$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa File: bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa (raw, json) Hash identifier: vyEOafGkwjxxmNrmKzMol7Y9huWXROcpWauMXmJBHnI= Subject key identifier: CA:B3:F4:F4:47:90:18:4B:B5:CF:52:9E:B9:36:C9:F3:F2:85:8A:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC225EFDFD80D44FA9A8AE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.176.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:25:ef:df:d8:0d:44:fa:9a:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a2ea2402-0cc3-48bc-8698-ed5ead87c0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:80:a8:f2:b6:e2:bd:20:a9:c2:10:17:d0: e1:e5:de:3a:78:fd:12:d4:9a:24:74:a4:34:fa:95: a9:93:02:a6:2d:e2:77:c5:12:ba:b3:8f:c6:06:fb: 16:7a:63:9c:53:40:c5:7b:b6:81:8a:13:94:4d:dc: de:ec:92:ba:ec:57:fd:a9:70:4c:9d:81:b9:97:cb: d2:38:fb:9a:54:14:cd:17:d4:5e:ba:37:43:c6:ee: cf:40:9e:15:9e:c0:9b:10:98:50:d3:e2:91:27:88: 60:13:35:25:7e:69:34:40:d4:18:21:0c:b0:66:38: 8b:22:90:86:42:34:e7:fc:17:0e:53:d5:a9:e3:5a: 42:e6:ec:3b:90:a8:b3:81:fe:38:89:92:f6:fc:17: d3:41:3a:37:1d:a4:b4:ef:93:b9:d8:a7:ca:1e:21: 17:a4:09:fb:87:dd:7f:7c:bf:64:78:b0:3f:96:a2: f8:1d:02:05:8b:96:85:68:aa:0a:96:b6:3c:ad:24: 85:34:90:49:23:ae:2c:7b:10:09:5e:66:6d:56:ec: e7:23:16:cb:e3:7d:0e:e0:46:fa:a8:df:70:19:d8: f1:ef:a3:90:4e:a6:75:56:5c:99:88:a1:8e:d8:08: 16:dc:91:f0:46:1c:02:fe:c1:1d:2b:a5:40:22:b1: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:F4:F4:47:90:18:4B:B5:CF:52:9E:B9:36:C9:F3:F2:85:8A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:b9:c3:dc:a3:11:4a:81:52:81:2c:12:f2:a6:14:ee:f6:08: b5:c7:17:89:92:61:96:d2:12:77:6a:80:f4:9e:fa:25:63:f7: 93:f6:9b:47:61:1e:70:a3:e5:4d:68:b8:c2:98:b8:8e:4d:85: 32:ad:bf:f5:b5:b0:79:06:8f:0a:45:fb:0d:9d:ca:96:03:53: bd:29:dd:e6:19:53:75:f5:14:f5:56:28:ed:60:36:ef:8f:00: e9:52:76:d5:54:1b:9e:80:07:c7:29:16:ee:fb:8e:da:33:77: 90:93:cc:9a:02:94:50:d2:a5:0f:61:2c:b9:df:4c:c4:02:75: cb:2f:a8:2d:6d:cc:1a:2c:60:5b:b4:a8:c7:fa:a1:9b:47:93: 32:a3:e7:e4:62:16:bc:37:51:68:4e:dd:bb:55:40:55:d2:23: 24:e8:1b:bb:23:cd:8b:f4:59:18:be:4b:ee:9a:90:b7:90:30: 8c:00:d9:b0:d4:2f:91:85:25:29:e6:59:a4:59:10:9a:88:a6: 4f:20:0e:43:b6:c7:bd:55:fb:2a:7c:25:f0:9d:27:fe:dc:0b: bd:5a:1e:ac:82:c9:83:02:3a:10:f3:d4:f7:56:6c:cc:72:0c: 5b:89:b7:d5:32:3a:8d:2f:06:d0:78:3c:e3:14:79:56:07:70: c5:9f:64:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswiXv39gNRPqaiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTJlYTI0MDItMGNjMy00OGJjLTg2OTgtZWQ1ZWFkODdjMGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArveAqPK24r0gqcIQF9Dh5d46eP0S1JokdKQ0 +pWpkwKmLeJ3xRK6s4/GBvsWemOcU0DFe7aBihOUTdze7JK67Ff9qXBMnYG5l8vS OPuaVBTNF9ReujdDxu7PQJ4VnsCbEJhQ0+KRJ4hgEzUlfmk0QNQYIQywZjiLIpCG QjTn/BcOU9Wp41pC5uw7kKizgf44iZL2/BfTQTo3HaS075O52KfKHiEXpAn7h91/ fL9keLA/lqL4HQIFi5aFaKoKlrY8rSSFNJBJI64sexAJXmZtVuznIxbL430O4Eb6 qN9wGdjx76OQTqZ1VlyZiKGO2AgW3JHwRhwC/sEdK6VAIrGZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqz9PRHkBhLtc9Snrk2yfPyhYpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmI1MjRmYzctZjViYS0z ZjE3LTgzOTktMDUxOTVkMWY2YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANq5w9yjEUqBUoEsEvKmFO72CLXHF4mSYZbSEndqgPSe+iVj95P2m0dh HnCj5U1ouMKYuI5NhTKtv/W1sHkGjwpF+w2dypYDU70p3eYZU3X1FPVWKO1gNu+P AOlSdtVUG56AB8cpFu77jtozd5CTzJoClFDSpQ9hLLnfTMQCdcsvqC1tzBosYFu0 qMf6oZtHkzKj5+RiFrw3UWhO3btVQFXSIyToG7sjzYv0WRi+S+6akLeQMIwA2bDU L5GFJSnmWaRZEJqIpk8gDkO2x71V+yp8JfCdJ/7cC71aHqyCyYMCOhDz1PdWbMxy DFuJt9UyOo0vBtB4POMUeVYHcMWfZFo= -----END CERTIFICATE-----Generated at Sat Aug 23 23:01:28 2025 by rpki-client