$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5e7f999-9f5c-39be-ab16-1350fd4e281c.roa File: b5e7f999-9f5c-39be-ab16-1350fd4e281c.roa (raw, json) Hash identifier: rCEgp5zOv8pxg+R2Cf8lLQ788IyMz7jz4RTKU4BA0g0= Subject key identifier: BC:D5:E9:1F:01:8F:FC:08:9A:03:64:F7:C4:B0:21:48:18:90:10:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC50A316F87D185DB1DEF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5e7f999-9f5c-39be-ab16-1350fd4e281c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.180.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:0a:31:6f:87:d1:85:db:1d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a2c1c2e1-f789-47e3-8d6a-87449b690e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:07:78:53:74:5b:36:a1:ec:20:0f:79:73: 68:43:e0:20:53:9a:7b:59:f1:cb:3a:7b:e1:a2:fc: d6:9d:db:5a:97:13:aa:62:6f:73:48:9a:d6:80:d8: 3d:28:a2:27:85:4a:8b:c2:46:89:66:13:6d:d2:27: e0:e5:91:4b:26:44:07:e6:fb:92:8d:72:bd:4a:90: 89:92:65:27:a3:61:94:61:3b:4b:62:af:16:2e:00: c0:c3:12:76:6c:de:68:c0:5b:62:00:4e:42:08:23: 3a:6f:36:a2:6e:f7:03:ac:6d:b6:5c:2f:c0:65:bf: 55:d3:6e:8b:60:60:99:e0:0f:19:fa:96:e7:47:9e: 26:c1:cb:34:4d:63:da:e8:b3:27:02:98:53:c2:d3: 9f:b1:8c:c6:88:4c:df:8a:a1:58:9c:ac:ba:00:09: 45:95:db:bf:df:bc:fb:9e:3b:d9:5c:62:e5:b7:cb: 04:89:fe:70:4d:5f:20:6a:88:78:d5:d5:ef:7b:43: ee:a5:68:bd:c4:64:ce:bd:2c:49:1d:ea:2d:0c:f9: da:7e:2d:bb:25:f6:e8:a1:58:ce:26:01:ba:05:cc: 76:22:e5:ee:b3:49:4a:6e:20:eb:82:15:cc:9a:ca: 49:4f:6e:0c:0a:da:db:65:42:f5:be:88:45:0a:28: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D5:E9:1F:01:8F:FC:08:9A:03:64:F7:C4:B0:21:48:18:90:10:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5e7f999-9f5c-39be-ab16-1350fd4e281c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.180.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:82:cb:44:9b:ea:5d:79:41:da:fb:ed:70:72:9e:c8:67:02: 15:18:cc:1b:bb:ff:d4:fc:c2:6a:c6:5e:98:fc:1a:c4:34:38: 04:a0:31:66:87:98:df:75:ef:f4:bd:3b:ab:e3:71:af:0f:2b: 61:6f:a5:7c:55:38:01:aa:05:ad:f8:b1:97:4d:57:e6:c1:4c: fc:45:47:e7:c0:27:20:63:90:99:bb:4f:cd:08:f1:f9:07:a3: 7d:39:30:88:cd:fb:df:65:ec:b3:84:f1:c2:40:08:dd:1e:64: e7:8a:c1:53:a5:4b:95:3a:3f:28:e9:32:b2:8c:9d:48:89:61: c6:14:77:66:86:60:1d:2c:b7:7d:e0:e1:a4:dc:ca:85:7b:df: 7f:9c:1e:e4:12:2b:6e:ea:59:08:e5:d1:3e:1f:cd:a6:f2:c0: 0a:05:83:d9:77:d0:40:e5:b4:61:c1:cd:fd:ae:1f:3f:b9:54: 61:6f:84:2e:ec:78:4b:d8:b3:ac:e2:ca:0d:bc:f1:61:f8:a9: 60:9f:fc:d9:33:1f:19:b8:25:a8:77:de:fa:ab:54:36:b5:8f: 9d:d2:f3:15:47:88:99:09:15:12:a2:b1:71:63:33:71:fd:30: 41:a6:19:75:23:0b:b2:f7:8c:b8:7f:8c:e7:07:7e:f1:43:03: 0c:5e:ca:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxQoxb4fRhdsd74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTJjMWMyZTEtZjc4OS00N2UzLThkNmEtODc0NDliNjkwZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheMHeFN0Wzah7CAPeXNoQ+AgU5p7WfHLOnvh ovzWndtalxOqYm9zSJrWgNg9KKInhUqLwkaJZhNt0ifg5ZFLJkQH5vuSjXK9SpCJ kmUno2GUYTtLYq8WLgDAwxJ2bN5owFtiAE5CCCM6bzaibvcDrG22XC/AZb9V026L YGCZ4A8Z+pbnR54mwcs0TWPa6LMnAphTwtOfsYzGiEzfiqFYnKy6AAlFldu/37z7 njvZXGLlt8sEif5wTV8gaoh41dXve0PupWi9xGTOvSxJHeotDPnafi27JfbooVjO JgG6Bcx2IuXus0lKbiDrghXMmspJT24MCtrbZUL1vohFCii4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzV6R8Bj/wImgNk98SwIUgYkBDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVlN2Y5OTktOWY1Yy0z OWJlLWFiMTYtMTM1MGZkNGUyODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyCy0Sb6l15Qdr77XBynshnAhUYzBu7/9T8wmrGXpj8GsQ0OASgMWaH mN917/S9O6vjca8PK2FvpXxVOAGqBa34sZdNV+bBTPxFR+fAJyBjkJm7T80I8fkH o305MIjN+99l7LOE8cJACN0eZOeKwVOlS5U6PyjpMrKMnUiJYcYUd2aGYB0st33g 4aTcyoV733+cHuQSK27qWQjl0T4fzabywAoFg9l30EDltGHBzf2uHz+5VGFvhC7s eEvYs6ziyg288WH4qWCf/NkzHxm4Jah33vqrVDa1j53S8xVHiJkJFRKisXFjM3H9 MEGmGXUjC7L3jLh/jOcHfvFDAwxeyk0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:02:26 2025 by rpki-client