$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36315b7-06b9-3a0b-98d1-e66f34ce31da.roa File: d36315b7-06b9-3a0b-98d1-e66f34ce31da.roa (raw, json) Hash identifier: tT6RVDEblf78EzHckcn8p7rHNnejdlckNJ3mxF/pRZg= Subject key identifier: 51:09:1A:10:65:55:0D:54:09:29:34:F1:EE:D7:ED:B7:39:C2:17:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1595FDA63A89ADB2D3C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36315b7-06b9-3a0b-98d1-e66f34ce31da.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 67.161.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:59:5f:da:63:a8:9a:db:2d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e9a39280-4ac9-46bf-9ded-fa3e0d61d865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:a3:26:bd:93:6f:37:fa:8b:3c:72:34:af: e8:d8:3b:7a:02:29:11:bb:ea:12:90:ca:56:b2:90: 44:e7:dc:01:36:84:f1:7a:01:c9:a6:f5:74:ab:ee: a8:3c:2e:6b:06:54:25:c9:1c:8f:e5:2d:8a:df:56: 97:c9:cf:c8:ae:3a:9d:b6:36:6b:4c:49:73:1d:86: 40:01:f8:32:09:ee:c8:be:09:c8:4c:ef:a3:11:ed: 54:72:98:cf:36:3c:94:0f:78:58:ac:b5:5f:ea:54: 0a:80:01:d6:6c:38:73:67:3f:48:1a:80:f6:a9:31: 1f:4a:13:bd:29:9a:2d:6a:60:5a:da:30:0e:86:31: e7:5a:9a:a9:71:9e:84:2b:46:b4:1f:a2:d7:c7:a9: 50:cd:39:2f:70:6c:7b:19:ba:9f:04:62:c5:b8:3c: 68:15:ea:e8:88:df:ba:2b:f4:12:46:62:e3:ce:9a: 39:93:b5:3c:65:de:40:e0:4f:9d:da:f9:fd:62:7e: 32:5e:67:94:1c:90:e0:47:26:1c:0d:a8:4a:21:d7: f8:90:5e:5e:28:2f:49:97:98:eb:0f:33:56:2d:07: 70:08:bf:52:28:c1:9e:5e:ab:5c:47:12:e3:e7:5d: e4:af:62:0e:bf:9d:02:cd:5e:24:a2:30:b8:27:44: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:09:1A:10:65:55:0D:54:09:29:34:F1:EE:D7:ED:B7:39:C2:17:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36315b7-06b9-3a0b-98d1-e66f34ce31da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:54:a4:c9:07:98:25:21:d4:9e:18:05:1d:59:a9:c8:64:01: 24:1d:ac:1b:ee:98:3d:7b:64:b3:59:90:99:cd:58:d2:85:d0: 8f:ae:2f:6c:ba:c2:cd:57:68:75:b7:f2:2e:1b:f5:dc:0a:5d: 07:a2:75:d9:79:42:67:f6:00:ee:c9:79:79:4c:49:80:74:fa: ee:87:94:14:ab:d6:a3:15:aa:82:84:9a:e4:d7:9a:7a:c4:56: 53:c1:a2:8c:02:48:7a:fd:9e:90:68:f7:6c:f9:71:53:0a:50: 63:61:f6:84:14:c6:e4:fb:f4:4b:d4:9b:70:6b:f0:fd:2a:cd: 86:bf:81:66:ee:62:cd:fd:34:39:6c:e9:48:52:92:ab:09:ea: 6f:bc:ea:c2:80:94:53:89:dc:61:df:67:d7:e4:9b:08:5a:47: 6b:9d:71:b6:c8:a1:db:34:c2:53:91:46:57:a3:66:1f:be:11: 57:cb:2f:f1:35:c5:99:2d:31:0e:07:88:1d:46:ed:6f:a0:17: 56:03:df:db:cf:ef:a9:7d:f5:1a:28:01:bf:c0:7a:17:05:0e: 58:ab:cb:dc:40:38:92:26:a0:a7:aa:16:ac:e1:44:72:17:44: 0a:3f:68:bd:18:94:a8:67:86:c9:5e:78:f1:1d:a6:ae:33:4e: fa:21:39:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswVlf2mOomtstPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTlhMzkyODAtNGFjOS00NmJmLTlkZWQtZmEzZTBkNjFkODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKGjJr2Tbzf6izxyNK/o2Dt6AikRu+oSkMpW spBE59wBNoTxegHJpvV0q+6oPC5rBlQlyRyP5S2K31aXyc/IrjqdtjZrTElzHYZA AfgyCe7IvgnITO+jEe1UcpjPNjyUD3hYrLVf6lQKgAHWbDhzZz9IGoD2qTEfShO9 KZotamBa2jAOhjHnWpqpcZ6EK0a0H6LXx6lQzTkvcGx7GbqfBGLFuDxoFeroiN+6 K/QSRmLjzpo5k7U8Zd5A4E+d2vn9Yn4yXmeUHJDgRyYcDahKIdf4kF5eKC9Jl5jr DzNWLQdwCL9SKMGeXqtcRxLj513kr2IOv50CzV4kojC4J0R9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEJGhBlVQ1UCSk08e7X7bc5whfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDM2MzE1YjctMDZiOS0z YTBiLTk4ZDEtZTY2ZjM0Y2UzMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZUpMkHmCUh1J4YBR1ZqchkASQdrBvumD17ZLNZkJnNWNKF0I+uL2y6 ws1XaHW38i4b9dwKXQeiddl5Qmf2AO7JeXlMSYB0+u6HlBSr1qMVqoKEmuTXmnrE VlPBoowCSHr9npBo92z5cVMKUGNh9oQUxuT79EvUm3Br8P0qzYa/gWbuYs39NDls 6UhSkqsJ6m+86sKAlFOJ3GHfZ9fkmwhaR2udcbbIods0wlORRlejZh++EVfLL/E1 xZktMQ4HiB1G7W+gF1YD39vP76l99RooAb/AehcFDliry9xAOJImoKeqFqzhRHIX RAo/aL0YlKhnhsleePEdpq4zTvohOQ4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:15:25 2025 by rpki-client