$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b2093e-f342-3b5c-8266-2dcf3aea165c.roa File: d7b2093e-f342-3b5c-8266-2dcf3aea165c.roa (raw, json) Hash identifier: xxJnLIXLyJimp9qR1aerNyGC9xjOI9GnhNMGLqh9Qgc= Subject key identifier: C0:9F:19:81:A0:D3:07:0E:AA:A6:AF:4E:A2:8C:44:99:28:3C:3E:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB94EB29B790EA0432C2660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b2093e-f342-3b5c-8266-2dcf3aea165c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33660 IP address blocks: 67.161.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:4e:b2:9b:79:0e:a0:43:2c:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8aa881f8-5704-423c-844a-89b17128d86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:da:b6:f4:46:68:2a:bc:da:c6:5e:e8:c9:07: 9d:59:f5:00:96:cb:a7:6d:19:a1:73:78:75:6e:b6: 79:a7:83:36:51:35:a7:11:41:67:ff:46:8a:90:c4: 2c:5b:85:de:f3:5b:0b:0c:2e:03:c6:57:97:a9:74: 18:f5:21:03:8c:b1:db:b8:d9:3b:11:d3:c3:29:44: f1:1c:f3:e7:65:66:4e:3f:a9:1b:40:f4:cb:5b:a3: 30:e6:32:d1:8c:42:ff:1c:c2:03:fd:46:e7:71:ac: 60:ce:02:d8:13:c7:07:ce:9c:85:b9:3d:72:ea:6a: 25:dc:84:d4:96:69:62:ac:71:77:5b:77:24:b4:79: 2c:38:dd:98:57:90:37:d8:28:e7:b6:15:53:32:69: 8c:c1:87:f5:75:5b:2e:3f:f2:d5:38:28:56:21:13: b1:27:76:cb:d6:98:61:73:03:f3:f9:80:98:63:85: 1a:9f:dc:4f:fb:66:b4:64:e1:12:99:1a:f8:40:ca: 3f:d8:a9:e1:4c:96:05:70:c6:f0:31:cf:bb:35:a1: d1:6f:8a:20:6b:34:22:44:7f:b8:ee:4f:5d:b2:d4: d3:73:89:07:99:79:33:15:20:b8:a7:0c:29:4d:0c: 59:4c:0e:ec:4f:d6:b0:87:96:68:01:28:53:09:cf: 7f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9F:19:81:A0:D3:07:0E:AA:A6:AF:4E:A2:8C:44:99:28:3C:3E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b2093e-f342-3b5c-8266-2dcf3aea165c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ac:6e:12:ea:6a:08:71:22:d0:7c:b8:a9:cc:a0:ab:c8:0a: 9e:df:d7:c0:54:c8:01:0c:08:bc:cd:0e:bc:0d:d7:77:36:3d: 56:ca:f6:e3:f9:35:8d:6b:11:2a:89:54:7a:bc:90:8f:21:e3: 63:d1:29:e8:b4:3f:18:9b:a1:4e:d4:05:7d:16:68:a2:c3:9e: 0c:34:b4:c3:2b:c8:f4:62:3d:af:a5:61:c1:2a:fd:eb:45:b3: 21:1e:60:50:28:bd:fc:ec:89:86:e3:ef:70:f1:04:4b:a0:26: 95:2b:67:82:f8:dc:f6:72:d6:97:58:54:bb:a5:8f:f6:86:28: 10:52:56:9a:ec:c0:db:7b:b1:15:7b:1a:ab:c6:8a:79:39:6d: 5d:60:fe:5b:08:72:fa:51:27:f8:7d:fc:99:b2:0d:7c:c4:38: e9:81:7d:e2:b6:86:8a:7c:f1:c4:d0:02:1a:94:87:59:a1:92: a4:c6:de:ca:c3:0a:ae:ff:13:84:04:8a:7d:9b:6e:9d:25:16: fe:83:ed:15:d7:dd:f7:ce:c7:04:33:aa:d6:5b:28:75:a5:0d: 6d:0d:f0:ac:22:81:c8:9f:8f:e1:d9:1c:8b:b2:b5:f9:dd:7f: db:c8:8b:87:73:f5:b5:41:59:ab:7d:95:04:b6:7c:35:be:38: 79:a8:8f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uU6ym3kOoEMsJmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGFhODgxZjgtNTcwNC00MjNjLTg0NGEtODliMTcxMjhkODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNq29EZoKrzaxl7oyQedWfUAlsunbRmhc3h1 brZ5p4M2UTWnEUFn/0aKkMQsW4Xe81sLDC4DxleXqXQY9SEDjLHbuNk7EdPDKUTx HPPnZWZOP6kbQPTLW6Mw5jLRjEL/HMID/UbncaxgzgLYE8cHzpyFuT1y6mol3ITU lmlirHF3W3cktHksON2YV5A32CjnthVTMmmMwYf1dVsuP/LVOChWIROxJ3bL1phh cwPz+YCYY4Uan9xP+2a0ZOESmRr4QMo/2KnhTJYFcMbwMc+7NaHRb4ogazQiRH+4 7k9dstTTc4kHmXkzFSC4pwwpTQxZTA7sT9awh5ZoAShTCc9/YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCfGYGg0wcOqqavTqKMRJkoPD4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDdiMjA5M2UtZjM0Mi0z YjVjLTgyNjYtMmRjZjNhZWExNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ6HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6sbhLqaghxItB8uKnMoKvICp7f18BUyAEMCLzNDrwN13c2PVbK9uP5 NY1rESqJVHq8kI8h42PRKei0PxiboU7UBX0WaKLDngw0tMMryPRiPa+lYcEq/etF syEeYFAovfzsiYbj73DxBEugJpUrZ4L43PZy1pdYVLulj/aGKBBSVprswNt7sRV7 GqvGink5bV1g/lsIcvpRJ/h9/JmyDXzEOOmBfeK2hop88cTQAhqUh1mhkqTG3srD Cq7/E4QEin2bbp0lFv6D7RXX3ffOxwQzqtZbKHWlDW0N8Kwigcifj+HZHIuytfnd f9vIi4dz9bVBWat9lQS2fDW+OHmojwo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:50:10 2025 by rpki-client