$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ecfccf-0fd3-30aa-832b-a8935f8d893c.roa File: 42ecfccf-0fd3-30aa-832b-a8935f8d893c.roa (raw, json) Hash identifier: bomjpKXRfWjeU8zJQndnOm54gFPCV1VcUbmvvf2lP90= Subject key identifier: F6:46:03:38:F8:9D:AF:C6:8B:05:58:A1:E7:D3:D3:E3:14:A8:B5:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3DF680420AD980C178460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ecfccf-0fd3-30aa-832b-a8935f8d893c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 69.253.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:df:68:04:20:ad:98:0c:17:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=240b9766-9e74-467f-b98c-a3a9436b4562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:5f:ba:27:59:80:5f:2f:b7:f6:db:a2:01: e3:20:27:f8:b7:3b:4d:ee:9f:f4:01:6b:c6:21:00: b7:d3:36:87:5e:43:e6:0e:d5:6f:01:c5:b6:a1:2d: d1:50:7f:88:f5:71:c6:28:f0:69:10:12:dd:7a:e6: c4:b1:57:72:40:5b:44:b1:59:7a:f6:d9:ca:56:a9: 8b:ca:ee:c3:9c:cc:e5:a2:f2:30:91:35:c6:d4:e3: d5:5f:da:64:10:b6:65:50:97:11:15:43:a8:6a:da: 5e:f7:ae:5a:49:30:46:a5:43:2e:1a:64:0b:53:2f: f8:1c:bb:60:03:c3:21:00:ed:aa:93:50:01:ab:ba: f7:9f:09:f1:96:74:e8:09:d8:72:18:c2:c3:05:11: 86:1f:cb:0d:76:bb:04:24:99:62:55:dc:d0:1c:1c: 75:dd:e9:00:19:ea:9d:9c:cc:5e:ac:fd:7a:42:10: 2d:19:6a:31:ba:65:ea:74:cd:61:ae:69:6b:ea:1f: 2a:31:53:fb:55:c7:a1:4c:c7:8e:b3:e1:57:6f:f2: 65:d6:be:97:0e:29:ef:36:57:4f:e8:fd:ca:7f:67: 10:eb:60:09:e5:d0:c1:51:dd:8f:0f:5a:5e:ed:64: ff:ca:08:a2:5d:65:91:18:fa:68:99:dc:70:48:b0: f9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:46:03:38:F8:9D:AF:C6:8B:05:58:A1:E7:D3:D3:E3:14:A8:B5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ecfccf-0fd3-30aa-832b-a8935f8d893c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bc:4e:29:cd:b2:3d:bc:07:2b:02:49:69:8a:2c:24:d0:ba: f5:10:c1:58:80:49:8f:bf:86:7e:00:22:2d:8f:30:ce:8b:77: 9e:ec:b6:03:03:85:e7:58:98:bd:72:6a:36:d8:bd:55:64:c9: 45:97:1c:9b:2d:e8:22:9d:d3:32:d5:c1:22:5c:8c:f4:f2:fd: dd:88:bc:c4:87:f7:0d:82:7e:b5:90:c9:28:d2:87:0a:92:23: 1f:60:4a:a1:da:45:15:be:a5:0a:a1:61:fe:9b:37:8a:20:1b: d1:dd:a1:2b:1b:62:16:de:dc:ec:a0:63:5c:34:1c:a3:1a:1a: c2:d7:42:ea:b9:71:10:28:62:5d:8b:93:06:7c:fa:4d:65:85: c4:69:d3:9f:9f:a4:67:b3:f2:7c:7f:b0:5d:f4:3d:67:9c:bf: 78:85:35:be:56:82:8a:ec:7d:2d:e9:30:4e:2a:bd:80:a9:d3: bc:f5:fd:c2:9d:7b:8c:ca:13:72:ec:d6:a1:31:bc:43:37:5b: 3e:a4:19:a2:c4:a4:ce:02:9e:85:c1:0b:2f:98:20:a9:02:dd: 25:36:eb:3b:37:39:d4:4d:30:06:53:c9:e3:aa:a8:c9:bc:4f: db:ea:b0:95:c5:4c:3c:69:a0:ff:e0:7e:78:81:ba:2a:a3:28: 6c:e1:5c:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw99oBCCtmAwXhGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjQwYjk3NjYtOWU3NC00NjdmLWI5OGMtYTNhOTQzNmI0NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwANfuidZgF8vt/bbogHjICf4tztN7p/0AWvG IQC30zaHXkPmDtVvAcW2oS3RUH+I9XHGKPBpEBLdeubEsVdyQFtEsVl69tnKVqmL yu7DnMzlovIwkTXG1OPVX9pkELZlUJcRFUOoatpe965aSTBGpUMuGmQLUy/4HLtg A8MhAO2qk1ABq7r3nwnxlnToCdhyGMLDBRGGH8sNdrsEJJliVdzQHBx13ekAGeqd nMxerP16QhAtGWoxumXqdM1hrmlr6h8qMVP7VcehTMeOs+FXb/Jl1r6XDinvNldP 6P3Kf2cQ62AJ5dDBUd2PD1pe7WT/ygiiXWWRGPpomdxwSLD56QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZGAzj4na/GiwVYoefT0+MUqLVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJlY2ZjY2YtMGZkMy0z MGFhLTgzMmItYTg5MzVmOGQ4OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARf3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu8TinNsj28BysCSWmKLCTQuvUQwViASY+/hn4AIi2PMM6Ld57stgMD hedYmL1yajbYvVVkyUWXHJst6CKd0zLVwSJcjPTy/d2IvMSH9w2CfrWQySjShwqS Ix9gSqHaRRW+pQqhYf6bN4ogG9HdoSsbYhbe3OygY1w0HKMaGsLXQuq5cRAoYl2L kwZ8+k1lhcRp05+fpGez8nx/sF30PWecv3iFNb5WgorsfS3pME4qvYCp07z1/cKd e4zKE3Ls1qExvEM3Wz6kGaLEpM4CnoXBCy+YIKkC3SU26zs3OdRNMAZTyeOqqMm8 T9vqsJXFTDxpoP/gfniBuiqjKGzhXFU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:52:51 2025 by rpki-client