$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cab425ab-c59c-30db-ac08-8a5875daf589.roa File: cab425ab-c59c-30db-ac08-8a5875daf589.roa (raw, json) Hash identifier: WQj7LQyBRhkKOXPwnuwAJ8QQgqwBWcD1T8UIM1b8WFw= Subject key identifier: 94:66:BE:28:BD:C5:B2:C0:55:43:30:95:28:44:D6:C9:96:F9:78:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F05FAB2F5146DA698B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cab425ab-c59c-30db-ac08-8a5875daf589.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 67.180.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f0:5f:ab:2f:51:46:da:69:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=60f9b8c8-8af1-4ca4-b30b-7855c4c841fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:1d:fe:64:97:a7:2c:9b:d1:fd:9e:03:c5: c1:ca:59:89:00:d0:79:40:7b:e1:4c:11:cc:a6:91: 81:1a:09:ca:55:2f:64:5c:56:68:35:81:d6:90:27: 47:db:a8:a8:7e:ae:2f:3a:d9:13:8a:0b:8e:c1:4c: 62:30:b3:da:6a:9d:bb:a9:e7:ee:f4:20:8b:a2:3a: 54:84:9c:60:12:c1:40:ef:3f:d3:97:f5:20:7a:9e: f4:82:1c:65:b3:c7:f3:c9:a9:1d:81:47:3a:86:f9: 98:47:c0:7e:19:3a:4d:14:ea:83:fd:db:7f:84:23: 26:97:93:7b:21:56:ed:6a:e8:57:71:a0:ce:c1:b0: 64:55:bf:5d:65:d0:d8:98:63:d7:f6:6d:d1:94:2e: bb:7d:ea:22:6f:c6:7f:e0:af:dc:5d:e7:cb:2e:a7: 67:e2:22:86:10:aa:f0:9a:3a:93:8e:f1:d7:7c:bc: 4c:ff:ca:93:e0:bb:da:8f:2e:8e:0e:7c:f1:3b:9f: 10:fa:82:8d:e6:96:13:a1:20:1f:77:09:59:9c:bb: 73:ac:06:72:77:ec:a9:da:61:ba:e4:70:cf:2c:77: 2b:13:99:33:39:30:1d:86:c2:29:f5:1a:54:6a:68: 1e:56:2e:9d:37:09:e3:b8:cd:b4:89:e2:c3:28:e6: c0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:66:BE:28:BD:C5:B2:C0:55:43:30:95:28:44:D6:C9:96:F9:78:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cab425ab-c59c-30db-ac08-8a5875daf589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.180.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c8:b2:d8:be:b9:6c:ec:cf:29:60:d9:09:1b:3f:33:2d:cf: b3:c0:20:e4:93:37:5c:e7:2e:d7:a3:ff:a2:58:a5:60:b6:66: fa:70:c4:1e:59:cd:39:80:32:da:e4:d9:09:47:16:66:dd:9c: 48:72:b3:81:10:cb:b8:0b:04:f5:2c:d8:02:a7:a2:4e:07:67: 4e:90:ff:4d:ab:67:cc:7a:74:7d:e3:be:e7:c1:6f:3d:b9:82: 5e:f4:b1:5e:af:04:ff:74:f4:9c:f8:1a:e0:dd:75:03:79:71: 4d:1a:94:ae:8d:a1:f9:cf:c4:bc:37:36:ee:6e:61:6d:0c:ef: 67:c3:fc:aa:fe:3b:05:19:23:59:1c:84:f4:05:10:74:e2:97: cc:1a:c1:ee:ed:61:64:3a:aa:d3:e0:76:52:ea:85:6d:6c:4a: 6a:19:0f:e1:de:7d:72:b2:ae:b6:30:e7:86:a9:0c:56:21:0f: 17:31:84:df:72:e1:c5:01:34:0e:00:01:04:c5:2f:40:c9:a1: 86:65:d7:f4:e6:e0:c2:48:90:06:c2:d8:4a:eb:68:7f:cf:93: da:52:f3:0d:7f:b4:cc:f5:a7:41:07:61:4a:ea:34:d4:b9:11: ec:5e:95:d5:a2:b8:19:b5:cc:0c:01:90:3d:88:1d:f2:e0:62: 36:b0:f7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvBfqy9RRtppi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjBmOWI4YzgtOGFmMS00Y2E0LWIzMGItNzg1NWM0Yzg0MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC0d/mSXpyyb0f2eA8XBylmJANB5QHvhTBHM ppGBGgnKVS9kXFZoNYHWkCdH26iofq4vOtkTiguOwUxiMLPaap27qefu9CCLojpU hJxgEsFA7z/Tl/Ugep70ghxls8fzyakdgUc6hvmYR8B+GTpNFOqD/dt/hCMml5N7 IVbtauhXcaDOwbBkVb9dZdDYmGPX9m3RlC67feoib8Z/4K/cXefLLqdn4iKGEKrw mjqTjvHXfLxM/8qT4Lvajy6ODnzxO58Q+oKN5pYToSAfdwlZnLtzrAZyd+yp2mG6 5HDPLHcrE5kzOTAdhsIp9RpUamgeVi6dNwnjuM20ieLDKObA8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRmvii9xbLAVUMwlShE1smW+XiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FiNDI1YWItYzU5Yy0z MGRiLWFjMDgtOGE1ODc1ZGFmNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7TAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnIsti+uWzszylg2QkbPzMtz7PAIOSTN1znLtej/6JYpWC2ZvpwxB5Z zTmAMtrk2QlHFmbdnEhys4EQy7gLBPUs2AKnok4HZ06Q/02rZ8x6dH3jvufBbz25 gl70sV6vBP909Jz4GuDddQN5cU0alK6NofnPxLw3Nu5uYW0M72fD/Kr+OwUZI1kc hPQFEHTil8wawe7tYWQ6qtPgdlLqhW1sSmoZD+HefXKyrrYw54apDFYhDxcxhN9y 4cUBNA4AAQTFL0DJoYZl1/Tm4MJIkAbC2ErraH/Pk9pS8w1/tMz1p0EHYUrqNNS5 EexeldWiuBm1zAwBkD2IHfLgYjaw9+k= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:20 2025 by rpki-client