$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa File: d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa (raw, json) Hash identifier: 7Yb0DGjIYEvSK9wgn4Z1VnfMvVEZ+yotgzz+GuLmV+Q= Subject key identifier: 29:AF:03:A2:82:A9:21:C2:83:53:C5:3C:95:32:4E:E5:E6:3F:86:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1D50FFD07BA63849B5D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 69.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:d5:0f:fd:07:ba:63:84:9b:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c74c1601-da5b-410c-b024-671f86d0096a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:37:57:ae:a6:d2:a5:f2:87:db:3e:64:92: 85:da:a1:b2:b7:13:ed:de:f1:a0:eb:3c:a0:eb:ac: 47:b2:45:c5:d3:59:c8:eb:ee:ac:3c:b3:0f:cb:1b: 6e:61:96:27:1e:94:da:25:dd:a5:e2:79:98:bd:f6: e3:63:9c:5f:d4:97:bf:65:b5:c5:21:f2:f9:6c:ac: ec:01:8d:88:3a:21:3f:d9:0b:a5:2f:1d:ec:33:1c: 6c:46:70:24:6d:2a:29:60:e7:f6:5a:a9:36:b8:47: 1d:79:8a:a6:c6:5a:41:14:6d:ab:13:17:60:51:ec: 83:a2:08:a5:61:a0:90:88:c1:08:f7:5f:da:f5:ae: 80:72:ce:f8:f4:ad:70:62:4b:1f:28:10:56:62:3a: cb:bd:84:19:34:18:74:c4:ba:6d:13:10:c6:b6:4e: 38:a3:55:91:a1:27:fe:82:ad:53:2d:e6:78:25:d4: 19:42:66:8d:f3:5d:7e:41:01:b6:04:89:33:c7:a7: f1:e1:e7:9e:9d:dc:df:68:f9:99:a6:51:04:56:8b: a8:7b:e5:6a:41:bf:c1:dd:d9:30:9d:52:12:33:b5: f9:20:a0:9b:43:d0:a8:79:8f:e3:e6:ec:48:f1:40: 97:93:93:bc:ac:12:d9:9c:fe:a4:1d:5a:c1:8c:dd: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:03:A2:82:A9:21:C2:83:53:C5:3C:95:32:4E:E5:E6:3F:86:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:8c:84:84:bb:2e:4b:0c:47:dd:72:26:a0:a5:bc:c8:29:0c: 00:21:28:58:92:66:4e:d7:be:14:a6:1a:16:b8:53:68:f5:e6: 92:f7:7a:10:ab:32:f3:dd:d9:34:b7:46:f1:94:37:11:c2:ce: f2:94:cc:fc:e1:f4:a6:3e:17:f5:d4:2d:02:3b:7d:ed:b6:a0: 60:39:0b:66:9b:55:0c:46:db:89:68:94:49:a0:a8:9a:a3:76: 48:57:62:f0:54:cf:4f:6f:3d:78:d7:02:88:47:7d:64:a6:0e: 8c:1c:03:1e:9b:8a:17:9f:40:d2:fc:99:1d:1e:ce:58:7b:85: 3c:87:16:b8:fc:0c:c0:f9:54:26:2c:5e:23:20:29:45:aa:51: e2:cb:77:54:a1:bd:e5:3c:14:7e:39:53:7e:d6:1d:63:38:13: 16:fe:d0:3a:62:2c:a2:5f:0c:71:4d:79:9b:59:8e:73:bc:1d: 3e:d8:23:6a:a5:8c:4f:4f:06:3e:0c:09:7a:2a:2b:86:14:2b: fd:85:fc:26:74:d8:0a:f8:be:85:5b:0c:42:82:eb:9b:c6:30: 59:c3:18:78:a7:2b:32:b9:a8:d5:40:56:43:ad:8a:26:e1:9c: 35:4b:b0:73:86:84:0d:99:db:38:ca:79:e3:01:35:58:bd:11: b9:b9:a2:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswdUP/Qe6Y4SbXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Yzc0YzE2MDEtZGE1Yi00MTBjLWIwMjQtNjcxZjg2ZDAwOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZs3V66m0qXyh9s+ZJKF2qGytxPt3vGg6zyg 66xHskXF01nI6+6sPLMPyxtuYZYnHpTaJd2l4nmYvfbjY5xf1Je/ZbXFIfL5bKzs AY2IOiE/2QulLx3sMxxsRnAkbSopYOf2Wqk2uEcdeYqmxlpBFG2rExdgUeyDogil YaCQiMEI91/a9a6Acs749K1wYksfKBBWYjrLvYQZNBh0xLptExDGtk44o1WRoSf+ gq1TLeZ4JdQZQmaN811+QQG2BIkzx6fx4eeendzfaPmZplEEVouoe+VqQb/B3dkw nVISM7X5IKCbQ9CoeY/j5uxI8UCXk5O8rBLZnP6kHVrBjN0AzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmvA6KCqSHCg1PFPJUyTuXmP4Z1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDVhMzk0N2UtZTZhNy0z MGY3LWEwYjQtYmQxYWI3NmM0MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARfl9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+MhIS7LksMR91yJqClvMgpDAAhKFiSZk7XvhSmGha4U2j15pL3ehCr MvPd2TS3RvGUNxHCzvKUzPzh9KY+F/XULQI7fe22oGA5C2abVQxG24lolEmgqJqj dkhXYvBUz09vPXjXAohHfWSmDowcAx6bihefQNL8mR0ezlh7hTyHFrj8DMD5VCYs XiMgKUWqUeLLd1ShveU8FH45U37WHWM4Exb+0DpiLKJfDHFNeZtZjnO8HT7YI2ql jE9PBj4MCXoqK4YUK/2F/CZ02Ar4voVbDEKC65vGMFnDGHinKzK5qNVAVkOtiibh nDVLsHOGhA2Z2zjKeeMBNVi9Ebm5ou0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:43 2025 by rpki-client