$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96fc65f6-25e2-32e4-8ca6-5439fae95641.roa File: 96fc65f6-25e2-32e4-8ca6-5439fae95641.roa (raw, json) Hash identifier: YYr9Z4/icDwRSIVHwiZ4Ai2n7BFpQWuQCXSM+iM3f48= Subject key identifier: 3F:1E:41:5A:BA:B8:A4:4D:C3:E4:45:29:CC:1E:14:5D:46:D2:41:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC42DCC172FC8399DB4A680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96fc65f6-25e2-32e4-8ca6-5439fae95641.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 67.165.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:2d:cc:17:2f:c8:39:9d:b4:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=12568dff-c66c-4e6b-a5b5-d4c94d35b518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:aa:ed:ab:2a:7e:ee:24:c4:11:d8:6a:cb:83: ab:68:ba:ca:50:0a:53:ef:87:01:1b:c5:4a:6f:b0: 9a:05:e0:4f:97:15:5d:74:66:6e:87:7a:4c:32:d4: f2:91:bc:74:ac:7d:a7:90:2a:79:98:e5:c6:c0:ac: a8:ce:11:fb:d6:d3:cc:3e:44:a4:d5:90:1b:f8:3b: 83:47:78:88:8d:5a:79:b9:14:e6:9e:52:f1:fe:5d: 11:b5:a7:ff:5d:f5:99:07:0f:08:b4:a5:43:32:61: 36:8e:02:77:42:6b:17:49:9c:c3:9b:ce:d4:7e:05: de:5c:26:60:10:59:bc:50:03:fa:24:fd:49:97:dc: dc:a5:7a:fa:ee:7c:d3:c0:2f:72:77:ea:76:49:0a: e0:20:14:5e:49:a5:2f:1f:e4:17:f1:53:b3:f0:b4: 18:3d:2e:4e:bc:69:42:ad:75:f0:07:6e:86:6f:86: d0:bc:92:80:bb:37:e6:18:d8:48:6a:aa:b6:17:e8: 24:65:6c:81:38:50:a0:8f:c9:84:ba:7c:98:63:2c: 4a:7d:d0:79:9d:b5:48:ff:35:c5:58:2f:87:9d:0e: b2:90:7f:5d:23:de:97:b8:dd:df:55:86:e8:a7:09: f1:cc:8a:ac:44:b9:c4:de:cc:3c:46:36:8a:e9:0d: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1E:41:5A:BA:B8:A4:4D:C3:E4:45:29:CC:1E:14:5D:46:D2:41:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96fc65f6-25e2-32e4-8ca6-5439fae95641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.165.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b3:d8:e9:50:c0:a3:0e:2b:6f:05:d0:a3:55:47:4e:cf:28: 45:56:49:35:18:df:76:32:19:b0:73:ee:57:74:ef:5c:16:9b: 3a:a1:29:29:6c:bb:22:63:27:a0:47:f3:e3:ce:e4:ae:c4:53: 68:88:1f:a6:c8:23:c5:07:c1:7c:b6:33:46:29:79:0b:7d:77: b0:1c:dd:d1:39:fc:cc:b4:17:a9:7a:5b:fa:fc:1a:c5:ee:99: df:c7:7b:d6:42:76:6b:41:cc:7f:58:bb:f0:6d:dc:a2:62:f7: 0a:a4:0e:a3:36:53:9a:04:5f:17:98:12:6c:c9:0f:8f:bd:aa: 7d:66:25:32:67:2b:25:f0:3b:c9:b8:26:a0:0b:c7:3d:97:21: b2:00:8a:a0:ea:b7:93:eb:30:63:97:07:8e:30:41:09:73:28: a2:22:a1:71:c0:0c:10:28:9c:75:43:c7:54:af:7d:70:06:24: a2:da:c3:dc:6c:39:04:6b:6d:2b:ac:10:cd:e0:05:a1:9e:4e: 92:9d:64:87:8a:86:87:5d:97:ec:7f:42:7e:a1:6b:22:a6:c2: c4:81:fe:3c:a6:d7:8f:4e:60:76:1f:d8:d0:3b:00:c7:ba:ea: 76:2e:dc:06:96:06:f9:98:91:14:5e:51:b5:55:56:2a:1b:da: f4:f9:a9:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxC3MFy/IOZ20poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTI1NjhkZmYtYzY2Yy00ZTZiLWE1YjUtZDRjOTRkMzViNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgartqyp+7iTEEdhqy4OraLrKUApT74cBG8VK b7CaBeBPlxVddGZuh3pMMtTykbx0rH2nkCp5mOXGwKyozhH71tPMPkSk1ZAb+DuD R3iIjVp5uRTmnlLx/l0Rtaf/XfWZBw8ItKVDMmE2jgJ3QmsXSZzDm87UfgXeXCZg EFm8UAP6JP1Jl9zcpXr67nzTwC9yd+p2SQrgIBReSaUvH+QX8VOz8LQYPS5OvGlC rXXwB26Gb4bQvJKAuzfmGNhIaqq2F+gkZWyBOFCgj8mEunyYYyxKfdB5nbVI/zXF WC+HnQ6ykH9dI96XuN3fVYbopwnxzIqsRLnE3sw8RjaK6Q11YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8eQVq6uKRNw+RFKcweFF1G0kE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTZmYzY1ZjYtMjVlMi0z MmU0LThjYTYtNTQzOWZhZTk1NjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6WQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImz2OlQwKMOK28F0KNVR07PKEVWSTUY33YyGbBz7ld071wWmzqhKSls uyJjJ6BH8+PO5K7EU2iIH6bII8UHwXy2M0YpeQt9d7Ac3dE5/My0F6l6W/r8GsXu md/He9ZCdmtBzH9Yu/Bt3KJi9wqkDqM2U5oEXxeYEmzJD4+9qn1mJTJnKyXwO8m4 JqALxz2XIbIAiqDqt5PrMGOXB44wQQlzKKIioXHADBAonHVDx1SvfXAGJKLaw9xs OQRrbSusEM3gBaGeTpKdZIeKhoddl+x/Qn6hayKmwsSB/jym149OYHYf2NA7AMe6 6nYu3AaWBvmYkRReUbVVViob2vT5qes= -----END CERTIFICATE-----Generated at Tue Nov 4 23:18:02 2025 by rpki-client