$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa011720-41af-3210-8907-d3bc068b3439.roa File: aa011720-41af-3210-8907-d3bc068b3439.roa (raw, json) Hash identifier: q3KgFBRQsL072q3lXGWdYLYL3A9YoLkR/SbnfKy/fSU= Subject key identifier: 81:87:22:83:59:D6:7A:4C:77:BA:7E:91:6E:7C:F5:71:91:09:A1:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1818DAE332B825184D700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa011720-41af-3210-8907-d3bc068b3439.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 69.248.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:81:8d:ae:33:2b:82:51:84:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6b7caf2c-18f2-428d-b949-d675f8c0d1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:61:16:0f:d9:e0:95:0b:3f:7b:bc:74:26: 3f:6f:85:fe:e4:53:28:b0:ba:3d:b2:ce:90:e7:aa: f3:e0:c5:9b:cf:7d:ce:51:e8:aa:6d:39:ef:7f:a9: 35:6e:9c:ff:1a:b0:86:6b:09:1e:b6:a6:68:0f:87: 29:3f:8d:ce:b6:65:31:18:f7:ac:1f:52:0b:f3:95: 4f:49:e3:7b:a7:bd:bf:96:e6:36:37:c0:a7:17:cc: c0:99:bb:6b:f5:5d:00:0f:9c:2b:6a:73:a9:a3:fc: 8f:c0:d6:b8:8c:98:e6:77:65:73:aa:c6:89:6d:63: 82:e5:7a:72:05:91:28:0e:a9:61:c4:74:a3:97:7e: 66:29:22:8a:6f:ab:73:b9:5e:44:e3:cd:4e:eb:69: c5:b2:a2:97:ba:09:17:4a:5d:38:55:8e:6a:fa:7c: 25:14:ef:04:18:43:72:00:b8:c7:dd:6d:07:b1:9d: 3c:da:3f:dc:a5:17:dc:5c:d6:e0:c9:ba:00:64:d8: a5:3d:16:66:33:18:94:10:4e:a1:b3:e6:18:da:16: f9:09:a5:45:ac:ac:a1:7e:ce:77:cb:05:c1:ee:ba: ea:df:80:0c:e4:af:4f:87:73:53:bf:bd:c5:8d:40: b6:3c:f1:55:d5:3a:c6:3b:f1:5b:ce:68:79:40:3d: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:87:22:83:59:D6:7A:4C:77:BA:7E:91:6E:7C:F5:71:91:09:A1:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa011720-41af-3210-8907-d3bc068b3439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.248.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:dc:fb:02:5a:a1:eb:e2:3a:ae:17:ed:6f:dd:ad:0e:ae:d4: b7:ab:51:8c:1d:30:e9:26:69:b4:fb:d9:d1:77:95:a9:2f:c1: 1d:ef:f9:81:e8:24:34:fd:0e:37:35:23:e3:c1:ea:9f:7a:2c: 6d:19:bf:41:2b:67:b8:5d:cf:f6:c6:12:40:f0:25:a2:3b:da: ff:00:2c:31:fb:a4:7a:69:03:79:1e:81:79:de:61:97:27:16: 98:27:79:90:02:b6:14:f2:83:1e:74:6a:e4:13:e1:33:35:4f: dd:1a:32:00:13:7d:b9:bf:2a:56:39:74:9b:c2:c1:d6:fc:96: 88:ab:6e:29:21:b8:e3:7a:fe:19:b7:64:4b:0f:11:0f:5d:6b: e2:e8:da:60:70:58:28:d2:91:83:b3:23:08:75:27:0d:9d:2e: c5:5a:57:29:1b:f2:f1:cd:b8:39:f3:07:fc:55:de:4d:e1:00: 98:3f:33:8f:5c:a0:1e:e0:80:09:9b:66:6f:31:e4:39:98:62: 53:ae:f4:0f:2b:0a:5d:f4:4e:2a:5b:7f:fa:08:80:10:0d:73: 68:b5:c6:6b:f1:52:d0:91:f0:4d:7b:24:1b:71:6f:2a:85:9c: 59:22:e6:3e:ed:93:fd:d6:83:3d:53:1f:a1:34:96:fe:bd:21: ea:df:2b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswYGNrjMrglGE1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmI3Y2FmMmMtMThmMi00MjhkLWI5NDktZDY3NWY4YzBkMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ZhFg/Z4JULP3u8dCY/b4X+5FMosLo9ss6Q 56rz4MWbz33OUeiqbTnvf6k1bpz/GrCGawketqZoD4cpP43OtmUxGPesH1IL85VP SeN7p72/luY2N8CnF8zAmbtr9V0AD5wranOpo/yPwNa4jJjmd2VzqsaJbWOC5Xpy BZEoDqlhxHSjl35mKSKKb6tzuV5E481O62nFsqKXugkXSl04VY5q+nwlFO8EGENy ALjH3W0HsZ082j/cpRfcXNbgyboAZNilPRZmMxiUEE6hs+YY2hb5CaVFrKyhfs53 ywXB7rrq34AM5K9Ph3NTv73FjUC2PPFV1TrGO/Fbzmh5QD29DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGHIoNZ1npMd7p+kW589XGRCaFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEwMTE3MjAtNDFhZi0z MjEwLTg5MDctZDNiYzA2OGIzNDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRfhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfc+wJaoeviOq4X7W/drQ6u1LerUYwdMOkmabT72dF3lakvwR3v+YHo JDT9Djc1I+PB6p96LG0Zv0ErZ7hdz/bGEkDwJaI72v8ALDH7pHppA3kegXneYZcn FpgneZACthTygx50auQT4TM1T90aMgATfbm/KlY5dJvCwdb8loirbikhuON6/hm3 ZEsPEQ9da+Lo2mBwWCjSkYOzIwh1Jw2dLsVaVykb8vHNuDnzB/xV3k3hAJg/M49c oB7ggAmbZm8x5DmYYlOu9A8rCl30Tipbf/oIgBANc2i1xmvxUtCR8E17JBtxbyqF nFki5j7tk/3Wgz1TH6E0lv69IerfK+k= -----END CERTIFICATE-----Generated at Sun Aug 24 01:37:41 2025 by rpki-client