$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae6a61e-7c2b-384c-9f6b-d0c04a4c1c22.roa File: bae6a61e-7c2b-384c-9f6b-d0c04a4c1c22.roa (raw, json) Hash identifier: BVGnmEYGauvQk4rpuVd7PK7teIK35x7N97U/YlYUUFc= Subject key identifier: 15:3D:75:17:12:F6:99:AB:B4:96:46:70:A9:C4:2C:64:D3:1C:48:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA4EE4A8263607D0CA11C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae6a61e-7c2b-384c-9f6b-d0c04a4c1c22.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 67.172.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:4e:e4:a8:26:36:07:d0:ca:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=46890c3e-ceb2-49d5-bddf-33f2b2881be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:93:f6:8d:dc:a3:41:98:71:58:6f:46:9a: e5:dd:e5:e5:a3:30:92:a3:71:58:64:09:18:42:98: e7:09:39:1b:d5:c5:2f:1e:3c:95:d8:7d:5c:bd:ba: 95:02:1f:01:bf:03:ee:eb:c4:ba:d0:2f:b5:67:3b: 91:9e:82:8d:08:76:ab:aa:ff:ff:8d:dc:da:07:99: 0a:83:67:f5:06:6f:2f:51:c9:82:ec:00:a6:6c:4b: 1b:39:09:e3:b7:43:22:39:d4:91:8f:44:f5:a2:52: 9f:9c:ac:b1:5b:57:6f:6c:6d:eb:7e:eb:9d:f0:d1: 06:76:02:cf:f5:15:87:1b:9f:7f:7a:b2:61:fe:83: 0a:45:ca:1c:13:b1:0f:0a:a1:8d:c5:78:51:99:4b: 12:51:80:69:56:57:9c:8d:a4:2c:7b:1a:ee:ca:02: 8a:43:35:79:1a:a2:5c:93:cf:c9:a3:5f:39:c1:d8: 6d:9c:17:1e:0e:b7:b5:1e:9d:8b:36:a7:c1:1a:21: f0:f5:65:33:56:0c:73:f5:57:0c:18:0c:68:e1:e1: a4:31:35:4a:af:d9:d5:34:57:2c:56:19:ee:e8:e0: 4b:06:48:f9:9b:ad:3d:e3:c0:60:42:43:b5:4b:77: 50:c0:67:f7:70:50:54:b6:a2:0b:4b:72:97:25:03: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3D:75:17:12:F6:99:AB:B4:96:46:70:A9:C4:2C:64:D3:1C:48:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae6a61e-7c2b-384c-9f6b-d0c04a4c1c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.172.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:05:b2:52:1d:3c:1d:9f:31:28:f4:66:15:d1:8e:65:33:5d: f5:c2:c9:0d:1c:70:91:11:2f:b4:b9:12:c4:2a:5d:8f:f0:c4: 01:47:06:e5:25:eb:62:27:c9:87:90:0e:17:92:36:89:e2:5c: a5:56:1d:69:f1:cb:e7:a9:ad:b3:f9:58:a4:f0:57:99:02:1f: 2b:d1:36:e1:d3:23:e5:99:2f:70:6e:e5:0c:70:30:76:3a:bd: b6:8d:80:d8:61:11:07:fb:77:d2:06:5a:bf:d0:4d:a5:ca:c9: bf:24:9d:7d:72:cc:aa:8a:88:52:f1:65:b0:6e:92:f3:61:a3: 93:58:27:7e:c1:b6:4a:32:0f:40:8b:14:c8:ff:cf:df:a5:f1: 6d:8e:30:85:71:32:f4:d2:c7:7d:63:71:a2:a6:2b:1a:9e:2d: 0d:1b:fe:f7:f4:39:3a:d8:02:7d:bb:26:c6:16:41:a5:71:fc: d4:34:61:71:c8:9e:d0:6d:97:ea:1b:c8:0d:43:36:e7:f5:9e: 4f:66:df:ef:2b:6c:3b:5a:28:9d:09:58:5e:7d:af:d1:e2:47: c0:56:4a:aa:f6:37:0c:6d:c7:47:e2:4c:f8:44:6c:67:08:81: e1:34:11:8f:25:5f:3b:3e:1f:bd:5e:f1:75:55:16:f8:67:cc: 49:f8:99:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqk7kqCY2B9DKEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDY4OTBjM2UtY2ViMi00OWQ1LWJkZGYtMzNmMmIyODgxYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb+T9o3co0GYcVhvRprl3eXlozCSo3FYZAkY QpjnCTkb1cUvHjyV2H1cvbqVAh8BvwPu68S60C+1ZzuRnoKNCHarqv//jdzaB5kK g2f1Bm8vUcmC7ACmbEsbOQnjt0MiOdSRj0T1olKfnKyxW1dvbG3rfuud8NEGdgLP 9RWHG59/erJh/oMKRcocE7EPCqGNxXhRmUsSUYBpVlecjaQsexruygKKQzV5GqJc k8/Jo185wdhtnBceDre1Hp2LNqfBGiHw9WUzVgxz9VcMGAxo4eGkMTVKr9nVNFcs Vhnu6OBLBkj5m60948BgQkO1S3dQwGf3cFBUtqILS3KXJQPNRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU9dRcS9pmrtJZGcKnELGTTHEisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFlNmE2MWUtN2MyYi0z ODRjLTlmNmItZDBjMDRhNGMxYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6xeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMFslIdPB2fMSj0ZhXRjmUzXfXCyQ0ccJERL7S5EsQqXY/wxAFHBuUl 62InyYeQDheSNoniXKVWHWnxy+eprbP5WKTwV5kCHyvRNuHTI+WZL3Bu5QxwMHY6 vbaNgNhhEQf7d9IGWr/QTaXKyb8knX1yzKqKiFLxZbBukvNho5NYJ37BtkoyD0CL FMj/z9+l8W2OMIVxMvTSx31jcaKmKxqeLQ0b/vf0OTrYAn27JsYWQaVx/NQ0YXHI ntBtl+obyA1DNuf1nk9m3+8rbDtaKJ0JWF59r9HiR8BWSqr2Nwxtx0fiTPhEbGcI geE0EY8lXzs+H71e8XVVFvhnzEn4mbY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:22:16 2025 by rpki-client