$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2cf3d8-5e55-3e7d-9e33-b09f712c2f63.roa File: 5d2cf3d8-5e55-3e7d-9e33-b09f712c2f63.roa (raw, json) Hash identifier: YZfNZa3Xlh5qXrogqQcfqc/JaretMgGjbj5qoFRRSNE= Subject key identifier: 9E:B4:40:D6:FA:51:52:70:FB:C2:74:06:C1:81:CD:9C:C2:F1:A7:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5086D4F3BDC75B9854980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2cf3d8-5e55-3e7d-9e33-b09f712c2f63.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.169.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:08:6d:4f:3b:dc:75:b9:85:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c8d77f8c-56f6-467d-a21c-787922743662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:d7:20:43:28:e2:45:b1:f5:4c:44:4c:56: e0:05:d4:44:8f:8c:e0:c7:83:30:ac:57:ad:35:36: bd:dd:65:e8:79:78:2f:26:7c:2f:a4:30:60:ad:23: 8b:8c:f1:55:65:72:b6:26:fa:f3:9d:b7:48:7c:43: 93:6a:04:30:96:d2:fa:8c:cf:98:86:a6:a2:0b:27: e1:49:31:ac:41:ba:b5:e9:18:ad:4e:ae:2c:5d:2f: a8:f0:da:28:3e:0f:58:74:04:cf:69:dd:5d:9f:5b: cb:be:a2:49:50:02:94:55:f2:82:00:33:21:f0:a1: 34:30:2b:91:9b:db:d6:51:60:3a:91:20:f7:24:02: c6:a4:a3:20:f9:5a:07:ea:16:85:8f:73:7c:7b:12: 7c:3e:51:3a:0b:c6:72:c3:ce:85:44:04:fd:a8:22: f1:a7:91:99:cd:5a:6b:49:88:02:9e:90:5f:b3:00: c8:f6:69:e5:4e:d7:1e:ed:f7:92:43:6f:5c:01:47: f6:63:d3:87:35:00:c4:55:39:9f:99:41:ef:d7:a3: 58:f8:9d:3b:5c:7c:7d:10:a4:ca:20:cd:4d:11:90: 62:b5:e9:50:13:09:4d:74:66:0d:2a:56:55:22:d5: 8e:b7:51:0c:e4:23:73:dd:53:2e:c7:2f:5a:e6:25: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B4:40:D6:FA:51:52:70:FB:C2:74:06:C1:81:CD:9C:C2:F1:A7:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2cf3d8-5e55-3e7d-9e33-b09f712c2f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a1:10:6d:ec:7c:c1:cd:d7:bc:15:29:31:8c:19:b2:8f:2f: 7e:39:c8:f0:b9:58:a9:d9:b3:8e:e2:cd:f4:6d:d0:ca:65:ca: 6a:00:a1:6c:ff:64:0a:06:ef:ce:4b:d8:17:4a:f8:ca:47:e1: 3a:e7:03:38:b1:93:b9:78:ce:5d:48:5c:28:ab:2c:d1:04:a5: fc:3f:81:f2:08:b0:08:7d:8e:20:44:0b:9e:63:66:f6:c3:b2: ec:3d:e2:0e:29:78:05:aa:d7:d0:81:c5:12:6e:d8:31:96:f6: 84:98:83:ff:aa:bd:0d:10:ba:87:62:b0:a8:29:94:39:5a:ed: d9:bd:4a:92:f8:29:d4:22:09:d3:21:ce:39:46:d6:e0:41:38: 52:f3:73:a9:f8:47:6d:a7:81:15:c3:b6:37:2b:0c:35:fd:3a: 9a:6a:d0:e8:2b:97:f4:b8:07:c9:af:c8:63:95:d2:5f:0e:fe: 74:a4:87:85:46:84:3e:0a:a7:db:22:39:b9:71:f6:6d:bc:48: d3:60:d8:bc:d1:94:91:0a:5a:00:93:1d:aa:35:e4:fc:c0:0a: fd:cc:ce:b5:34:39:8d:a8:15:00:6e:e7:87:d8:19:b6:1c:09: 44:cf:cc:69:6e:0a:58:bf:68:ca:87:fc:db:6f:23:cb:de:1e: 03:ea:82:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxQhtTzvcdbmFSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzhkNzdmOGMtNTZmNi00NjdkLWEyMWMtNzg3OTIyNzQzNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhnXIEMo4kWx9UxETFbgBdREj4zgx4MwrFet NTa93WXoeXgvJnwvpDBgrSOLjPFVZXK2JvrznbdIfEOTagQwltL6jM+YhqaiCyfh STGsQbq16RitTq4sXS+o8NooPg9YdATPad1dn1vLvqJJUAKUVfKCADMh8KE0MCuR m9vWUWA6kSD3JALGpKMg+VoH6haFj3N8exJ8PlE6C8Zyw86FRAT9qCLxp5GZzVpr SYgCnpBfswDI9mnlTtce7feSQ29cAUf2Y9OHNQDEVTmfmUHv16NY+J07XHx9EKTK IM1NEZBitelQEwlNdGYNKlZVItWOt1EM5CNz3VMuxy9a5iWk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ60QNb6UVJw+8J0BsGBzZzC8aeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQyY2YzZDgtNWU1NS0z ZTdkLTllMzMtYjA5ZjcxMmMyZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6mgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFChEG3sfMHN17wVKTGMGbKPL345yPC5WKnZs47izfRt0MplymoAoWz/ ZAoG785L2BdK+MpH4TrnAzixk7l4zl1IXCirLNEEpfw/gfIIsAh9jiBEC55jZvbD suw94g4peAWq19CBxRJu2DGW9oSYg/+qvQ0QuodisKgplDla7dm9SpL4KdQiCdMh zjlG1uBBOFLzc6n4R22ngRXDtjcrDDX9Oppq0Ogrl/S4B8mvyGOV0l8O/nSkh4VG hD4Kp9siOblx9m28SNNg2LzRlJEKWgCTHao15PzACv3MzrU0OY2oFQBu54fYGbYc CUTPzGluCli/aMqH/NtvI8veHgPqgsI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:17:05 2025 by rpki-client