$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d3b206-f34f-3ea6-9899-8d8108e29c7a.roa File: d4d3b206-f34f-3ea6-9899-8d8108e29c7a.roa (raw, json) Hash identifier: dYoHjQJMN1hnXzPt6jUbu/34ouLFdl4xc4MTK2xdXJw= Subject key identifier: 98:5B:8B:14:78:60:9C:97:06:CA:E0:D4:F5:5D:9E:B5:0F:40:8E:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED530E704FBBD9FDC8FA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d3b206-f34f-3ea6-9899-8d8108e29c7a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 67.189.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:53:0e:70:4f:bb:d9:fd:c8:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9f6541a5-0dda-417b-9282-fc549a00f22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:28:37:23:19:08:1a:71:9a:ea:8e:9f:4c: 1d:97:23:7f:fe:99:e7:ae:8d:de:99:fc:6f:3d:f9: ae:17:be:48:a1:e8:00:a6:d3:7b:8d:b9:3c:f5:1e: 09:e7:b6:74:cc:28:18:1b:23:28:e1:6f:1f:2c:e2: 28:dd:31:41:88:32:1c:83:ca:b6:0d:61:1c:c0:30: b0:f1:1d:69:f0:ea:74:b6:80:ce:39:8b:2f:f6:0f: c3:72:bd:a9:bc:c2:76:57:61:32:1a:7a:eb:7f:de: a6:47:84:86:1f:85:c1:5c:cf:a7:3e:4e:68:84:3d: cd:81:98:77:13:5b:6f:62:3b:41:17:b8:99:cb:1b: bf:81:f5:b6:c1:8d:ea:b0:73:27:d2:ac:1e:88:ae: 8d:aa:07:6b:50:9a:cc:a6:65:a6:09:10:b4:4d:cb: ab:5c:da:a6:d9:cb:5f:54:6f:ae:9e:d5:4d:2d:ba: 83:4f:ae:0d:a7:8b:5e:ea:d7:d2:69:d6:1c:d7:4f: 2d:19:09:0e:f8:93:ac:8a:34:69:bd:aa:90:1f:c5: 36:91:80:1f:5e:d2:ba:bd:53:69:c4:bc:5d:a5:4a: 92:6f:6f:c2:d6:23:06:1c:24:bb:d4:be:d2:16:40: 87:5f:77:8a:6d:45:f1:50:56:3a:48:85:1c:be:cf: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5B:8B:14:78:60:9C:97:06:CA:E0:D4:F5:5D:9E:B5:0F:40:8E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d3b206-f34f-3ea6-9899-8d8108e29c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:22:da:16:8c:57:c5:1a:9e:47:3f:25:de:91:d9:52:ba:d1: 75:14:e2:a0:f8:78:76:e9:7a:63:e3:1e:47:04:9f:36:0f:54: 1d:11:26:5c:b9:e3:34:ae:14:93:ee:79:d3:60:02:f9:8d:c9: bc:c1:6f:24:a4:d8:4b:90:6f:a8:0d:9f:18:07:f2:ef:dc:e2: 48:73:30:f3:25:8a:08:81:6f:c1:63:77:71:a8:c5:33:fc:b9: 74:3c:5d:ab:1c:6e:97:5c:73:ac:c4:d0:09:ce:20:a3:b5:34: dd:8b:dd:ec:bd:26:7f:78:e2:fe:47:b7:58:cc:97:39:98:71: b4:60:45:ea:0f:6f:33:52:25:cd:2d:7d:4f:d8:03:22:69:c6: 76:84:74:ef:23:74:60:32:41:df:af:da:33:e0:6b:e7:80:58: 2a:37:4a:03:19:d0:01:12:ef:33:d8:16:d6:4b:f2:ee:30:05: b4:32:e6:df:b3:da:f1:d9:48:e2:42:26:3b:62:f6:69:ba:ab: e0:81:2e:0c:6c:a9:14:40:22:7f:e7:b7:2d:6d:55:bf:d3:7c: 80:61:16:d9:47:dc:1d:c1:65:49:8a:1b:e9:42:eb:d1:2e:c0: 0b:6a:f6:ef:54:00:f5:ad:00:c4:1c:ad:57:38:79:1c:34:e0: e1:20:df:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07VMOcE+72f3I+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWY2NTQxYTUtMGRkYS00MTdiLTkyODItZmM1NDlhMDBmMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRcoNyMZCBpxmuqOn0wdlyN//pnnro3emfxv PfmuF75IoegAptN7jbk89R4J57Z0zCgYGyMo4W8fLOIo3TFBiDIcg8q2DWEcwDCw 8R1p8Op0toDOOYsv9g/Dcr2pvMJ2V2EyGnrrf96mR4SGH4XBXM+nPk5ohD3NgZh3 E1tvYjtBF7iZyxu/gfW2wY3qsHMn0qweiK6NqgdrUJrMpmWmCRC0TcurXNqm2ctf VG+untVNLbqDT64Np4te6tfSadYc108tGQkO+JOsijRpvaqQH8U2kYAfXtK6vVNp xLxdpUqSb2/C1iMGHCS71L7SFkCHX3eKbUXxUFY6SIUcvs+8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhbixR4YJyXBsrg1PVdnrUPQI7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRkM2IyMDYtZjM0Zi0z ZWE2LTk4OTktOGQ4MTA4ZTI5YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ70GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoi2haMV8Uankc/Jd6R2VK60XUU4qD4eHbpemPjHkcEnzYPVB0RJly5 4zSuFJPuedNgAvmNybzBbySk2EuQb6gNnxgH8u/c4khzMPMligiBb8Fjd3GoxTP8 uXQ8Xascbpdcc6zE0AnOIKO1NN2L3ey9Jn944v5Ht1jMlzmYcbRgReoPbzNSJc0t fU/YAyJpxnaEdO8jdGAyQd+v2jPga+eAWCo3SgMZ0AES7zPYFtZL8u4wBbQy5t+z 2vHZSOJCJjti9mm6q+CBLgxsqRRAIn/nty1tVb/TfIBhFtlH3B3BZUmKG+lC69Eu wAtq9u9UAPWtAMQcrVc4eRw04OEg3+M= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:28 2025 by rpki-client