$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f88bc69-0451-37b7-92a4-23dd4863d68e.roa File: 7f88bc69-0451-37b7-92a4-23dd4863d68e.roa (raw, json) Hash identifier: MUfdJjNfp6AWA7hhh3xLygUuuUif3YzaXtsBGzUe1/w= Subject key identifier: F4:E5:32:1D:4E:35:31:F2:48:90:15:64:FE:FA:85:04:09:85:87:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED51B9FF3F1E1A645B0000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f88bc69-0451-37b7-92a4-23dd4863d68e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 67.171.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:51:b9:ff:3f:1e:1a:64:5b:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=af1f72cc-9e27-4129-9b08-5624d6cf9dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:f4:04:2a:72:e3:ba:11:e7:67:01:46:00: 42:24:b9:1d:40:84:e9:53:63:29:70:cf:57:0a:f0: 99:26:d5:39:38:65:55:b0:cd:10:71:e8:03:ec:32: 9c:fb:92:a3:b8:1c:d6:84:b7:08:58:e1:9f:cb:c0: d1:3d:7f:2e:21:11:b9:fa:4a:1b:b2:7f:8f:fb:02: 07:da:53:fd:48:03:ca:e0:43:54:a8:0c:20:a7:6a: 49:b4:21:49:dd:05:71:0e:45:87:e5:5f:ab:63:50: dd:84:5a:c4:eb:ef:1c:f2:99:69:dd:76:b1:e8:43: 64:34:29:f8:c0:27:7a:8a:33:9f:67:34:20:5e:a3: b1:35:e0:44:87:53:ad:f8:a3:5f:80:2f:63:d6:19: 93:7f:4c:49:35:f5:67:9b:4e:86:ac:ee:47:01:36: 37:fd:07:51:a3:7a:81:09:5f:6c:9a:0c:96:2d:2b: ad:a2:dc:44:f4:6c:51:e3:9f:7e:60:2b:2a:82:e5: 9a:4b:00:2c:6c:0c:f0:1f:2a:d7:24:1f:91:80:93: 1e:ef:9d:80:af:2f:db:35:7e:a9:b6:3c:f2:74:6b: dd:f1:7e:8d:3b:2d:1c:36:36:2a:ea:26:27:ac:11: c2:7a:42:df:94:c1:b3:5b:b7:3a:98:e7:32:a5:2f: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E5:32:1D:4E:35:31:F2:48:90:15:64:FE:FA:85:04:09:85:87:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f88bc69-0451-37b7-92a4-23dd4863d68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d0:91:e2:fe:4c:2e:17:94:9e:e2:e2:bc:57:c1:48:4f:f3: d2:aa:88:72:bc:bd:ea:55:da:41:5f:7e:60:69:ac:8e:3d:b3: 17:5b:14:2e:78:15:fa:0b:c3:02:b5:28:51:67:19:14:da:6a: a4:b3:e5:20:a0:87:76:d6:a9:c2:50:20:55:8b:a4:da:72:04: 3e:5b:58:59:4d:e5:74:34:c8:b4:03:b0:07:7a:a4:0d:09:8f: 08:3b:e0:4a:0b:22:10:4b:ea:5f:a6:e0:2f:b0:52:e6:8f:1f: f6:d9:a4:70:ff:32:c5:e4:66:c3:98:8d:5c:07:c2:a1:4d:c9: 74:c6:d8:c9:0d:85:9b:0a:4f:ef:9b:ca:c1:b5:1a:72:f8:94: fa:1b:a4:f3:1b:8f:7b:51:97:46:90:67:d0:dc:f6:1a:b9:a3: e0:2d:9f:23:0a:46:64:18:b1:89:dd:d5:17:2f:d4:f6:14:29: 58:aa:71:56:49:58:d7:19:f2:46:dd:b6:2e:a8:fc:2c:16:25: e2:ca:5d:17:ae:53:34:aa:62:43:17:be:cd:fe:bb:72:be:69: 93:ec:f9:5b:08:60:1b:03:28:95:90:c4:52:9a:74:a7:dd:df: e9:db:2e:5b:58:b8:7d:1b:fd:fa:1a:fa:8d:f0:79:1d:76:7a: 8a:e4:d1:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07VG5/z8eGmRbAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWYxZjcyY2MtOWUyNy00MTI5LTliMDgtNTYyNGQ2Y2Y5ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq70BCpy47oR52cBRgBCJLkdQITpU2MpcM9X CvCZJtU5OGVVsM0QcegD7DKc+5KjuBzWhLcIWOGfy8DRPX8uIRG5+kobsn+P+wIH 2lP9SAPK4ENUqAwgp2pJtCFJ3QVxDkWH5V+rY1DdhFrE6+8c8plp3Xax6ENkNCn4 wCd6ijOfZzQgXqOxNeBEh1Ot+KNfgC9j1hmTf0xJNfVnm06GrO5HATY3/QdRo3qB CV9smgyWLSutotxE9GxR459+YCsqguWaSwAsbAzwHyrXJB+RgJMe752Ary/bNX6p tjzydGvd8X6NOy0cNjYq6iYnrBHCekLflMGzW7c6mOcypS99xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTlMh1ONTHySJAVZP76hQQJhYfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Y4OGJjNjktMDQ1MS0z N2I3LTkyYTQtMjNkZDQ4NjNkNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjQkeL+TC4XlJ7i4rxXwUhP89KqiHK8vepV2kFffmBprI49sxdbFC54 FfoLwwK1KFFnGRTaaqSz5SCgh3bWqcJQIFWLpNpyBD5bWFlN5XQ0yLQDsAd6pA0J jwg74EoLIhBL6l+m4C+wUuaPH/bZpHD/MsXkZsOYjVwHwqFNyXTG2MkNhZsKT++b ysG1GnL4lPobpPMbj3tRl0aQZ9Dc9hq5o+AtnyMKRmQYsYnd1Rcv1PYUKViqcVZJ WNcZ8kbdti6o/CwWJeLKXReuUzSqYkMXvs3+u3K+aZPs+VsIYBsDKJWQxFKadKfd 3+nbLltYuH0b/foa+o3weR12eork0Xs= -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:59 2025 by rpki-client