$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa File: c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa (raw, json) Hash identifier: fnW3PfRO9nf+2/5Yt2QwP0DR7EkBQirycCy1etVHXj0= Subject key identifier: AF:65:14:03:1C:CE:4F:49:C0:A9:6B:82:69:57:0C:06:E3:8F:29:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC22040E08DBC840D908E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.173.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:20:40:e0:8d:bc:84:0d:90:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=cd18e63e-24df-48f5-8d60-6b6a003fc903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:77:a2:0d:c5:6a:a9:63:2f:06:dd:c1:bf: ef:82:74:fb:0c:c3:cc:26:25:6c:74:7c:0b:e5:c2: 19:79:65:47:0a:5e:fb:97:e9:f7:00:93:21:15:70: cd:95:8a:20:67:d0:44:03:60:47:69:73:b4:cf:ed: 1c:95:56:d2:82:ad:7c:f6:6b:08:7d:e5:3e:9f:6b: 91:bb:d6:df:78:70:89:6c:6a:83:8d:8d:b7:5a:37: 40:f9:4a:e8:23:df:03:8d:f0:00:13:48:52:08:c0: 64:e1:19:6d:00:0c:f9:06:f4:c4:2f:69:8a:37:cb: 62:a3:46:76:be:70:72:26:a9:34:93:d9:0f:41:fb: c3:0e:10:a1:db:29:f1:51:35:be:cd:62:fc:1e:72: 4d:e2:c1:97:41:7e:00:ec:c2:fc:31:20:ec:8e:ca: 60:5b:c2:23:74:4e:4a:48:e6:89:b0:69:9a:7e:ce: 65:aa:03:7a:67:d4:e1:2e:b2:b4:aa:78:6f:87:8e: d2:fd:cb:3b:76:22:7a:1d:61:4e:a6:eb:c6:12:34: 67:17:14:90:f9:e3:94:10:4c:11:3e:6a:e9:cf:8e: 62:90:83:27:26:3d:47:3b:0c:69:8b:5b:43:62:71: 4a:78:78:c3:83:63:15:a7:7d:e5:64:28:65:25:b2: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:65:14:03:1C:CE:4F:49:C0:A9:6B:82:69:57:0C:06:E3:8F:29:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:17:66:bb:dd:fb:9b:09:f4:7e:8e:c1:a3:e3:cb:95:ba:70: 8c:e6:c7:e9:93:1b:ec:51:c3:d4:09:b7:57:d5:3d:69:f3:a1: 03:b4:97:4e:da:2d:15:7a:22:4a:d5:bf:8c:0f:62:2f:5a:6a: ed:51:8c:04:71:8f:77:a4:6b:22:c0:0c:ef:d8:ca:fb:65:70: 62:d9:bb:73:3c:61:57:77:a0:e6:29:bf:1c:ac:f7:c5:4c:e5: 13:02:a1:cb:de:87:06:cf:36:75:c3:3e:55:4d:c8:22:f2:cd: 28:68:1a:b5:5b:10:cd:d6:af:fd:eb:53:e1:4b:01:a1:49:36: a7:44:15:78:c3:1b:04:c1:69:b2:fa:08:e5:cb:41:1d:17:3f: e8:35:e1:9e:2a:fb:78:26:dc:b4:30:ab:58:50:bc:bc:e5:6d: 6a:28:d0:fe:c3:1f:c9:8c:77:48:93:a2:09:5a:ca:24:fb:28: 82:e6:44:f8:26:1d:d7:8d:7a:8f:b2:4e:0f:ab:bf:a1:49:57: 2b:af:2c:03:b2:03:d7:90:09:93:f8:4d:1e:d1:03:f3:bd:97: cd:70:fe:67:af:f9:51:82:74:6b:bd:91:e3:cb:e7:ee:10:c1: f6:8f:d4:01:6e:b5:27:a3:2e:c2:90:aa:8a:32:fe:ab:28:c0: 61:b7:ba:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswiBA4I28hA2QjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2QxOGU2M2UtMjRkZi00OGY1LThkNjAtNmI2YTAwM2ZjOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIN3og3FaqljLwbdwb/vgnT7DMPMJiVsdHwL 5cIZeWVHCl77l+n3AJMhFXDNlYogZ9BEA2BHaXO0z+0clVbSgq189msIfeU+n2uR u9bfeHCJbGqDjY23WjdA+UroI98DjfAAE0hSCMBk4RltAAz5BvTEL2mKN8tio0Z2 vnByJqk0k9kPQfvDDhCh2ynxUTW+zWL8HnJN4sGXQX4A7ML8MSDsjspgW8IjdE5K SOaJsGmafs5lqgN6Z9ThLrK0qnhvh47S/cs7diJ6HWFOpuvGEjRnFxSQ+eOUEEwR Pmrpz45ikIMnJj1HOwxpi1tDYnFKeHjDg2MVp33lZChlJbI1+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9lFAMczk9JwKlrgmlXDAbjjym4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFjMjk2N2MtODIwMS0z ZjIyLThhYTctNmI3NjI0ZmE3NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ62kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEXZrvd+5sJ9H6OwaPjy5W6cIzmx+mTG+xRw9QJt1fVPWnzoQO0l07a LRV6IkrVv4wPYi9aau1RjARxj3ekayLADO/YyvtlcGLZu3M8YVd3oOYpvxys98VM 5RMCocvehwbPNnXDPlVNyCLyzShoGrVbEM3Wr/3rU+FLAaFJNqdEFXjDGwTBabL6 COXLQR0XP+g14Z4q+3gm3LQwq1hQvLzlbWoo0P7DH8mMd0iToglayiT7KILmRPgm HdeNeo+yTg+rv6FJVyuvLAOyA9eQCZP4TR7RA/O9l81w/mev+VGCdGu9kePL5+4Q wfaP1AFutSejLsKQqooy/qsowGG3ul8= -----END CERTIFICATE-----Generated at Sat Aug 23 23:13:40 2025 by rpki-client