$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/248e4fdf-f508-30f3-84c4-bb47a6e64575.roa File: 248e4fdf-f508-30f3-84c4-bb47a6e64575.roa (raw, json) Hash identifier: O0oFRMnnmv7aljDEBXchkrIKwqXJCp83XA+WqNYXF/A= Subject key identifier: 20:2E:D5:01:40:CC:23:67:83:2D:B1:36:58:E7:0C:9B:63:7D:77:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC50DAF567EE47F26D00900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/248e4fdf-f508-30f3-84c4-bb47a6e64575.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.188.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:0d:af:56:7e:e4:7f:26:d0:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1b3c50f9-7e2d-4dcf-83c8-b46bdc83cef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:70:38:fd:de:2c:1c:d8:26:ec:94:47:6e:19: 16:66:cd:f7:1d:18:70:f8:ab:8a:6f:bc:d9:8c:01: cd:5d:70:7a:c0:2d:5d:e3:6b:81:59:d5:b0:fb:cb: a4:73:f8:29:e6:5a:a6:60:0f:fc:fe:07:da:ee:08: 3e:36:1c:d3:10:d6:da:cd:a9:f9:4a:13:7b:21:4e: bc:fe:3a:98:ea:75:b6:80:c2:1d:24:92:0d:f4:a3: e0:e7:c4:f1:7b:6f:ed:9b:c6:53:b5:62:19:f4:ae: e3:f8:1b:58:9d:a7:97:54:3d:b8:79:13:86:15:48: 63:1b:03:1d:a5:4c:e7:ae:fa:0a:1f:7d:90:49:1b: 78:f5:f7:f3:d9:c9:65:51:fa:5a:75:42:aa:9c:34: c1:53:a8:4d:3e:69:33:63:44:49:63:45:b3:24:12: d6:03:b8:25:b3:33:58:86:73:52:6a:9d:fd:20:03: 5f:08:1a:cc:6a:ee:8c:bc:2b:e6:88:07:9b:05:a8: 4f:2c:65:3e:f9:02:f4:4f:9c:98:a9:79:13:d3:ec: 2e:88:10:14:40:48:13:c7:02:98:6d:65:4f:38:c4: c1:68:b2:0a:78:9b:ab:60:9a:05:14:09:99:ac:d9: e5:c0:f7:d0:79:36:01:aa:64:04:54:08:95:3a:91: 5c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2E:D5:01:40:CC:23:67:83:2D:B1:36:58:E7:0C:9B:63:7D:77:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/248e4fdf-f508-30f3-84c4-bb47a6e64575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3e:36:7a:48:20:55:22:72:ee:c5:39:e5:c8:4d:b5:31:a5: d9:f1:29:45:6e:c0:35:ab:4b:aa:f6:2c:26:ac:21:68:b4:de: 3a:9b:56:58:f0:66:72:a5:3e:11:eb:18:57:68:77:c4:6d:5f: ce:63:55:08:a2:22:55:59:a8:1c:09:ed:e7:d2:7c:78:7b:f6: 71:b0:a7:69:84:df:24:53:e8:1d:ac:8a:e8:95:22:9b:b4:64: ba:8d:5b:61:b3:98:25:a9:20:7e:3b:a2:8f:93:17:65:98:56: f5:f8:a8:4e:87:46:14:06:a5:75:40:a4:eb:d8:14:c2:b5:23: 9c:d7:9e:9c:d0:3c:80:4a:96:a1:1f:21:6b:32:19:40:48:8e: b1:48:76:e2:dd:42:82:99:55:66:83:c6:15:ce:f6:1a:8b:50: 58:9b:a7:e0:e6:5e:f6:3d:c7:5b:cf:c1:47:fb:64:16:ec:7a: 61:cd:f8:9f:34:46:40:e9:97:c6:35:da:15:e0:28:d1:c4:55: f9:23:9a:04:5e:bd:2b:dd:5a:8d:9b:93:1b:22:9d:2f:1e:31: ea:43:d3:ff:2d:86:d7:25:6a:83:43:77:c7:ca:e7:d2:d0:07: 4a:94:ee:9a:b1:65:70:6b:f3:ed:65:d6:ce:80:2c:fc:66:6f: 60:4a:2d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxQ2vVn7kfybQCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWIzYzUwZjktN2UyZC00ZGNmLTgzYzgtYjQ2YmRjODNjZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3A4/d4sHNgm7JRHbhkWZs33HRhw+KuKb7zZ jAHNXXB6wC1d42uBWdWw+8ukc/gp5lqmYA/8/gfa7gg+NhzTENbazan5ShN7IU68 /jqY6nW2gMIdJJIN9KPg58Txe2/tm8ZTtWIZ9K7j+BtYnaeXVD24eROGFUhjGwMd pUznrvoKH32QSRt49ffz2cllUfpadUKqnDTBU6hNPmkzY0RJY0WzJBLWA7glszNY hnNSap39IANfCBrMau6MvCvmiAebBahPLGU++QL0T5yYqXkT0+wuiBAUQEgTxwKY bWVPOMTBaLIKeJurYJoFFAmZrNnlwPfQeTYBqmQEVAiVOpFcNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAu1QFAzCNngy2xNljnDJtjfXcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ4ZTRmZGYtZjUwOC0z MGYzLTg0YzQtYmI0N2E2ZTY0NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7xIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ+NnpIIFUicu7FOeXITbUxpdnxKUVuwDWrS6r2LCasIWi03jqbVljw ZnKlPhHrGFdod8RtX85jVQiiIlVZqBwJ7efSfHh79nGwp2mE3yRT6B2siuiVIpu0 ZLqNW2GzmCWpIH47oo+TF2WYVvX4qE6HRhQGpXVApOvYFMK1I5zXnpzQPIBKlqEf IWsyGUBIjrFIduLdQoKZVWaDxhXO9hqLUFibp+DmXvY9x1vPwUf7ZBbsemHN+J80 RkDpl8Y12hXgKNHEVfkjmgRevSvdWo2bkxsinS8eMepD0/8thtclaoNDd8fK59LQ B0qU7pqxZXBr8+1l1s6ALPxmb2BKLcs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:49:39 2025 by rpki-client