$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e844e3eb-6f0d-3d28-944c-758f0fe95050.roa File: e844e3eb-6f0d-3d28-944c-758f0fe95050.roa (raw, json) Hash identifier: fbxWwzWmtd/jZaUZJKOBFJrSokD7eoszknzCcglTc0I= Subject key identifier: 4F:43:94:B3:1C:F2:B1:E5:C4:80:F7:81:D8:51:B1:AA:3C:AB:97:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F280817A89C29B466E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e844e3eb-6f0d-3d28-944c-758f0fe95050.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.188.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f2:80:81:7a:89:c2:9b:46:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f684dae7-3556-41c2-997a-0a24915ae6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:02:55:91:95:5f:63:55:34:b0:59:59:10: f2:c3:4f:d2:7a:d7:4a:d6:52:36:a8:63:93:13:5f: a7:a8:e3:97:9f:52:bf:cb:71:cc:b9:b7:5a:6c:c0: f8:e9:0a:73:b2:42:f2:52:8e:d8:33:80:2a:40:62: d6:4e:d4:5a:d0:d1:7d:e2:3e:47:f5:7f:5f:3d:db: f9:f1:a8:35:79:91:91:70:f8:9b:e9:ea:4d:36:27: 28:05:32:a9:f3:17:df:da:f4:c1:35:7a:01:25:d0: f7:cb:b5:d4:b2:e5:32:33:f0:38:60:da:f9:f7:f0: ca:53:10:9a:97:4d:4f:26:57:ae:5e:23:90:38:c0: 55:a0:fc:84:ed:ad:83:b9:ca:c7:56:e8:c0:db:cc: 41:cd:b0:82:52:e3:1d:8b:da:00:e9:67:50:d7:15: eb:81:50:68:b8:f0:b0:0d:ed:65:02:ef:34:ee:ff: 44:e4:5b:f7:76:6f:9b:24:2c:1c:18:e3:0e:b3:15: 0d:61:f5:41:a0:d6:82:f9:1c:f0:f0:99:cc:eb:d7: ee:39:9d:8b:a0:45:98:ed:f1:28:bf:f1:c1:b7:70: 74:f6:a4:7b:61:da:f5:be:68:20:3b:70:df:be:4f: 0c:65:6d:dc:87:35:11:0a:0d:44:20:ac:c2:2b:d5: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:94:B3:1C:F2:B1:E5:C4:80:F7:81:D8:51:B1:AA:3C:AB:97:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e844e3eb-6f0d-3d28-944c-758f0fe95050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:ef:47:05:78:34:f0:96:6f:3a:c6:dc:c8:ef:65:f9:b3:25: cb:86:a7:6b:5b:09:01:c5:53:54:9d:bc:79:99:25:6e:e8:17: 6e:fc:7b:d8:90:0c:11:ae:e4:a0:3e:c6:b9:1b:72:1d:cd:e9: 41:12:12:8a:09:a1:08:74:5d:f5:3f:db:d4:34:c2:d2:bc:fb: a3:e3:fc:e2:e3:2c:d1:86:90:d6:4b:78:e3:70:39:16:ca:c7: aa:4f:19:51:2b:f3:65:fa:b9:9c:9d:23:46:ed:02:a5:37:32: ad:4a:41:3c:79:36:80:c5:24:e8:99:9c:39:ae:e5:88:30:c2: b8:20:ce:0e:0a:85:c7:ef:ae:1c:fd:9f:c4:b3:2f:d9:a1:02: b0:c4:3a:2d:71:83:96:bd:ff:d6:3a:9b:ab:9e:a3:e9:d6:d2: 1d:25:9e:a4:79:c2:59:d4:62:4d:30:db:bf:ef:01:92:de:61: e8:26:df:65:5d:42:b0:69:4d:25:72:c1:8a:2a:05:6a:e5:d3: c6:9c:ea:ad:f3:24:cb:19:9c:83:cf:35:f2:dd:9f:9c:5f:13: f6:6d:7b:05:e3:94:e0:d1:24:70:cc:d4:52:47:e2:61:d9:83: 31:b4:c9:89:fd:6b:6e:00:f8:dd:d3:43:97:6a:09:a0:da:ce: f9:3c:36:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvKAgXqJwptGboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjY4NGRhZTctMzU1Ni00MWMyLTk5N2EtMGEyNDkxNWFlNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/wCVZGVX2NVNLBZWRDyw0/SetdK1lI2qGOT E1+nqOOXn1K/y3HMubdabMD46QpzskLyUo7YM4AqQGLWTtRa0NF94j5H9X9fPdv5 8ag1eZGRcPib6epNNicoBTKp8xff2vTBNXoBJdD3y7XUsuUyM/A4YNr59/DKUxCa l01PJleuXiOQOMBVoPyE7a2DucrHVujA28xBzbCCUuMdi9oA6WdQ1xXrgVBouPCw De1lAu807v9E5Fv3dm+bJCwcGOMOsxUNYfVBoNaC+Rzw8JnM69fuOZ2LoEWY7fEo v/HBt3B09qR7Ydr1vmggO3Dfvk8MZW3chzURCg1EIKzCK9WDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9DlLMc8rHlxID3gdhRsao8q5fyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg0NGUzZWItNmYwZC0z ZDI4LTk0NGMtNzU4ZjBmZTk1MDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7yoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLvRwV4NPCWbzrG3MjvZfmzJcuGp2tbCQHFU1SdvHmZJW7oF278e9iQ DBGu5KA+xrkbch3N6UESEooJoQh0XfU/29Q0wtK8+6Pj/OLjLNGGkNZLeONwORbK x6pPGVEr82X6uZydI0btAqU3Mq1KQTx5NoDFJOiZnDmu5Ygwwrggzg4Khcfvrhz9 n8SzL9mhArDEOi1xg5a9/9Y6m6ueo+nW0h0lnqR5wlnUYk0w27/vAZLeYegm32Vd QrBpTSVywYoqBWrl08ac6q3zJMsZnIPPNfLdn5xfE/ZtewXjlODRJHDM1FJH4mHZ gzG0yYn9a24A+N3TQ5dqCaDazvk8NnQ= -----END CERTIFICATE-----Generated at Sun Aug 24 01:11:19 2025 by rpki-client