$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68db919b-bec5-33cc-a483-9d34938a0f80.roa File: 68db919b-bec5-33cc-a483-9d34938a0f80.roa (raw, json) Hash identifier: +apr3OPeMSpjG2/2B2tt03BMCiAEZ6SbbjG/CRlcnZs= Subject key identifier: 08:8F:CF:EE:1A:60:92:00:1D:EA:5F:46:A5:6B:19:49:21:A4:10:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC225CFE2D9609CBF69E640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68db919b-bec5-33cc-a483-9d34938a0f80.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.176.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:25:cf:e2:d9:60:9c:bf:69:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=62b7f5e9-bf41-46a6-9632-27bc1c096bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:d0:40:68:ac:f0:ca:d4:bc:87:89:02:cd: 1d:fb:5a:56:20:8c:87:30:aa:81:dc:77:3f:0a:ec: f6:86:c1:57:a7:5b:2e:51:1c:45:ed:5e:f1:01:60: 4b:8e:43:e0:7b:27:5e:91:7a:c4:26:36:b3:ff:b1: a6:6b:7c:0a:b5:2b:35:f7:13:3a:8b:e6:cf:85:6d: 40:5a:40:a3:db:d2:37:95:8f:18:79:af:3a:2b:1c: 3a:13:eb:4a:7f:c7:a6:ca:99:d7:e7:63:74:15:ab: 54:e6:d4:80:a4:d8:64:88:a1:15:87:59:e0:af:46: 8f:02:ff:07:16:6e:de:c6:3c:43:5c:9b:e9:3c:fe: de:81:7d:b7:28:2b:16:86:56:74:8a:7e:2e:22:84: 56:a8:cf:73:6d:d1:96:49:29:20:b3:1f:28:8f:70: 8c:cb:45:5f:41:e2:a5:d7:85:76:ea:ed:a6:27:d9: e4:00:69:e6:30:58:15:f3:d2:50:8e:44:4f:ea:55: 11:fc:74:fd:e3:c3:fe:20:7f:b8:dd:05:04:02:ad: 9d:0e:75:00:2d:21:ce:25:87:16:6b:4a:50:8f:47: e5:80:8c:f9:11:20:da:aa:14:e2:be:c4:81:01:bf: 31:21:17:48:d8:39:e1:d9:1e:af:68:39:b5:6f:31: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8F:CF:EE:1A:60:92:00:1D:EA:5F:46:A5:6B:19:49:21:A4:10:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68db919b-bec5-33cc-a483-9d34938a0f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:49:48:39:b3:c0:8f:44:04:9a:ac:77:d0:78:86:e2:76:f2: 9f:24:f0:88:c0:6d:73:d3:6e:f2:d5:c9:3d:25:1b:2c:36:f5: 78:85:26:d4:05:36:1e:0d:ff:4e:db:70:0a:76:5f:d4:38:d9: 74:19:bb:0b:ee:ba:04:70:00:46:c7:cf:5b:1e:50:b5:3f:ec: 16:cf:a1:c4:44:9f:4f:7e:f6:8f:17:a3:09:86:4e:e0:e6:0b: b1:f1:a3:90:ce:75:37:2a:bd:9c:a2:32:6e:1d:c8:8c:ab:04: 24:42:eb:2a:e4:e8:7f:be:95:7d:b4:54:f9:1a:a8:b7:81:1f: e1:c1:b5:c4:03:ca:2b:61:1b:f5:fc:09:0f:47:9a:75:c0:8d: 72:cc:19:b6:5a:d3:54:27:3a:54:c4:72:0b:bd:8e:0c:49:d9: 2d:36:a1:05:79:21:62:ce:90:d4:02:31:50:32:d1:ff:a2:93: 15:b7:c6:1c:ed:41:35:c1:9f:a0:8c:a5:38:80:e4:ee:6e:18: 43:1f:ff:4e:95:0d:99:3c:a2:4b:88:23:5f:92:30:71:49:8b: b6:73:f0:00:4e:24:9e:a1:ea:7b:74:6d:ec:cf:1f:c4:5a:c6: e0:80:43:19:2d:f6:52:40:de:3b:96:2b:0a:b3:6d:c9:a7:56: 88:f4:98:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswiXP4tlgnL9p5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjJiN2Y1ZTktYmY0MS00NmE2LTk2MzItMjdiYzFjMDk2YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+fQQGis8MrUvIeJAs0d+1pWIIyHMKqB3Hc/ Cuz2hsFXp1suURxF7V7xAWBLjkPgeydekXrEJjaz/7Gma3wKtSs19xM6i+bPhW1A WkCj29I3lY8Yea86Kxw6E+tKf8emypnX52N0FatU5tSApNhkiKEVh1ngr0aPAv8H Fm7exjxDXJvpPP7egX23KCsWhlZ0in4uIoRWqM9zbdGWSSkgsx8oj3CMy0VfQeKl 14V26u2mJ9nkAGnmMFgV89JQjkRP6lUR/HT948P+IH+43QUEAq2dDnUALSHOJYcW a0pQj0flgIz5ESDaqhTivsSBAb8xIRdI2Dnh2R6vaDm1bzGypwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiPz+4aYJIAHepfRqVrGUkhpBCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhkYjkxOWItYmVjNS0z M2NjLWE0ODMtOWQzNDkzOGEwZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7DUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpJSDmzwI9EBJqsd9B4huJ28p8k8IjAbXPTbvLVyT0lGyw29XiFJtQF Nh4N/07bcAp2X9Q42XQZuwvuugRwAEbHz1seULU/7BbPocREn09+9o8XowmGTuDm C7Hxo5DOdTcqvZyiMm4dyIyrBCRC6yrk6H++lX20VPkaqLeBH+HBtcQDyithG/X8 CQ9HmnXAjXLMGbZa01QnOlTEcgu9jgxJ2S02oQV5IWLOkNQCMVAy0f+ikxW3xhzt QTXBn6CMpTiA5O5uGEMf/06VDZk8okuII1+SMHFJi7Zz8ABOJJ6h6nt0bezPH8Ra xuCAQxkt9lJA3juWKwqzbcmnVoj0mGE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:03 2025 by rpki-client