$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e669b4c-2bac-3f08-b493-eecf940983f8.roa File: 7e669b4c-2bac-3f08-b493-eecf940983f8.roa (raw, json) Hash identifier: IvYUNkAz9N9RVUNtl8kEG0QZWIYC8hMvmxuSkf6itqU= Subject key identifier: 52:96:85:9E:F2:C5:B1:1E:8E:08:9F:73:9B:33:DD:79:0B:9B:54:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A814D78F623A635E25D13C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e669b4c-2bac-3f08-b493-eecf940983f8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 67.189.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:14:d7:8f:62:3a:63:5e:25:d1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a8e647a4-1559-48bb-aa88-334f925f558e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:6b:88:66:38:4b:b9:8d:13:28:0c:d4:8c: 15:b5:a5:bf:b7:61:9f:9f:b4:38:a3:00:07:91:2a: 81:13:03:97:64:7e:6b:1c:46:8e:ba:f0:ba:70:51: 03:91:38:d8:67:b9:2b:b3:a4:19:54:65:16:fd:6f: 95:0f:b1:b2:69:70:f6:3d:d0:3a:8d:3b:33:34:ea: 4a:1d:f2:43:86:b1:38:4e:96:9b:c5:a1:bc:dc:56: 40:6e:96:d3:a6:fc:3c:4f:84:1a:e0:04:a7:9b:d2: bb:dc:fd:fe:21:ac:48:bf:df:03:4a:56:90:79:dd: 04:2e:4d:37:3b:af:63:83:61:26:a8:49:ca:ba:a3: fe:23:8f:66:05:94:e0:81:0f:ec:71:ef:96:c4:c3: f0:4d:ee:70:ef:64:51:43:12:07:4c:b8:f5:04:71: 93:0f:52:df:a7:f4:97:27:f3:1d:28:02:4f:03:a6: 82:41:ca:1b:f8:11:83:30:88:7d:01:9a:b1:c9:e0: 57:eb:38:27:5e:dc:ae:ff:57:13:1e:fb:e2:d0:ab: a8:ac:6d:04:4e:10:d5:a7:34:7c:49:30:1d:ba:ca: d6:a6:52:99:70:c5:32:e4:ef:55:43:e3:ef:b6:4a: 94:45:6c:2a:8b:d8:e0:80:66:16:9b:40:96:26:b9: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:85:9E:F2:C5:B1:1E:8E:08:9F:73:9B:33:DD:79:0B:9B:54:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e669b4c-2bac-3f08-b493-eecf940983f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c8:28:5a:66:26:b9:03:c8:91:85:2e:5d:e9:94:c2:30:94: 6a:e8:17:71:fa:15:3c:f1:6e:96:ed:53:52:f5:7d:95:49:8f: b5:0e:38:c8:fb:62:39:3d:55:ca:f1:47:93:65:71:fc:70:db: de:84:39:d5:1e:89:09:4b:91:bb:c6:a7:63:60:38:64:26:40: 52:a5:42:d1:40:86:8a:2c:20:20:a2:a6:42:6d:26:18:33:08: 5d:cd:34:a0:23:d6:da:70:47:9e:c9:01:e0:a7:29:ae:37:a4: 69:03:d8:8f:31:63:56:81:00:c3:3b:de:30:c3:dd:7f:d9:2a: 67:a9:8c:1d:07:6c:dd:09:30:1d:d1:44:a9:e4:b8:dc:99:50: 8e:bd:71:fd:3f:e0:1f:c3:e8:63:49:5d:89:42:bc:6d:b3:11: 0e:48:88:16:34:4e:e8:b0:1c:6c:71:50:38:7f:30:b5:44:60: 22:d2:b3:2d:88:6b:ed:5b:4d:84:f3:3b:b6:3b:5c:e1:47:53: 45:03:6f:ae:f0:85:2c:3d:a2:02:88:76:d8:1b:bb:1e:95:9d: 40:62:c3:f5:0f:27:66:66:71:7f:18:0b:5c:71:a5:a1:03:1a: 8b:42:f2:e9:26:9e:ab:97:26:f4:06:b5:f2:30:ce:74:db:8a: f7:6d:59:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqBTXj2I6Y14l0TwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YThlNjQ3YTQtMTU1OS00OGJiLWFhODgtMzM0ZjkyNWY1NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglVriGY4S7mNEygM1IwVtaW/t2Gfn7Q4owAH kSqBEwOXZH5rHEaOuvC6cFEDkTjYZ7krs6QZVGUW/W+VD7GyaXD2PdA6jTszNOpK HfJDhrE4TpabxaG83FZAbpbTpvw8T4Qa4ASnm9K73P3+IaxIv98DSlaQed0ELk03 O69jg2EmqEnKuqP+I49mBZTggQ/sce+WxMPwTe5w72RRQxIHTLj1BHGTD1Lfp/SX J/MdKAJPA6aCQcob+BGDMIh9AZqxyeBX6zgnXtyu/1cTHvvi0KuorG0EThDVpzR8 STAdusrWplKZcMUy5O9VQ+PvtkqURWwqi9jggGYWm0CWJrm6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKWhZ7yxbEejgifc5sz3XkLm1TQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U2NjliNGMtMmJhYy0z ZjA4LWI0OTMtZWVjZjk0MDk4M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ728MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzIKFpmJrkDyJGFLl3plMIwlGroF3H6FTzxbpbtU1L1fZVJj7UOOMj7 Yjk9VcrxR5Nlcfxw296EOdUeiQlLkbvGp2NgOGQmQFKlQtFAhoosICCipkJtJhgz CF3NNKAj1tpwR57JAeCnKa43pGkD2I8xY1aBAMM73jDD3X/ZKmepjB0HbN0JMB3R RKnkuNyZUI69cf0/4B/D6GNJXYlCvG2zEQ5IiBY0TuiwHGxxUDh/MLVEYCLSsy2I a+1bTYTzO7Y7XOFHU0UDb67whSw9ogKIdtgbux6VnUBiw/UPJ2ZmcX8YC1xxpaED GotC8ukmnquXJvQGtfIwznTbivdtWcc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:10:05 2025 by rpki-client