$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2652347-bd38-37b6-9f8b-a4033e64d065.roa File: c2652347-bd38-37b6-9f8b-a4033e64d065.roa (raw, json) Hash identifier: tZkwm2c7/EwdD4EMvvk0dbGBGuDT0U8zhlKrPkDiY0o= Subject key identifier: 9E:DF:2A:63:5E:06:14:2E:30:96:1B:D9:BE:E7:73:E6:C8:B6:38:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC247133C641C4D8E8D0B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2652347-bd38-37b6-9f8b-a4033e64d065.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 69.246.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:47:13:3c:64:1c:4d:8e:8d:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=75712b79-f0d2-4c3a-bb35-d107e1ff969d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:7c:60:2d:49:6a:30:3a:1d:13:a8:f7:d4: 1f:ed:aa:43:a2:2d:cd:f7:64:2d:1d:f7:01:df:c7: ac:21:77:56:b0:65:30:e8:f9:33:aa:23:51:e8:23: af:2b:e5:04:33:9f:af:68:b8:1a:f6:78:7c:05:97: 5f:29:17:e9:3a:c9:e3:a8:4d:d9:39:97:43:50:70: 55:2a:5a:49:a5:9f:35:e1:e7:44:d4:29:86:35:d2: df:12:51:10:bc:43:b1:f1:5e:5c:0b:e6:79:34:f5: e3:2b:7f:8b:b7:a3:b5:e7:7d:da:4f:bf:07:a9:f2: 78:38:4d:f4:b8:f3:09:6e:e6:5f:a1:8a:47:43:dc: 02:31:c6:f3:0e:45:e6:c8:90:82:cc:01:fc:3f:8e: 5d:9e:13:b3:60:89:50:5a:f2:2a:78:7e:68:af:34: 94:b6:cf:98:1d:5b:7a:b5:7a:03:5b:cd:88:c9:ff: 76:e9:da:9d:d4:a8:60:0c:ca:7c:a3:df:3a:fe:52: 9d:ea:2c:06:65:0a:f5:e4:0e:55:f9:d6:a3:2c:24: 40:25:ef:59:49:0f:70:ca:29:5e:69:65:05:4f:0b: bf:06:64:78:53:bd:80:b6:be:36:9c:2b:53:9f:47: 8f:f1:22:54:f5:cc:85:8c:35:82:6b:11:e6:a7:df: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DF:2A:63:5E:06:14:2E:30:96:1B:D9:BE:E7:73:E6:C8:B6:38:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2652347-bd38-37b6-9f8b-a4033e64d065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.246.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:41:4c:1a:ac:e8:97:ab:dd:ac:81:6c:bb:4b:8e:29:74:1f: fa:21:a7:e7:31:55:da:f8:3c:cf:be:52:11:12:0e:00:30:75: be:8e:96:fe:90:3f:0b:b7:30:84:5a:9e:f7:98:f2:99:47:7f: e7:a9:c6:3c:a0:90:a1:96:21:a7:42:e3:e0:fd:54:d0:d7:10: 36:87:dc:c3:e7:60:13:08:e1:a1:e3:f6:fd:3a:16:60:f2:7f: fd:d2:3c:9d:19:9f:c9:f0:ab:28:e5:3b:a9:e4:67:6c:d0:47: af:f8:b6:d4:26:2e:db:08:8a:48:cb:e1:2f:53:67:72:46:17: fa:a3:5f:30:41:e2:b4:6b:ce:1e:5c:84:3d:cb:8b:0b:e7:7d: c5:b0:9c:fc:bd:20:33:7c:dc:ac:42:d9:67:12:03:f3:81:a8: 26:0f:9b:ad:a6:bc:14:91:c7:27:b4:fb:a4:13:80:2a:6f:6d: 02:67:f5:c4:b2:5a:48:a4:67:93:f5:60:ff:cd:cc:ed:41:b5: 9a:82:10:d7:bf:61:5b:68:85:01:59:db:51:e1:40:38:69:08: 34:23:20:05:36:0f:fa:24:e6:91:8b:79:d2:26:a4:de:d2:d0: de:bc:ea:d3:fa:49:01:8c:f0:37:71:e6:55:0f:d0:50:ba:3d: d9:0a:a3:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswkcTPGQcTY6NC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzU3MTJiNzktZjBkMi00YzNhLWJiMzUtZDEwN2UxZmY5NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ft8YC1JajA6HROo99Qf7apDoi3N92QtHfcB 38esIXdWsGUw6PkzqiNR6COvK+UEM5+vaLga9nh8BZdfKRfpOsnjqE3ZOZdDUHBV KlpJpZ814edE1CmGNdLfElEQvEOx8V5cC+Z5NPXjK3+Lt6O1533aT78HqfJ4OE30 uPMJbuZfoYpHQ9wCMcbzDkXmyJCCzAH8P45dnhOzYIlQWvIqeH5orzSUts+YHVt6 tXoDW82Iyf926dqd1KhgDMp8o986/lKd6iwGZQr15A5V+dajLCRAJe9ZSQ9wyile aWUFTwu/BmR4U72Atr42nCtTn0eP8SJU9cyFjDWCaxHmp98eUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7fKmNeBhQuMJYb2b7nc+bItjgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzI2NTIzNDctYmQzOC0z N2I2LTlmOGItYTQwMzNlNjRkMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVBTBqs6Jer3ayBbLtLjil0H/ohp+cxVdr4PM++UhESDgAwdb6Olv6Q Pwu3MIRanveY8plHf+epxjygkKGWIadC4+D9VNDXEDaH3MPnYBMI4aHj9v06FmDy f/3SPJ0Zn8nwqyjlO6nkZ2zQR6/4ttQmLtsIikjL4S9TZ3JGF/qjXzBB4rRrzh5c hD3LiwvnfcWwnPy9IDN83KxC2WcSA/OBqCYPm62mvBSRxye0+6QTgCpvbQJn9cSy WkikZ5P1YP/NzO1BtZqCENe/YVtohQFZ21HhQDhpCDQjIAU2D/ok5pGLedImpN7S 0N686tP6SQGM8Ddx5lUP0FC6PdkKo1o= -----END CERTIFICATE-----Generated at Sat Aug 23 23:05:36 2025 by rpki-client