomyD+Qll5OcU+t/MgT4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDS61aTfI+LLDIF52m8XqRbWcE6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA5ZTI4YmEtZmU2ZC0z NDFlLWE5NDMtYWE0OGE4MjUyNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQRt/9h8JJ1qmqOgDyGH1hODFj6xYiYZ1lxxHQFbL/pIYHXCGp3E0li 8T7wm6y9AhhJyB8UyFa8vpxh2SgPST/mWGbXWSLSAy8HyFg/FMQCZhXkYVA6AuBM EclzoAU3MMG5aAVmwc4T5kjNZHi5Hes9P0BcOJwJVRUdeqUG4GU8p1PBZ74fhrJQ kF967NuBVvHd+J0aPAL+fYAUmTDHnqf0+mXinIRxdq0h98uQgInaExAEqZ8h3dzM Um1WmbLLcLqQP7Jt7Hh1ECZoj9satnrG32lel1IRfbvzvnLxCQts9Wuxnn55Y99s KPOJseMWH+MgjVyzoCJSsJqeQJawMYc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:17 2025 by rpki-client