$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a2d93c4-0667-394c-9872-04990e8e7410.roa File: 1a2d93c4-0667-394c-9872-04990e8e7410.roa (raw, json) Hash identifier: u+9gqiqhQQv/W2xQl5aXMAVp9UFen1Myn7A5M4jOVN8= Subject key identifier: F7:86:A5:F1:B4:5A:54:A4:FE:88:41:A2:C6:9C:C8:2D:5D:32:8C:B7 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B2FC18E6B065B252AAE491C40 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a2d93c4-0667-394c-9872-04990e8e7410.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 6621 IP address blocks: 67.47.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8e:6b:06:5b:25:2a:ae:49:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=db0c964d-1d7f-4e8d-bf7b-0be731c7412e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:7e:32:33:4c:bd:6e:9c:2d:f1:cd:59:21: 71:ae:9b:c2:b5:ba:88:be:1b:33:a8:96:34:f9:d8: 1f:58:59:d2:d2:ff:43:88:54:a2:7e:4f:dc:0b:ba: 3c:e7:b8:df:2a:84:e1:66:c8:53:b6:28:c1:7e:0c: b6:24:ad:75:cf:00:84:f8:dc:59:95:f6:34:50:67: 33:26:96:13:b7:71:42:df:18:ad:e3:22:59:a6:cd: e1:34:a1:51:63:82:be:d4:23:0c:c6:91:08:e5:68: 28:d3:fa:1e:f9:20:20:2d:85:ed:ec:b9:86:40:55: f3:ee:fd:64:2d:67:3e:b8:e7:68:c8:bd:ce:e6:c0: 77:2a:fe:75:0d:01:6f:96:c4:93:09:75:23:dc:2a: 4d:e5:4a:d8:9a:af:ec:4c:af:60:3a:92:c8:16:e4: 1f:11:47:35:8b:2c:05:4e:4b:89:67:b0:8b:f7:8d: eb:a2:ac:64:41:24:09:1a:14:f4:e8:eb:8b:cf:0d: 01:b7:33:dd:57:3d:51:bf:b0:78:ff:4c:24:e8:43: a9:2e:1e:65:c1:da:0f:16:92:cc:9e:f7:31:c1:c1: 0f:3b:cc:4a:50:0a:fc:cd:73:7c:26:47:67:62:0b: 4b:69:bf:57:42:3e:57:58:7c:fb:af:ab:2f:96:0b: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:86:A5:F1:B4:5A:54:A4:FE:88:41:A2:C6:9C:C8:2D:5D:32:8C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a2d93c4-0667-394c-9872-04990e8e7410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.47.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5f:8a:c6:b6:28:7e:e7:18:1a:57:19:ec:f2:25:b6:2d:df: c4:a1:43:a3:e4:09:82:52:e2:03:f6:12:72:17:00:b6:fa:63: 7f:e7:7d:a0:be:51:25:48:c4:6c:41:b7:cb:4f:f1:19:0d:61: f9:ba:30:9a:50:f4:a4:32:2c:34:76:ed:49:7d:24:69:fc:46: 91:48:bf:e4:d9:c1:15:a9:6d:ea:8b:22:68:ea:d1:56:ce:05: 84:d6:58:e1:d9:a8:d7:fb:4a:32:a6:38:75:07:67:83:da:2b: 62:21:3d:66:e5:b6:67:c1:8e:95:bd:50:83:37:dc:32:76:ff: 5a:36:a1:c1:53:78:78:67:61:02:1c:fa:ff:5c:0c:16:3b:79: 03:c1:e2:f7:f4:71:48:c8:68:ea:05:db:b6:a6:bb:32:08:94: 5c:5e:a1:b4:b4:66:06:c8:1f:18:26:5e:a1:b3:8b:ae:8e:a9: b3:cf:46:21:fb:20:6b:cd:b1:e8:98:8e:50:c0:95:84:6f:4b: b6:0d:11:e0:d2:a1:8d:88:ee:18:e2:3c:89:03:2d:f8:f0:cd: 19:ce:7b:ae:7c:81:d4:df:55:4b:cb:cf:84:08:4e:f0:a5:0f: 96:48:30:46:bb:5e:55:13:b0:8a:7a:b0:3a:e1:a6:c6:d5:d4: 52:5c:9c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwY5rBlslKq5JHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZGIwYzk2NGQtMWQ3Zi00ZThkLWJmN2ItMGJlNzMxYzc0MTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/F+MjNMvW6cLfHNWSFxrpvCtbqIvhszqJY0 +dgfWFnS0v9DiFSifk/cC7o857jfKoThZshTtijBfgy2JK11zwCE+NxZlfY0UGcz JpYTt3FC3xit4yJZps3hNKFRY4K+1CMMxpEI5Wgo0/oe+SAgLYXt7LmGQFXz7v1k LWc+uOdoyL3O5sB3Kv51DQFvlsSTCXUj3CpN5UrYmq/sTK9gOpLIFuQfEUc1iywF TkuJZ7CL943roqxkQSQJGhT06OuLzw0BtzPdVz1Rv7B4/0wk6EOpLh5lwdoPFpLM nvcxwcEPO8xKUAr8zXN8JkdnYgtLab9XQj5XWHz7r6svlgvtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeGpfG0WlSk/ohBosacyC1dMoy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMWEyZDkzYzQtMDY2Ny0z OTRjLTk4NzItMDQ5OTBlOGU3NDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQy8XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxfisa2KH7nGBpXGezyJbYt38ShQ6PkCYJS4gP2EnIXALb6Y3/nfaC+ USVIxGxBt8tP8RkNYfm6MJpQ9KQyLDR27Ul9JGn8RpFIv+TZwRWpbeqLImjq0VbO BYTWWOHZqNf7SjKmOHUHZ4PaK2IhPWbltmfBjpW9UIM33DJ2/1o2ocFTeHhnYQIc +v9cDBY7eQPB4vf0cUjIaOoF27amuzIIlFxeobS0ZgbIHxgmXqGzi66OqbPPRiH7 IGvNseiYjlDAlYRvS7YNEeDSoY2I7hjiPIkDLfjwzRnOe658gdTfVUvLz4QITvCl D5ZIMEa7XlUTsIp6sDrhpsbV1FJcnNc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:50 2025 by rpki-client