$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a55df61c-1de0-3f21-ada1-53df9f79aa32.roa File: a55df61c-1de0-3f21-ada1-53df9f79aa32.roa (raw, json) Hash identifier: qiQpo5Kqllt4ka2GUiu6Mdpdy5AM+BsHsJ7HdvoxYkE= Subject key identifier: 90:87:27:D5:63:A3:A8:02:AA:81:79:B7:55:4E:81:21:B9:13:4E:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC50ECD01BF8902A7EE15A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a55df61c-1de0-3f21-ada1-53df9f79aa32.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 69.181.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:0e:cd:01:bf:89:02:a7:ee:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=74990243-dda3-46f4-860a-be16e32bf890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:b3:00:3d:f1:cc:a4:9c:5e:1d:50:8f:d8: 94:b7:07:0f:9c:56:7e:87:ea:7e:da:cf:3e:e3:0f: d5:8e:bd:65:eb:da:18:0f:fd:b4:8b:fb:51:b9:a1: 59:42:b4:69:18:4a:ae:08:d7:da:00:8a:65:2c:cf: 02:f9:50:98:b2:39:1f:b5:e2:0f:b5:9f:72:29:76: c7:b4:0d:82:f5:8d:70:18:69:b3:44:0a:29:79:89: e3:41:5e:83:da:11:b5:a5:c1:95:b6:40:80:58:09: 7e:97:f1:fa:15:b3:eb:ec:01:89:ad:f1:36:97:74: da:59:0e:5d:5b:8f:16:c8:51:b6:53:65:c4:c2:12: 72:84:cb:bb:bb:75:5d:84:fd:44:64:93:ed:21:30: 39:e6:91:87:e8:5a:c0:b3:e3:d0:30:f7:9a:2e:07: d2:9e:c4:cd:c0:c6:53:ba:22:66:89:cb:3d:bb:54: 50:d4:21:c5:ba:bb:31:57:a1:30:30:da:58:9a:02: ef:ab:7f:60:b8:a6:00:cc:13:4d:8f:38:58:9c:54: 93:19:75:62:e4:6d:55:66:27:1e:e9:36:0b:85:89: eb:b9:4f:ac:30:b2:f6:47:55:89:c8:bf:fd:b9:f3: 01:31:9b:a9:6a:9d:83:93:13:f9:47:7d:37:fc:4d: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:27:D5:63:A3:A8:02:AA:81:79:B7:55:4E:81:21:B9:13:4E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a55df61c-1de0-3f21-ada1-53df9f79aa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.181.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:88:3f:51:69:a5:78:b2:b6:fc:3f:66:6c:09:fd:21:86:2f: d8:ed:1c:9a:dc:b0:c4:50:b5:f5:9c:75:b5:0b:2a:b2:64:f7: 11:67:cd:d7:f8:b3:c1:f5:65:41:50:51:bd:8b:21:51:58:bd: 31:c6:d2:f2:08:25:42:0b:66:f9:97:8d:06:12:1c:5c:c2:db: 70:03:51:25:ed:f0:46:44:6a:e6:d9:1d:1e:6a:26:77:f1:f6: 7f:a5:44:14:69:f6:38:10:e9:08:74:06:da:84:59:53:72:29: 3e:60:2d:9d:62:8a:2c:96:87:60:8d:8d:81:40:46:f3:8f:72: 1e:a4:c1:90:86:9f:ad:ae:a7:b6:1f:a0:83:9b:b3:6e:99:8a: 74:e6:0a:7f:29:e2:33:72:8c:04:44:7d:33:04:0a:24:ea:d5: 2c:39:7d:34:9e:29:28:29:c1:33:56:11:dc:f1:6c:1c:e1:47: 00:f5:35:51:68:54:62:9a:9b:a9:d9:d2:fe:b0:d6:c5:42:bf: 30:81:a6:76:ca:ab:6f:3a:45:9c:47:a8:1c:b2:f8:9f:17:32: 2d:e4:c4:4b:3d:ce:b0:d9:1f:c0:1d:1a:c2:ae:14:de:cb:36: 97:1e:7c:0e:42:53:51:1b:a5:43:fb:6c:92:f2:d7:03:bf:91: c9:51:12:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxQ7NAb+JAqfuFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzQ5OTAyNDMtZGRhMy00NmY0LTg2MGEtYmUxNmUzMmJmODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpOzAD3xzKScXh1Qj9iUtwcPnFZ+h+p+2s8+ 4w/Vjr1l69oYD/20i/tRuaFZQrRpGEquCNfaAIplLM8C+VCYsjkfteIPtZ9yKXbH tA2C9Y1wGGmzRAopeYnjQV6D2hG1pcGVtkCAWAl+l/H6FbPr7AGJrfE2l3TaWQ5d W48WyFG2U2XEwhJyhMu7u3VdhP1EZJPtITA55pGH6FrAs+PQMPeaLgfSnsTNwMZT uiJmics9u1RQ1CHFursxV6EwMNpYmgLvq39guKYAzBNNjzhYnFSTGXVi5G1VZice 6TYLhYnruU+sMLL2R1WJyL/9ufMBMZupap2DkxP5R303/E30OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCHJ9Vjo6gCqoF5t1VOgSG5E04RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU1ZGY2MWMtMWRlMC0z ZjIxLWFkYTEtNTNkZjlmNzlhYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRbW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaIP1FppXiytvw/ZmwJ/SGGL9jtHJrcsMRQtfWcdbULKrJk9xFnzdf4 s8H1ZUFQUb2LIVFYvTHG0vIIJUILZvmXjQYSHFzC23ADUSXt8EZEaubZHR5qJnfx 9n+lRBRp9jgQ6Qh0BtqEWVNyKT5gLZ1iiiyWh2CNjYFARvOPch6kwZCGn62up7Yf oIObs26ZinTmCn8p4jNyjAREfTMECiTq1Sw5fTSeKSgpwTNWEdzxbBzhRwD1NVFo VGKam6nZ0v6w1sVCvzCBpnbKq286RZxHqByy+J8XMi3kxEs9zrDZH8AdGsKuFN7L NpcefA5CU1EbpUP7bJLy1wO/kclRElE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:41:30 2025 by rpki-client