$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f987b7bd-8b2f-3804-8ef8-903e93457d92.roa File: f987b7bd-8b2f-3804-8ef8-903e93457d92.roa (raw, json) Hash identifier: Hgo2ZchNDywMeLq0AvOs5hvaiqlsvGbuHRXvsmurWyk= Subject key identifier: 35:AD:37:DA:CF:B2:9F:82:FC:23:9E:A2:0D:D7:43:A9:9E:B1:75:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9DDAFF9A5F9C5A09F4DE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f987b7bd-8b2f-3804-8ef8-903e93457d92.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.161.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:dd:af:f9:a5:f9:c5:a0:9f:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=86078a85-790e-40af-9b0d-7a44839824ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:f2:1c:61:d6:6d:2a:be:d1:05:ad:dd:6e: 99:d5:ff:87:7a:18:aa:59:ed:c5:f9:ca:4a:23:47: 65:e6:d1:98:70:a1:e7:cc:5a:7f:77:89:11:95:55: 74:b0:cc:c1:2a:20:d4:22:0f:3e:2d:67:73:a2:7b: fd:22:00:e9:45:09:e3:ef:b7:9f:f1:1e:40:e0:db: e0:ec:98:d7:90:cb:c9:78:3a:84:9a:d8:94:59:4d: 18:7a:e7:10:b8:2f:b1:a7:ed:7f:c8:40:49:06:c8: b6:19:be:4d:6f:1f:bd:81:45:27:62:1c:28:7c:c6: 47:27:55:f9:72:96:4a:e5:e7:54:d0:e0:d3:25:9e: 70:89:02:5e:37:74:f9:cc:80:2e:0e:ea:63:3d:8d: 55:77:14:3e:55:55:10:26:5c:69:d8:3e:b8:80:3f: 75:eb:84:b9:b8:ac:33:a8:d7:c9:6a:30:c3:ce:41: d3:65:f8:0e:a1:03:a4:7d:e1:68:88:41:e0:8d:9f: 2a:8b:02:55:8b:3b:a0:20:03:ed:75:d5:06:52:e3: b7:3b:c6:f0:bc:b1:74:65:bc:df:a0:d1:c9:90:4d: 46:f1:19:8f:54:c6:bc:f7:6e:d6:0f:f0:76:75:44: 9e:89:ef:36:83:de:c8:28:6b:46:0d:33:8a:ef:bf: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AD:37:DA:CF:B2:9F:82:FC:23:9E:A2:0D:D7:43:A9:9E:B1:75:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f987b7bd-8b2f-3804-8ef8-903e93457d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8b:33:b7:44:d6:31:08:4b:09:60:96:58:fe:5f:ec:4e:4f: ab:95:4f:0c:46:40:b0:6a:3f:85:a8:4e:a0:d2:4d:7a:ff:e1: 32:36:4b:9a:76:91:7f:d8:ab:0e:18:5c:eb:92:88:63:b3:bc: ed:77:db:32:f3:b6:77:25:dd:a0:e3:b7:40:d6:91:f2:0a:b4: 5e:91:52:f3:29:95:07:8d:35:4d:8e:73:98:76:c8:c2:89:a4: 84:ea:c4:0d:c4:6e:a4:06:1f:33:46:d3:ae:5f:2f:95:df:58: aa:b7:51:56:2f:0f:aa:40:1b:cb:f1:3a:ef:05:23:47:68:24: a3:e2:53:1b:8e:d2:03:3d:4d:14:fc:5b:04:8a:7a:96:01:b8: f4:c6:1a:18:53:54:42:8c:7e:0b:ac:c0:99:63:db:84:5d:1e: 9b:b0:4d:87:83:71:99:b9:09:db:cd:82:36:c8:c7:45:ae:48: 65:39:b1:78:cf:1d:c6:85:0f:27:01:b2:3a:6d:9d:c6:30:9f: f8:44:7f:10:b5:ba:44:8b:05:c2:56:8a:47:8b:f1:23:12:b0: 2b:bb:34:12:65:a2:c5:b2:15:39:5b:2f:6c:29:67:91:b5:45: 9d:9c:99:24:ef:e1:45:7d:0a:71:fa:b0:ad:87:97:00:35:38: fa:78:28:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ud2v+aX5xaCfTeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODYwNzhhODUtNzkwZS00MGFmLTliMGQtN2E0NDgzOTgyNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3TyHGHWbSq+0QWt3W6Z1f+HehiqWe3F+cpK I0dl5tGYcKHnzFp/d4kRlVV0sMzBKiDUIg8+LWdzonv9IgDpRQnj77ef8R5A4Nvg 7JjXkMvJeDqEmtiUWU0YeucQuC+xp+1/yEBJBsi2Gb5Nbx+9gUUnYhwofMZHJ1X5 cpZK5edU0ODTJZ5wiQJeN3T5zIAuDupjPY1VdxQ+VVUQJlxp2D64gD9164S5uKwz qNfJajDDzkHTZfgOoQOkfeFoiEHgjZ8qiwJVizugIAPtddUGUuO3O8bwvLF0Zbzf oNHJkE1G8RmPVMa8927WD/B2dUSeie82g97IKGtGDTOK779MhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWtN9rPsp+C/COeog3XQ6mesXXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk4N2I3YmQtOGIyZi0z ODA0LThlZjgtOTAzZTkzNDU3ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ6HgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCLM7dE1jEISwlgllj+X+xOT6uVTwxGQLBqP4WoTqDSTXr/4TI2S5p2 kX/Yqw4YXOuSiGOzvO132zLztncl3aDjt0DWkfIKtF6RUvMplQeNNU2Oc5h2yMKJ pITqxA3EbqQGHzNG065fL5XfWKq3UVYvD6pAG8vxOu8FI0doJKPiUxuO0gM9TRT8 WwSKepYBuPTGGhhTVEKMfguswJlj24RdHpuwTYeDcZm5CdvNgjbIx0WuSGU5sXjP HcaFDycBsjptncYwn/hEfxC1ukSLBcJWikeL8SMSsCu7NBJlosWyFTlbL2wpZ5G1 RZ2cmSTv4UV9CnH6sK2HlwA1OPp4KBA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:52 2025 by rpki-client