$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33787d02-8bdd-3c89-9be2-48759ce0e569.roa File: 33787d02-8bdd-3c89-9be2-48759ce0e569.roa (raw, json) Hash identifier: Q7tIk87a/1Pjmy3cryuZu8Q/drFJysatPuf9JPzxTFg= Subject key identifier: 8E:9A:E9:09:8B:75:B2:07:D0:49:FB:8A:48:AE:35:26:E5:C8:CA:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC50D0B11E6CED989247720 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33787d02-8bdd-3c89-9be2-48759ce0e569.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.188.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:0d:0b:11:e6:ce:d9:89:24:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a500c599-a610-4aed-b052-ad1b7c50e5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:80:f5:c5:72:16:6b:da:a1:15:76:2b:ef: ad:6d:9b:83:03:08:d1:b0:a8:f0:9c:20:fd:b5:b5: fd:65:8d:a3:87:7e:fa:04:e5:4d:93:9e:16:69:55: a9:6e:4c:aa:02:e4:b9:15:8c:44:0a:74:17:8c:29: 64:e9:2c:00:e5:47:54:51:98:a8:7e:58:ee:3a:1e: 07:cf:b6:4e:36:f3:52:1f:c8:8d:29:21:87:32:13: 40:77:c7:88:c0:35:15:b0:ec:f4:08:76:66:40:62: 08:66:34:31:54:d4:01:67:eb:26:db:b4:5f:e3:7c: ed:28:5c:41:0b:d8:b0:ae:b5:38:51:b2:e7:d7:f4: b5:31:be:81:11:70:5b:c5:d2:4a:4b:c5:05:4b:51: c9:3c:6f:e5:bd:8c:d5:f3:2a:ae:fc:08:f9:db:34: a0:5f:29:53:66:0f:ee:7a:d7:25:42:88:b2:18:79: 1d:02:22:a4:b7:18:d1:c4:50:24:77:36:b4:55:38: 02:77:b6:56:09:65:f1:3c:33:ec:1e:fe:78:47:d1: 1c:51:d2:e9:d2:e6:01:5b:18:06:3c:b6:49:6f:bd: 64:9b:45:27:7e:85:b1:09:b9:92:da:4c:60:c4:51: d9:63:1d:5e:7c:04:6b:b9:d9:bb:11:13:50:e4:90: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:E9:09:8B:75:B2:07:D0:49:FB:8A:48:AE:35:26:E5:C8:CA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33787d02-8bdd-3c89-9be2-48759ce0e569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e2:b0:18:6d:6d:e4:d3:b4:92:00:36:4b:e9:d2:43:ca:43: 23:a0:0f:5d:8f:ae:47:7b:a9:88:b7:f8:1a:df:85:a2:bc:27: 57:cc:fa:d3:3d:d5:a1:d9:70:29:d9:82:99:ec:89:33:cd:a4: 56:71:70:77:c6:89:84:0c:88:2a:90:36:9b:4f:26:1b:65:67: f3:53:d6:88:e7:ea:12:22:9c:2a:63:9d:a0:5c:43:7d:a9:6d: 1e:00:12:de:f8:cf:f7:c4:ed:2b:27:19:b3:f0:2e:4c:4d:79: 10:25:ba:6d:b1:46:6f:67:4f:82:96:b0:ae:84:07:ca:42:d6: fc:12:0a:b8:76:2a:9c:90:52:1e:a1:62:5d:df:c5:20:90:5a: 6d:27:73:03:e3:23:5e:71:a4:27:ad:e0:2a:fc:a9:d1:f8:a2: a4:3a:5a:70:c7:70:fd:32:ba:8a:1d:2a:df:4f:1c:77:f5:7f: 17:a2:54:61:a6:5b:ba:e8:43:ff:07:de:71:c9:b9:0d:ab:56: ff:90:5e:85:d1:b9:c1:e4:11:99:ae:a0:cd:d3:18:fa:64:c6: 1d:3e:f2:7c:09:dd:9b:b0:44:e4:55:cb:70:74:c7:3a:63:fc: 74:09:95:74:93:65:37:b5:c6:0f:ce:47:52:85:8b:19:41:7b: 0b:83:5b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxQ0LEebO2YkkdyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTUwMGM1OTktYTYxMC00YWVkLWIwNTItYWQxYjdjNTBlNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNGA9cVyFmvaoRV2K++tbZuDAwjRsKjwnCD9 tbX9ZY2jh376BOVNk54WaVWpbkyqAuS5FYxECnQXjClk6SwA5UdUUZiofljuOh4H z7ZONvNSH8iNKSGHMhNAd8eIwDUVsOz0CHZmQGIIZjQxVNQBZ+sm27Rf43ztKFxB C9iwrrU4UbLn1/S1Mb6BEXBbxdJKS8UFS1HJPG/lvYzV8yqu/Aj52zSgXylTZg/u etclQoiyGHkdAiKktxjRxFAkdza0VTgCd7ZWCWXxPDPsHv54R9EcUdLp0uYBWxgG PLZJb71km0UnfoWxCbmS2kxgxFHZYx1efARrudm7ERNQ5JBiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6a6QmLdbIH0En7ikiuNSblyMrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzM3ODdkMDItOGJkZC0z Yzg5LTliZTItNDg3NTljZTBlNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7zUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILisBhtbeTTtJIANkvp0kPKQyOgD12Prkd7qYi3+BrfhaK8J1fM+tM9 1aHZcCnZgpnsiTPNpFZxcHfGiYQMiCqQNptPJhtlZ/NT1ojn6hIinCpjnaBcQ32p bR4AEt74z/fE7SsnGbPwLkxNeRAlum2xRm9nT4KWsK6EB8pC1vwSCrh2KpyQUh6h Yl3fxSCQWm0ncwPjI15xpCet4Cr8qdH4oqQ6WnDHcP0yuoodKt9PHHf1fxeiVGGm W7roQ/8H3nHJuQ2rVv+QXoXRucHkEZmuoM3TGPpkxh0+8nwJ3ZuwRORVy3B0xzpj /HQJlXSTZTe1xg/OR1KFixlBewuDW2g= -----END CERTIFICATE-----Generated at Wed Nov 5 09:14:20 2025 by rpki-client