$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa File: 4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa (raw, json) Hash identifier: Uh3VjtY1BnAUvV3CIhikLpCrTennaBULkMoKjXm3Rf0= Subject key identifier: DE:DD:CF:2A:4E:C4:A1:00:5A:45:6A:A2:69:C2:DC:41:91:0F:16:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED50705E2906A62875BAC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 67.170.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:50:70:5e:29:06:a6:28:75:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9e8d28b8-5ad0-4b54-b71b-7a61ce04bc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:19:8d:2c:0f:a0:fb:4a:12:49:f0:72:2b: 7b:3a:ee:c5:7d:70:54:28:d0:62:bb:03:46:16:d5: e2:18:ef:9e:a8:ff:28:92:d0:4e:36:dd:ad:86:a4: 5e:79:52:55:9c:56:c9:a8:34:5c:64:af:3d:d8:28: cd:05:18:53:37:67:e2:b4:bd:9d:56:f9:d8:69:66: bd:83:a7:3d:64:be:0e:71:a3:96:36:71:2d:4d:5c: 36:73:0d:c3:e4:36:e2:90:c5:5c:a7:66:52:e6:5f: 19:ee:f4:fa:3b:99:f8:26:a9:5a:a4:9c:16:0f:08: f3:52:65:88:0b:64:46:4a:38:bc:de:a9:29:4e:de: f6:d1:79:1f:e3:e4:dd:f9:b9:63:ba:d6:34:e2:33: e8:eb:f6:3d:1f:4a:6d:f4:d9:b1:2d:c1:0d:45:97: e7:26:4c:5a:02:1e:ae:be:30:d9:db:fd:c5:a9:18: 5c:b2:fb:96:ba:e8:88:39:6c:96:3b:43:2c:fc:1c: bc:0d:b4:82:a4:12:80:ca:11:c3:cf:57:70:f4:dd: 0a:4f:49:26:e7:68:ae:68:9f:13:af:8f:6e:6b:c3: 32:ad:a3:20:93:ea:f5:ca:b4:0a:eb:99:e1:ff:16: c4:c2:59:61:5f:1f:c5:22:b8:32:3e:61:9f:50:75: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:CF:2A:4E:C4:A1:00:5A:45:6A:A2:69:C2:DC:41:91:0F:16:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2a:97:1c:11:86:c4:83:34:12:4b:50:6d:5a:d7:61:22:84: d9:57:f8:40:b3:27:fb:16:17:9a:f4:a8:81:38:0c:0c:bd:43: f2:f1:3f:fc:06:34:33:3f:d2:ae:f2:76:c4:b5:dd:53:b4:bf: 8a:45:82:b8:67:b1:31:1d:66:1f:5b:24:ca:dd:32:60:93:50: cb:4a:79:e2:e3:e1:7d:30:c8:67:8f:fb:79:89:f7:07:0a:97: af:3a:17:67:51:de:d4:26:99:a7:18:63:ec:f5:96:57:dd:36: f4:3c:57:d1:7e:c8:a7:e3:40:c9:27:2f:73:00:0d:a2:0f:25: c8:38:99:cc:2b:01:15:09:89:7f:60:b9:f1:46:53:7d:d6:fc: 5e:63:1d:91:d1:2c:b0:55:21:d6:15:b7:7d:55:84:90:21:17: eb:fe:d6:19:90:46:bf:38:d9:f5:03:3d:f8:a6:f2:83:c4:89: ba:6c:be:bb:49:b2:0a:1a:9b:50:5a:41:8b:8d:c8:df:b8:5a: 6f:61:74:f3:a5:48:4c:bd:7e:76:cb:35:12:3d:6e:6f:0a:cc: ef:db:b6:af:48:72:e5:f2:fd:18:f2:88:68:ff:b0:11:ff:19: 6f:4a:54:e8:3d:cf:c7:33:9c:82:e4:95:54:3f:ad:63:f2:39: eb:e6:a0:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07VBwXikGpih1usAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWU4ZDI4YjgtNWFkMC00YjU0LWI3MWItN2E2MWNlMDRiYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvAZjSwPoPtKEknwcit7Ou7FfXBUKNBiuwNG FtXiGO+eqP8oktBONt2thqReeVJVnFbJqDRcZK892CjNBRhTN2fitL2dVvnYaWa9 g6c9ZL4OcaOWNnEtTVw2cw3D5DbikMVcp2ZS5l8Z7vT6O5n4JqlapJwWDwjzUmWI C2RGSji83qkpTt720Xkf4+Td+bljutY04jPo6/Y9H0pt9NmxLcENRZfnJkxaAh6u vjDZ2/3FqRhcsvuWuuiIOWyWO0Ms/By8DbSCpBKAyhHDz1dw9N0KT0km52iuaJ8T r49ua8MyraMgk+r1yrQK65nh/xbEwllhXx/FIrgyPmGfUHXTNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7dzypOxKEAWkVqomnC3EGRDxbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGUzZjFlMGMtMDgyZS0z MTQ0LWEzNWUtM2FhNGU4NDcwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYqlxwRhsSDNBJLUG1a12EihNlX+ECzJ/sWF5r0qIE4DAy9Q/LxP/wG NDM/0q7ydsS13VO0v4pFgrhnsTEdZh9bJMrdMmCTUMtKeeLj4X0wyGeP+3mJ9wcK l686F2dR3tQmmacYY+z1llfdNvQ8V9F+yKfjQMknL3MADaIPJcg4mcwrARUJiX9g ufFGU33W/F5jHZHRLLBVIdYVt31VhJAhF+v+1hmQRr842fUDPfim8oPEibpsvrtJ sgoam1BaQYuNyN+4Wm9hdPOlSEy9fnbLNRI9bm8KzO/btq9IcuXy/RjyiGj/sBH/ GW9KVOg9z8cznILklVQ/rWPyOevmoPQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:51 2025 by rpki-client