$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1faeeef0-3003-3e3f-b6ad-9a92483c239d.roa File: 1faeeef0-3003-3e3f-b6ad-9a92483c239d.roa (raw, json) Hash identifier: hSA5nIgeP3sJPq/13/Nc1LX1SzMtF6dv5Z0jzLlXaqc= Subject key identifier: 1A:41:B8:1A:EC:8C:68:22:A2:AE:81:97:F7:7F:DD:69:EA:01:7E:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A95EDE0D7A62C2056EF500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1faeeef0-3003-3e3f-b6ad-9a92483c239d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.168.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:5e:de:0d:7a:62:c2:05:6e:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e2d1c2bc-783e-45ba-a327-e3b213120ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:3a:99:25:a2:0f:1f:01:5e:75:d0:77:cd: d0:f1:66:24:1a:b3:91:b6:eb:0f:73:06:74:ea:d7: 6b:ac:7d:03:66:ec:f8:74:d5:ec:c3:8d:66:27:df: 19:ee:2b:4f:24:c5:bd:95:e7:47:61:9e:01:7f:af: e8:f9:a3:24:9c:e1:ee:3c:37:dd:95:fe:10:83:11: 92:ca:86:6c:5e:b4:9f:46:0d:fb:d1:61:a4:57:98: 02:74:d0:34:2d:a5:ab:00:3a:0e:00:27:ee:ae:f2: dd:a5:33:de:bf:a0:73:aa:01:37:fd:1a:ce:0d:c9: 6d:b3:aa:29:58:95:1b:6b:1b:61:d4:75:10:e1:83: b8:3e:47:12:4c:b8:6c:96:dc:77:64:3f:c2:0a:6f: fc:35:be:27:36:83:1c:83:0c:d2:88:d9:15:19:9f: a1:68:c4:00:5f:49:8c:08:9d:49:29:13:16:6b:ca: 88:af:e0:42:71:b4:68:a8:2f:b0:64:d2:d8:f0:ae: 7c:c1:bb:16:df:61:42:45:81:8c:bf:9c:1a:c3:b9: ff:2c:60:2b:0a:43:e5:77:4e:b2:09:0e:cb:74:5c: 10:36:0a:38:1f:8a:51:57:f6:b0:ea:72:9a:97:f6: b2:a9:f9:0b:c0:4b:e8:cb:79:cc:8a:92:7f:17:ff: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:41:B8:1A:EC:8C:68:22:A2:AE:81:97:F7:7F:DD:69:EA:01:7E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1faeeef0-3003-3e3f-b6ad-9a92483c239d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.168.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:bb:80:92:b9:d9:32:e9:e1:77:56:bb:59:b6:66:42:25:0d: 5e:8d:e7:4e:58:96:e3:bc:51:a0:b4:76:d4:9e:1a:11:f9:02: 59:cc:d8:00:5d:74:89:9e:cb:24:75:5d:c7:09:85:c2:49:37: e6:67:20:ce:f5:bf:c7:f1:b2:f6:a8:c8:c7:81:0b:6b:2f:7e: 75:37:5e:46:06:0b:f1:e1:51:29:ca:d8:65:96:c7:bd:77:d5: de:2b:77:f6:ff:25:86:b6:09:ce:c7:3e:e4:7e:67:ec:b9:2b: 87:d2:6a:0b:b6:13:37:d4:e5:88:3e:c9:89:1e:63:25:89:10: c7:e9:bb:5d:f2:f2:f4:73:61:6f:9c:1e:89:47:05:08:c1:7f: 39:ed:a5:bf:6e:df:01:c3:ae:19:b4:0e:9b:03:2c:54:45:6b: 61:f9:41:2f:aa:88:0b:d9:08:bd:c7:e2:89:10:9a:41:c0:92: b9:dc:9f:79:d3:3e:79:21:a8:ef:80:65:d3:01:b1:28:50:28: a0:d1:fe:62:c6:af:c5:e9:78:4f:72:64:4d:d1:66:2a:b0:d2: d3:bf:f0:38:36:95:88:0b:fb:7c:87:10:e8:2e:1f:4d:b0:50: b7:be:8d:97:4e:c5:a3:60:80:eb:e4:ce:8e:20:b4:6a:54:09: 35:10:26:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqV7eDXpiwgVu9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTJkMWMyYmMtNzgzZS00NWJhLWEzMjctZTNiMjEzMTIwYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1A6mSWiDx8BXnXQd83Q8WYkGrORtusPcwZ0 6tdrrH0DZuz4dNXsw41mJ98Z7itPJMW9ledHYZ4Bf6/o+aMknOHuPDfdlf4QgxGS yoZsXrSfRg370WGkV5gCdNA0LaWrADoOACfurvLdpTPev6BzqgE3/RrODclts6op WJUbaxth1HUQ4YO4PkcSTLhsltx3ZD/CCm/8Nb4nNoMcgwzSiNkVGZ+haMQAX0mM CJ1JKRMWa8qIr+BCcbRoqC+wZNLY8K58wbsW32FCRYGMv5waw7n/LGArCkPld06y CQ7LdFwQNgo4H4pRV/aw6nKal/ayqfkLwEvoy3nMipJ/F/8cHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpBuBrsjGgioq6Bl/d/3WnqAX7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWZhZWVlZjAtMzAwMy0z ZTNmLWI2YWQtOWE5MjQ4M2MyMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW7gJK52TLp4XdWu1m2ZkIlDV6N505YluO8UaC0dtSeGhH5AlnM2ABd dImeyyR1XccJhcJJN+ZnIM71v8fxsvaoyMeBC2svfnU3XkYGC/HhUSnK2GWWx713 1d4rd/b/JYa2Cc7HPuR+Z+y5K4fSagu2EzfU5Yg+yYkeYyWJEMfpu13y8vRzYW+c HolHBQjBfzntpb9u3wHDrhm0DpsDLFRFa2H5QS+qiAvZCL3H4okQmkHAkrncn3nT PnkhqO+AZdMBsShQKKDR/mLGr8XpeE9yZE3RZiqw0tO/8Dg2lYgL+3yHEOguH02w ULe+jZdOxaNggOvkzo4gtGpUCTUQJl8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:58 2025 by rpki-client