$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa File: 35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa (raw, json) Hash identifier: RlERjpViHYoEtzQacRx+v4XatcrxfedByMIjdD8daZw= Subject key identifier: 58:2D:81:0E:72:51:F8:78:BE:E4:62:16:79:CD:26:3D:7B:78:02:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB91E21ECAC05E31050100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 67.171.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:91:e2:1e:ca:c0:5e:31:05:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=dfdcbb9b-1dfd-488f-9448-012fd311bcec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:33:ed:e6:ad:0c:73:e7:f6:61:e7:b1:21: 37:09:7f:23:5f:53:5c:f2:8b:c5:f2:8e:cf:c7:60: 78:57:90:48:c7:e6:b4:84:fc:ae:93:b9:46:88:0f: 7d:79:2a:00:e7:07:f0:41:ab:19:9f:dc:73:67:0a: 24:c3:9a:fa:c3:95:c4:f0:aa:e8:95:70:c2:84:e3: d4:d5:6b:70:9f:7a:5a:3d:9b:78:fe:a1:17:4c:7e: 6f:b2:5a:71:8b:dd:46:f9:36:7b:81:d1:52:8b:46: 79:8a:d8:6b:c9:01:c9:81:db:b7:53:da:a2:c1:7a: 95:ac:fb:6d:7a:b1:88:c1:b4:3b:9c:49:d1:ca:d0: 66:37:c1:00:d4:4a:82:a7:1c:66:40:9b:ed:6f:90: a9:67:20:65:7f:eb:40:b4:b9:df:da:e4:dc:4a:82: c5:f5:b7:24:51:f1:de:d3:a0:9c:c5:7b:f2:a7:fd: 80:a0:99:75:2c:71:93:ab:4e:8f:01:14:5a:6c:27: 34:65:c9:ae:c7:36:51:d2:fd:8f:f4:24:6a:11:15: 7f:7f:90:ec:12:2c:75:9c:22:a1:c3:77:6c:59:3f: 22:0a:2d:8d:40:8c:d1:0f:1e:6d:19:26:12:4c:57: ef:6f:52:80:f4:98:74:17:4f:48:c3:e0:88:98:37: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2D:81:0E:72:51:F8:78:BE:E4:62:16:79:CD:26:3D:7B:78:02:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:87:f4:55:89:88:5c:b0:35:69:b8:3c:d7:67:24:cf:99:90: 85:1b:27:c0:73:9a:22:03:8f:2f:33:ab:48:89:98:7f:bd:8e: 3a:52:c2:58:d7:d7:f4:4b:85:3e:ad:87:5a:d2:96:3f:03:e7: 5c:00:8b:c8:d8:b9:8b:c1:50:34:c4:a9:10:b7:f2:bc:b4:42: 4d:f7:35:ca:8d:8d:8c:d6:7d:36:49:4f:c2:6f:5a:fe:4d:3d: 0a:0c:9e:51:49:98:b7:7f:04:62:52:7c:49:9e:9e:ef:10:c5: a6:5b:a1:48:53:f8:bd:72:56:fc:e1:77:68:55:2f:21:d0:af: 8f:83:45:7b:0f:72:08:dd:b6:27:ad:65:41:e3:e8:a6:2e:62: c3:6d:ab:88:0f:a1:59:19:99:4a:ea:7c:bf:56:52:68:b3:83: 8c:36:27:95:41:b8:7d:6a:91:78:c2:e2:8f:71:bb:dc:7c:97: c7:95:b4:9b:4c:c6:ee:94:05:9e:39:36:fe:97:95:c0:8a:02: a3:c9:c5:bb:13:2a:b6:38:a9:10:33:9f:5f:51:5b:aa:37:6a: cf:21:cb:98:6e:87:5a:39:40:7c:ea:3c:1c:b1:df:d9:54:f9: c6:53:3c:35:de:89:e9:ca:a9:af:a6:1e:25:c1:3b:18:ae:eb: c2:e0:9d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065HiHsrAXjEFAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGZkY2JiOWItMWRmZC00ODhmLTk0NDgtMDEyZmQzMTFiY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl4z7eatDHPn9mHnsSE3CX8jX1Nc8ovF8o7P x2B4V5BIx+a0hPyuk7lGiA99eSoA5wfwQasZn9xzZwokw5r6w5XE8KrolXDChOPU 1Wtwn3paPZt4/qEXTH5vslpxi91G+TZ7gdFSi0Z5ithryQHJgdu3U9qiwXqVrPtt erGIwbQ7nEnRytBmN8EA1EqCpxxmQJvtb5CpZyBlf+tAtLnf2uTcSoLF9bckUfHe 06CcxXvyp/2AoJl1LHGTq06PARRabCc0ZcmuxzZR0v2P9CRqERV/f5DsEix1nCKh w3dsWT8iCi2NQIzRDx5tGSYSTFfvb1KA9Jh0F09Iw+CImDe5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgtgQ5yUfh4vuRiFnnNJj17eAInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVhMGJhN2QtYWY2NC0z YWMxLWEzNDEtZjE4ZGUxZWFmMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuH9FWJiFywNWm4PNdnJM+ZkIUbJ8BzmiIDjy8zq0iJmH+9jjpSwljX 1/RLhT6th1rSlj8D51wAi8jYuYvBUDTEqRC38ry0Qk33NcqNjYzWfTZJT8JvWv5N PQoMnlFJmLd/BGJSfEmenu8QxaZboUhT+L1yVvzhd2hVLyHQr4+DRXsPcgjdtiet ZUHj6KYuYsNtq4gPoVkZmUrqfL9WUmizg4w2J5VBuH1qkXjC4o9xu9x8l8eVtJtM xu6UBZ45Nv6XlcCKAqPJxbsTKrY4qRAzn19RW6o3as8hy5huh1o5QHzqPByx39lU +cZTPDXeienKqa+mHiXBOxiu68LgnZI= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:32 2025 by rpki-client