$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ea53a99-5217-37d6-9b64-5d1784d601b7.roa File: 2ea53a99-5217-37d6-9b64-5d1784d601b7.roa (raw, json) Hash identifier: r3Xgshgh87BZfOG+wqkdBGBMiwe2kpjj/33IdlPzxGs= Subject key identifier: 44:F8:1C:47:E0:A4:CE:4C:32:20:F0:7D:CA:7B:43:4D:B4:7B:11:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB92E64DEB2812759EB620 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ea53a99-5217-37d6-9b64-5d1784d601b7.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 67.171.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:92:e6:4d:eb:28:12:75:9e:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=df3d3561-be7e-4655-aa05-ec7d5d50143a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cf:7e:14:2a:a7:ea:ae:5c:62:30:35:d4:89: 93:33:de:43:3c:e6:cf:42:fa:17:4b:6f:09:f0:be: de:16:c8:d9:fe:68:27:d7:2a:82:dc:90:2f:68:06: a5:c4:89:10:45:6d:fa:06:cc:3a:54:e5:33:c0:17: b7:29:d2:c2:fa:e8:7d:79:b1:fe:66:5e:f4:7e:12: 4b:6c:bb:f0:3a:99:5f:c1:2a:2b:41:b0:a6:35:a1: a6:bf:a9:4c:3b:78:73:d1:b7:4e:04:be:3b:eb:99: e1:1c:66:db:02:31:e2:51:de:84:a7:17:e0:1d:89: fe:82:4b:93:ce:7b:62:6b:a5:c7:cc:75:c1:e3:a0: a7:c9:25:43:1c:f2:00:bf:b6:3d:c5:20:37:03:57: 95:e1:c4:7b:0e:21:e7:7e:63:95:b7:64:71:40:6f: 2e:04:4d:24:16:de:9b:6b:fb:fb:ae:24:a2:ae:96: 28:63:99:45:ba:15:12:ac:52:0a:65:1f:94:97:20: f5:b4:3a:29:23:ca:ab:f8:b1:1c:b9:a0:7a:d9:77: 64:04:c7:cb:4e:94:36:1e:cf:3b:65:38:0d:b8:3f: fc:eb:8e:eb:9d:e8:54:34:9b:7e:5e:ce:5a:9c:99: 0a:bb:62:44:f5:d3:66:e6:e3:36:f0:28:04:b9:37: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:1C:47:E0:A4:CE:4C:32:20:F0:7D:CA:7B:43:4D:B4:7B:11:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ea53a99-5217-37d6-9b64-5d1784d601b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:96:b0:d8:79:c2:fa:07:0e:bb:49:ec:77:a3:2d:f4:a1:f1: 32:ec:9b:df:06:58:8f:a1:41:1f:52:c0:2d:31:cb:41:2d:d8: ab:29:41:32:fa:8c:62:83:fe:e1:af:80:87:11:18:64:3b:3a: cb:c9:cb:31:cf:85:11:35:09:67:f3:ab:fb:c5:a4:9d:94:d4: 80:6b:36:ad:97:c5:15:96:05:4a:be:79:9c:80:55:18:78:b3: c6:c4:79:e1:10:5e:56:fe:9a:89:87:81:86:db:75:60:c8:20: f4:49:4b:f1:d9:4e:7a:0b:51:30:2e:d1:a9:2d:39:d3:04:e0: 90:c6:94:20:c8:a8:81:e2:b9:50:9b:37:0c:4c:ab:04:89:0a: cd:4f:8c:1a:87:48:eb:9d:a9:59:3a:8f:81:1c:9a:cc:cc:9a: 00:b1:9c:f4:10:a8:66:0c:4e:13:c8:ce:2b:66:55:6f:5e:9b: 0d:4d:0f:47:4c:49:71:5d:26:a4:89:23:21:e3:05:26:87:c6: a5:9d:4c:ed:a4:df:f6:c7:fd:26:d1:9f:5f:67:af:7b:9d:09: 43:f7:44:33:4d:e4:f1:98:df:80:60:d2:53:5c:cb:f3:9b:e9: b3:a8:70:6b:b7:cd:f3:27:f4:c5:7a:23:4d:31:c0:8d:96:88: f5:1f:ce:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065LmTesoEnWetiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGYzZDM1NjEtYmU3ZS00NjU1LWFhMDUtZWM3ZDVkNTAxNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA389+FCqn6q5cYjA11ImTM95DPObPQvoXS28J 8L7eFsjZ/mgn1yqC3JAvaAalxIkQRW36Bsw6VOUzwBe3KdLC+uh9ebH+Zl70fhJL bLvwOplfwSorQbCmNaGmv6lMO3hz0bdOBL4765nhHGbbAjHiUd6EpxfgHYn+gkuT zntia6XHzHXB46CnySVDHPIAv7Y9xSA3A1eV4cR7DiHnfmOVt2RxQG8uBE0kFt6b a/v7riSirpYoY5lFuhUSrFIKZR+UlyD1tDopI8qr+LEcuaB62XdkBMfLTpQ2Hs87 ZTgNuD/8647rnehUNJt+Xs5anJkKu2JE9dNm5uM28CgEuTcwNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET4HEfgpM5MMiDwfcp7Q020exFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmVhNTNhOTktNTIxNy0z N2Q2LTliNjQtNWQxNzg0ZDYwMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6vsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOWsNh5wvoHDrtJ7HejLfSh8TLsm98GWI+hQR9SwC0xy0Et2KspQTL6 jGKD/uGvgIcRGGQ7OsvJyzHPhRE1CWfzq/vFpJ2U1IBrNq2XxRWWBUq+eZyAVRh4 s8bEeeEQXlb+momHgYbbdWDIIPRJS/HZTnoLUTAu0aktOdME4JDGlCDIqIHiuVCb NwxMqwSJCs1PjBqHSOudqVk6j4EcmszMmgCxnPQQqGYMThPIzitmVW9emw1ND0dM SXFdJqSJIyHjBSaHxqWdTO2k3/bH/SbRn19nr3udCUP3RDNN5PGY34Bg0lNcy/Ob 6bOocGu3zfMn9MV6I00xwI2WiPUfzmI= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:51 2025 by rpki-client