$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa File: 4a2880a2-399c-391a-b0ff-17a565b54dce.roa (raw, json) Hash identifier: rvJi7XQ1sP3oCLeQeuCune9CxGSH9u2kJqjhx6SMjBg= Subject key identifier: 2F:97:5F:20:21:DD:5D:E9:0C:95:A7:47:3F:03:B7:2A:33:C4:94:1D Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584B76F2563812486FC72689A540 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 26554 IP address blocks: 67.59.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:56:38:12:48:6f:c7:26:89:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=40c76477-2a66-49b9-a48b-6bc2f87ebf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:8e:ad:3a:3a:5e:73:8a:2b:23:67:57:be: 1f:73:ec:cb:f4:42:17:b6:e7:b1:70:07:ce:d3:ff: ab:b8:12:49:4a:d3:80:05:19:37:00:f6:f6:eb:9c: db:82:c0:94:db:36:1a:3d:67:b0:19:5b:37:2c:15: 9c:40:43:41:fe:80:09:79:a5:96:4c:2a:8a:cc:76: 3a:5d:18:c6:f9:c5:00:4e:f3:8a:ca:2f:d8:8c:a4: 79:6a:70:fe:de:ef:7d:df:20:49:1d:78:63:38:79: c7:5a:a2:5f:f1:b2:a9:60:c0:d3:ee:ca:c1:eb:2d: ca:f5:09:92:61:da:46:35:73:6d:b9:45:6b:98:c8: 2b:86:88:7d:9e:51:28:c6:10:d7:53:25:d4:77:a0: 85:51:d9:3f:b5:98:8e:68:8e:41:a7:23:62:67:17: a2:de:82:e2:84:0b:45:c8:3b:5b:84:64:56:f0:f7: d3:f6:df:d4:09:b7:07:55:95:27:51:ef:91:2a:16: 09:53:f4:ba:45:8a:d5:39:91:79:fd:6a:e7:6d:57: be:dd:96:5a:93:9b:ae:1b:6f:08:7a:83:a9:d3:eb: bc:43:ab:0b:a3:5b:bf:ff:b6:fb:e8:af:9a:7b:9a: f7:f4:30:3b:21:70:a0:96:db:f9:85:77:f5:c3:d3: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:97:5F:20:21:DD:5D:E9:0C:95:A7:47:3F:03:B7:2A:33:C4:94:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: 67.59.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a6:70:50:5d:74:84:3d:03:17:e4:3b:49:ce:25:dc:a8:63: ae:48:59:fa:6b:de:ad:7b:b4:4f:a9:83:7b:10:d7:e3:a8:27: 4c:d5:a1:f0:8b:92:80:ea:41:a6:f0:bc:b8:c2:eb:36:94:89: 3b:78:e7:5b:d6:22:3c:c8:1e:a4:47:ec:88:50:72:fa:52:14: ef:14:12:eb:0f:56:23:bb:1a:1b:f5:87:ad:27:e6:12:e5:b3: 80:77:05:ef:08:2a:ee:a8:7c:a8:a7:6a:48:8c:8c:a5:a2:2f: 25:59:bd:41:e2:bb:5b:dd:46:99:21:f2:96:03:d2:3d:dd:a5: b9:8d:06:c5:de:45:b5:6a:9e:b1:08:5b:c9:87:f3:69:b2:4b: 71:ad:c6:84:15:2f:72:f6:f4:45:77:e6:70:d5:94:85:42:53: a9:39:cc:e1:04:15:49:60:5e:42:b1:be:cb:3d:74:6c:b3:e0: 09:d6:14:52:64:71:37:f7:99:be:50:34:82:10:49:2a:6b:60: 86:7a:9d:d4:f6:6d:0c:9a:b6:86:23:3d:3e:62:6d:f9:0b:66: cb:b6:dc:3e:ee:b6:3b:f0:e5:74:80:4f:cd:a1:68:87:28:f8: 43:06:4b:ea:79:b2:25:77:5d:85:6d:11:39:e9:7a:fd:8d:34: 7d:09:90:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lY4EkhvxyaJpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDBjNzY0NzctMmE2Ni00OWI5LWE0OGItNmJjMmY4N2ViZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4yOrTo6XnOKKyNnV74fc+zL9EIXtuexcAfO 0/+ruBJJStOABRk3APb265zbgsCU2zYaPWewGVs3LBWcQENB/oAJeaWWTCqKzHY6 XRjG+cUATvOKyi/YjKR5anD+3u993yBJHXhjOHnHWqJf8bKpYMDT7srB6y3K9QmS YdpGNXNtuUVrmMgrhoh9nlEoxhDXUyXUd6CFUdk/tZiOaI5BpyNiZxei3oLihAtF yDtbhGRW8PfT9t/UCbcHVZUnUe+RKhYJU/S6RYrVOZF5/WrnbVe+3ZZak5uuG28I eoOp0+u8Q6sLo1u//7b76K+ae5r39DA7IXCgltv5hXf1w9OJpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+XXyAh3V3pDJWnRz8DtyozxJQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvNGEyODgwYTItMzk5Yy0z OTFhLWIwZmYtMTdhNTY1YjU0ZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQzscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIimcFBddIQ9AxfkO0nOJdyoY65IWfpr3q17tE+pg3sQ1+OoJ0zVofCL koDqQabwvLjC6zaUiTt451vWIjzIHqRH7IhQcvpSFO8UEusPViO7Ghv1h60n5hLl s4B3Be8IKu6ofKinakiMjKWiLyVZvUHiu1vdRpkh8pYD0j3dpbmNBsXeRbVqnrEI W8mH82myS3GtxoQVL3L29EV35nDVlIVCU6k5zOEEFUlgXkKxvss9dGyz4AnWFFJk cTf3mb5QNIIQSSprYIZ6ndT2bQyatoYjPT5ibfkLZsu23D7utjvw5XSAT82haIco +EMGS+p5siV3XYVtETnpev2NNH0JkK8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:54 2025 by rpki-client