$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b0a2aca-51b7-3103-b577-4dc710c65871.roa File: 2b0a2aca-51b7-3103-b577-4dc710c65871.roa (raw, json) Hash identifier: dxgAU4cA/kZUbHDRinpHU9E+3Oa+HIBqh4lYPAgFzmg= Subject key identifier: 4D:68:0B:17:65:3F:02:B8:0A:57:6E:C8:C4:85:7A:E5:8E:2A:DA:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5063BAD4A85903C1DDFC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b0a2aca-51b7-3103-b577-4dc710c65871.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.161.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:06:3b:ad:4a:85:90:3c:1d:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a341dba3-3792-40ac-a36c-83808fd85cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:cf:32:2a:a9:56:76:ec:4e:7f:c2:30:46: 5f:fb:39:ad:9d:9a:5a:b6:e7:dc:e2:24:19:93:f3: 37:4a:17:ef:5d:63:2c:0b:1e:57:b9:40:da:d0:42: 8e:01:66:19:a8:8b:60:ac:ab:ae:93:6f:72:49:68: 23:32:fc:44:d1:c2:34:4f:17:c9:15:3b:7e:c8:be: bd:4a:36:fc:f1:d5:57:cf:4b:96:82:63:15:45:d1: d2:25:5c:4d:52:65:50:c1:d6:1a:a4:ab:d2:c3:90: 1e:bc:5f:d5:f3:d1:3f:c7:ff:5b:af:c9:01:38:c9: b6:f8:4b:5e:eb:b0:f3:3d:9e:c9:59:47:81:22:05: 9e:f4:22:90:7e:13:05:d0:c1:e3:d8:bb:fd:91:f7: 3e:1a:7b:e3:60:be:04:cb:47:c2:6f:17:61:28:ef: e6:b8:89:0c:5f:33:04:82:ea:29:c8:01:95:9a:26: ff:6d:95:7e:17:c6:10:1e:75:de:a1:66:24:1e:bd: 50:bd:05:d7:12:3a:10:03:80:e2:14:f5:e0:f5:4c: 7c:7c:b6:30:dc:71:ee:78:64:d8:63:d2:17:31:3f: a0:2e:2f:fa:2f:1b:9e:67:af:11:16:4e:b8:67:f8: 33:be:75:6d:2b:e2:69:05:4a:63:c5:61:ab:fd:1a: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:0B:17:65:3F:02:B8:0A:57:6E:C8:C4:85:7A:E5:8E:2A:DA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b0a2aca-51b7-3103-b577-4dc710c65871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:52:24:e7:75:3b:7b:4d:e3:94:e1:cd:9d:f2:46:a8:00:d4: 67:e6:d5:12:c3:45:73:5d:76:58:03:dc:36:4f:d0:f5:c8:da: 28:ad:3f:06:54:b2:45:65:1e:a5:22:3e:42:4b:a7:0f:bf:e1: 6d:04:2a:22:1b:81:6e:98:58:13:39:ee:2d:b5:03:88:93:52: 48:26:9f:6a:ab:80:9d:3b:66:a4:76:3c:df:76:1d:0a:9c:35: 2b:ad:d3:f3:b0:fb:cc:c1:8a:b9:38:bc:ae:60:e1:c3:72:05: 65:3e:84:5d:59:e1:ee:cd:2e:7d:b6:82:b6:94:4d:1a:f7:33: 1d:80:b8:27:ef:ac:f0:a5:5d:c7:53:94:69:f1:56:29:c4:3c: e6:3b:d4:dc:06:ab:01:f3:dc:a5:fd:c2:21:21:70:0b:df:ba: 0a:9d:b0:60:b9:57:4d:8e:24:57:aa:2d:00:06:97:e3:de:25: fe:ec:ae:86:94:8a:ae:e9:01:d8:b1:01:0b:19:0e:b2:64:c1: b7:a0:16:04:b9:b9:60:9f:a0:bc:a5:f0:9a:7d:26:a3:c6:cf: 5d:24:1c:b7:3e:85:5c:a9:b7:e9:b1:df:7f:ec:f8:3f:20:6e: a9:a0:54:4a:2b:ba:5d:db:9b:dd:48:fd:ea:1a:97:db:dd:e0: 63:81:f4:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxQY7rUqFkDwd38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTM0MWRiYTMtMzc5Mi00MGFjLWEzNmMtODM4MDhmZDg1Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD3PMiqpVnbsTn/CMEZf+zmtnZpatufc4iQZ k/M3ShfvXWMsCx5XuUDa0EKOAWYZqItgrKuuk29ySWgjMvxE0cI0TxfJFTt+yL69 Sjb88dVXz0uWgmMVRdHSJVxNUmVQwdYapKvSw5AevF/V89E/x/9br8kBOMm2+Ete 67DzPZ7JWUeBIgWe9CKQfhMF0MHj2Lv9kfc+GnvjYL4Ey0fCbxdhKO/muIkMXzME guopyAGVmib/bZV+F8YQHnXeoWYkHr1QvQXXEjoQA4DiFPXg9Ux8fLYw3HHueGTY Y9IXMT+gLi/6LxueZ68RFk64Z/gzvnVtK+JpBUpjxWGr/Rq7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1oCxdlPwK4ClduyMSFeuWOKtrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmIwYTJhY2EtNTFiNy0z MTAzLWI1NzctNGRjNzEwYzY1ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6ECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1SJOd1O3tN45ThzZ3yRqgA1Gfm1RLDRXNddlgD3DZP0PXI2iitPwZU skVlHqUiPkJLpw+/4W0EKiIbgW6YWBM57i21A4iTUkgmn2qrgJ07ZqR2PN92HQqc NSut0/Ow+8zBirk4vK5g4cNyBWU+hF1Z4e7NLn22graUTRr3Mx2AuCfvrPClXcdT lGnxVinEPOY71NwGqwHz3KX9wiEhcAvfugqdsGC5V02OJFeqLQAGl+PeJf7sroaU iq7pAdixAQsZDrJkwbegFgS5uWCfoLyl8Jp9JqPGz10kHLc+hVypt+mx33/s+D8g bqmgVEorul3bm91I/eoal9vd4GOB9OE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:11 2025 by rpki-client