$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa File: a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa (raw, json) Hash identifier: SR744VwN0YX1CiCK4h2wqlK7XfBjYnlKAOdQwKgRxdI= Subject key identifier: 91:BA:C8:B3:CB:05:F4:A3:90:B9:C3:9E:A0:51:E5:5D:55:FF:02:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC901C0837F57C95F90540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 67.172.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:90:1c:08:37:f5:7c:95:f9:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=33d2ab97-57c9-433e-93ac-73fcf439cbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bb:24:51:d5:b1:e5:4d:0b:6c:7b:da:ab:a9: 5d:39:89:11:29:3a:8f:31:69:13:f8:59:29:c5:25: a7:fd:85:03:9f:c0:54:35:a5:cf:3d:45:3c:96:c1: de:b2:73:3f:d9:cd:fe:26:5b:cc:47:66:64:e1:c9: 93:f0:67:ec:07:61:fe:4f:c8:5c:a0:cb:e9:f1:85: 53:85:8b:46:73:99:ee:aa:0b:79:e3:1a:5d:92:e0: 31:16:c2:03:ef:f2:5e:14:e9:c0:31:31:32:fb:ec: 4e:cc:bf:c6:b2:0d:54:e2:bd:53:be:94:c2:8b:bb: 1c:44:a4:f2:0a:b6:ec:6a:e4:a2:4a:f1:21:72:f6: 63:e2:c0:a8:1b:54:2c:a5:b5:be:79:40:0c:7b:3f: 38:8b:c1:98:50:7e:71:d4:89:2a:56:be:14:1b:66: 96:ac:ad:0a:99:cf:9d:97:0e:88:c2:16:76:bf:9c: ef:b4:e4:c6:86:e2:42:75:17:5a:98:ce:b1:fe:d6: c7:0f:98:31:ea:6f:fc:e9:f1:ea:a8:7f:c0:3b:ed: 68:82:16:9d:8a:09:cb:66:95:49:5f:b1:b5:d1:c8: 88:97:c9:47:ed:7d:c7:48:04:56:cc:de:84:00:2d: 70:61:3b:06:4b:a8:d4:45:1c:1c:c3:c2:0b:e5:33: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BA:C8:B3:CB:05:F4:A3:90:B9:C3:9E:A0:51:E5:5D:55:FF:02:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.172.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:dd:79:b9:36:0f:c6:d8:9a:a7:d8:61:d2:d2:44:05:b8:65: 85:5b:5c:8a:ec:3a:31:dd:f6:ac:51:34:63:1c:03:2d:d1:82: 0f:93:2e:a9:4f:9c:fd:99:91:eb:1c:83:45:34:20:c1:29:93: 6a:9e:d7:c5:fc:bc:f3:9e:25:47:47:61:f5:41:eb:b5:5b:d9: 67:36:c7:2b:14:2e:11:67:d3:3e:71:e3:d2:cb:4f:e9:8c:d7: 9b:cc:78:21:4c:af:35:4f:38:7f:1f:14:07:a3:c6:64:fd:3a: 20:48:18:f9:d1:96:39:fb:ea:a5:0c:39:dc:ad:6f:e8:a2:b9: d4:7a:cf:87:30:88:ec:68:b8:f5:bd:64:1e:05:70:47:55:a4: bc:13:18:d3:a5:47:6f:46:0a:3b:04:14:54:24:92:aa:52:da: 1a:4a:a5:73:a0:c2:31:00:63:5d:01:87:18:4a:18:1a:23:28: 91:57:e6:3c:93:48:58:81:0d:2d:4d:01:62:f0:89:e5:67:b1: 82:95:eb:0b:7d:59:80:62:50:8e:15:80:27:b6:35:f8:00:57: b1:7f:46:71:78:96:fd:05:78:eb:8d:d0:22:0a:45:c4:b2:08: 0f:21:22:48:af:da:62:ff:cf:90:49:fe:dc:f3:60:08:98:73: 90:e1:f9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JAcCDf1fJX5BUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzNkMmFiOTctNTdjOS00MzNlLTkzYWMtNzNmY2Y0MzljYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bskUdWx5U0LbHvaq6ldOYkRKTqPMWkT+Fkp xSWn/YUDn8BUNaXPPUU8lsHesnM/2c3+JlvMR2Zk4cmT8GfsB2H+T8hcoMvp8YVT hYtGc5nuqgt54xpdkuAxFsID7/JeFOnAMTEy++xOzL/Gsg1U4r1TvpTCi7scRKTy CrbsauSiSvEhcvZj4sCoG1QspbW+eUAMez84i8GYUH5x1IkqVr4UG2aWrK0Kmc+d lw6IwhZ2v5zvtOTGhuJCdRdamM6x/tbHD5gx6m/86fHqqH/AO+1oghadignLZpVJ X7G10ciIl8lH7X3HSARWzN6EAC1wYTsGS6jURRwcw8IL5TP4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG6yLPLBfSjkLnDnqBR5V1V/wL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdkNTIxODgtYWM3NS0z ZWQ0LWJlMTgtOWYyZDdiMmEyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTdebk2D8bYmqfYYdLSRAW4ZYVbXIrsOjHd9qxRNGMcAy3Rgg+TLqlP nP2Zkescg0U0IMEpk2qe18X8vPOeJUdHYfVB67Vb2Wc2xysULhFn0z5x49LLT+mM 15vMeCFMrzVPOH8fFAejxmT9OiBIGPnRljn76qUMOdytb+iiudR6z4cwiOxouPW9 ZB4FcEdVpLwTGNOlR29GCjsEFFQkkqpS2hpKpXOgwjEAY10BhxhKGBojKJFX5jyT SFiBDS1NAWLwieVnsYKV6wt9WYBiUI4VgCe2NfgAV7F/RnF4lv0FeOuN0CIKRcSy CA8hIkiv2mL/z5BJ/tzzYAiYc5Dh+bA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:53:08 2025 by rpki-client