$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa File: d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa (raw, json) Hash identifier: w1qhUWmS2L3s5dqBaGKj3TV7D++M0JNsH3tdrgzbWEI= Subject key identifier: AE:0D:41:6D:85:33:88:1F:A8:B4:28:FF:95:29:62:35:CA:A1:D6:B5 Certificate issuer: /CN=41810617-fa0e-48cc-badf-1b017add1f3e Certificate serial: 010D0C9F4328584B2A2C34DDE467A6E549E8CD38 Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 23471 IP address blocks: 67.219.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:34:dd:e4:67:a6:e5:49:e8:cd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ca43186f-0a97-43f2-a4ef-6fad5ec69366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:e8:95:5f:74:bb:56:5f:8d:ad:7d:7e:98: 43:d5:7a:41:fb:8a:2a:7f:78:3c:f9:12:0f:8d:a1: 24:ee:1a:2d:f4:23:65:ff:03:08:03:c3:e1:25:38: d1:23:35:c2:85:8c:bf:f9:98:a6:34:44:47:e2:10: 4c:75:9c:14:dc:b9:4d:8a:a5:02:72:ab:29:f3:40: d4:a3:68:20:6f:d1:39:a3:fb:22:84:ae:0c:30:26: 04:26:44:5e:0e:f3:36:19:12:aa:bb:74:3f:fd:bb: d3:bd:16:74:d1:24:49:9b:d0:c6:5d:2e:dd:39:1e: 69:3a:ba:1d:26:06:eb:bb:6e:f3:7c:cb:7e:aa:b2: ef:26:7b:bb:d3:34:70:a2:7e:20:96:19:aa:02:87: b5:38:d0:62:83:0c:cf:2a:55:2c:7c:c9:46:15:c0: 53:9f:7e:36:3d:3e:e3:0a:18:19:60:c9:d8:6f:75: 18:e9:06:fd:82:66:3f:36:da:76:24:2a:fc:0e:d1: 45:ac:32:27:ad:15:f5:55:01:65:4c:12:8b:21:a3: 28:77:5c:f5:88:a0:ca:b1:9a:55:83:ba:27:95:93: af:2d:89:5e:3a:c6:23:be:f9:2d:62:b2:28:83:91: 8c:07:55:3d:1c:df:0b:53:fa:88:0a:b7:7e:54:af: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0D:41:6D:85:33:88:1F:A8:B4:28:FF:95:29:62:35:CA:A1:D6:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl X509v3 Authority Key Identifier: keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer sbgp-ipAddrBlock: critical IPv4: 67.219.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:86:4b:45:17:4d:0f:6d:28:7a:cd:13:32:52:50:09:f1:fc: be:41:02:62:ce:7d:26:2f:50:61:4f:4f:8f:1c:95:92:96:6b: fd:cc:d4:29:61:bf:2e:bf:bb:71:76:9d:60:25:64:8c:56:4c: 2e:24:ec:ef:ad:25:72:ec:eb:c1:b1:fe:2d:0a:bb:e1:ac:db: e9:3a:e6:56:cc:9d:15:31:b3:fb:43:9c:2d:c7:0f:6f:58:f1: e2:f3:b8:39:63:4e:bf:3e:d1:d2:4d:01:67:f8:56:00:87:ae: 51:71:8a:25:a9:a7:fb:f0:9f:8d:6f:ec:b2:e2:78:d2:91:25: 5f:20:00:74:69:01:bf:be:ba:9c:d1:f0:ed:8b:b2:d7:aa:e6: ba:e7:7b:c1:02:f9:d4:4c:3e:7a:27:35:d9:65:67:a9:1f:e1: 14:17:a1:88:34:2a:25:c5:3e:4c:c2:86:34:e3:27:c8:66:48: 4f:83:0b:61:cb:73:8b:46:a7:73:c8:d5:3e:2a:72:5d:99:97: d3:7e:5b:dd:a8:f1:8b:18:d4:a5:db:98:c7:81:fa:f1:3f:73: 49:de:e7:4d:63:da:00:cf:6f:8c:b1:1d:70:8b:cc:ad:51:2a: 53:37:61:3e:69:4f:32:32:d4:27:6f:5c:ca:db:2c:8b:9c:06: be:36:1a:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDTd5Gem5UnozTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4MTA2MTctZmEwZS00OGNjLWJhZGYtMWIwMTdhZGQx ZjNlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2E0MzE4NmYtMGE5Ny00M2YyLWE0ZWYtNmZhZDVlYzY5MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh07olV90u1Zfja19fphD1XpB+4oqf3g8+RIP jaEk7hot9CNl/wMIA8PhJTjRIzXChYy/+ZimNERH4hBMdZwU3LlNiqUCcqsp80DU o2ggb9E5o/sihK4MMCYEJkReDvM2GRKqu3Q//bvTvRZ00SRJm9DGXS7dOR5pOrod Jgbru27zfMt+qrLvJnu70zRwon4glhmqAoe1ONBigwzPKlUsfMlGFcBTn342PT7j ChgZYMnYb3UY6Qb9gmY/Ntp2JCr8DtFFrDInrRX1VQFlTBKLIaMod1z1iKDKsZpV g7onlZOvLYleOsYjvvktYrIog5GMB1U9HN8LU/qICrd+VK8ztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4NQW2FM4gfqLQo/5UpYjXKoda1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MTgx MDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAxN2FkZDFmM2UvZDlkM2Y4ZTMtZmFkZS0z MWY5LTg2YmQtMDNkZjNjOTc2OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDE4MTA2MTctZmEwZS00OGNjLWJh ZGYtMWIwMTdhZGQxZjNlLzQxODEwNjE3LWZhMGUtNDhjYy1iYWRmLTFiMDE3YWRk MWYzZS5jcmwwHwYDVR0jBBgwFoAUeiaByQnxzDi33/6h0CBtTQq8+HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MTgxMDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAx N2FkZDFmM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANSGS0UXTQ9tKHrNEzJSUAnx/L5BAmLOfSYvUGFPT48clZKWa/3M1Clh vy6/u3F2nWAlZIxWTC4k7O+tJXLs68Gx/i0Ku+Gs2+k65lbMnRUxs/tDnC3HD29Y 8eLzuDljTr8+0dJNAWf4VgCHrlFxiiWpp/vwn41v7LLieNKRJV8gAHRpAb++upzR 8O2Lsteq5rrne8EC+dRMPnonNdllZ6kf4RQXoYg0KiXFPkzChjTjJ8hmSE+DC2HL c4tGp3PI1T4qcl2Zl9N+W92o8YsY1KXbmMeB+vE/c0ne501j2gDPb4yxHXCLzK1R KlM3YT5pTzIy1CdvXMrbLIucBr42Gsw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:53 2025 by rpki-client