$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f372b9c1-4d6c-3ac8-8931-74a61a7b91c1.roa File: f372b9c1-4d6c-3ac8-8931-74a61a7b91c1.roa (raw, json) Hash identifier: ktlMQFnPUbcIYTLBqPD8TylYsIKoJVn78rZrbFfVJB0= Subject key identifier: AE:82:A1:E5:3C:64:2B:03:8F:6E:55:5F:59:95:99:FB:DF:E6:78:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED5081309302C3EDBA7100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f372b9c1-4d6c-3ac8-8931-74a61a7b91c1.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 67.170.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:50:81:30:93:02:c3:ed:ba:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=df050b04-2a44-4748-a27f-82eaf92d2688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:4f:e8:c1:ba:15:c2:cf:0c:90:fd:96:33: c8:d1:7b:e0:50:de:59:31:6f:ec:90:45:87:f6:15: 53:84:3c:09:e0:8b:1f:81:8e:e3:5e:7f:51:df:3b: 72:50:5e:8b:3e:ba:81:d2:ca:6e:6a:31:de:46:62: 79:96:41:70:26:30:79:6d:04:a3:a0:5e:b1:ad:18: 00:4a:12:e9:3e:ea:d1:dd:98:a1:25:e1:07:c0:39: 67:5e:0c:a8:a4:f1:a0:07:48:a6:ab:10:10:a3:18: 93:c5:22:22:30:9d:f7:13:c6:db:3f:ba:bd:a1:d8: 7c:1b:aa:07:e9:f3:2f:3c:4f:cb:2f:dd:36:23:95: 1c:bf:a5:58:d0:ae:1a:09:34:36:cb:e0:74:16:12: ca:7e:09:e7:40:84:ef:da:96:2f:93:37:93:2a:ed: e1:1f:0a:c9:34:16:3a:b8:be:24:6f:ed:93:e7:32: 27:34:6e:0d:c1:59:6c:92:5b:07:ad:46:0e:e7:3f: 58:71:60:8b:42:3f:67:b3:5f:53:9f:3a:2e:a8:1f: 88:b6:7f:12:ba:8d:c0:f2:4b:bf:fc:e4:09:6d:c7: 1c:74:6a:89:8f:d5:e4:b2:12:02:9c:1a:02:10:89: f8:8e:cf:0a:93:34:3f:bc:48:ab:39:9c:e4:9c:85: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:82:A1:E5:3C:64:2B:03:8F:6E:55:5F:59:95:99:FB:DF:E6:78:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f372b9c1-4d6c-3ac8-8931-74a61a7b91c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:09:e5:b6:ab:3a:8d:b7:f2:66:15:8a:67:3a:4f:ef:0f:0c: 63:d6:6a:ba:f6:5f:8c:f1:49:24:17:a1:b8:7d:8e:8a:47:e4: 87:fb:c5:1d:92:a5:b9:ec:54:60:db:da:14:94:46:dc:df:1d: 1f:94:fa:25:06:a2:20:1e:09:c5:41:e2:d2:67:e9:b3:ee:f5: 25:2a:d1:7d:4b:1c:2d:16:a6:ca:bc:91:28:f5:56:9a:dd:9e: 56:e0:61:18:96:2a:f1:6d:46:61:d4:4b:16:89:d9:ad:c2:60: 1b:b4:c0:f9:a7:43:c0:97:d9:9c:1a:26:5c:73:c0:d0:24:c6: 76:72:bd:32:ed:8c:94:8f:51:60:97:b1:ce:03:64:52:4e:1a: b9:21:b1:4c:6a:c0:c9:f7:5c:0f:6b:9f:94:3f:f9:46:c1:70: 43:03:eb:0a:80:be:03:db:35:ef:64:ac:89:79:bd:2b:ab:9e: 6f:81:9c:52:b2:18:ef:f4:6b:10:c7:e0:bc:2a:0d:c2:62:c5: 4b:e9:fd:5a:f3:84:0b:08:a7:1b:ee:58:03:f3:51:cd:69:de: 9f:6f:97:98:73:31:6d:65:2f:8f:20:78:26:80:62:15:84:2a: 5b:79:4e:db:65:4b:0d:03:14:0e:37:31:f9:84:a3:cd:f0:32: 8e:96:e8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07VCBMJMCw+26cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGYwNTBiMDQtMmE0NC00NzQ4LWEyN2YtODJlYWY5MmQyNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10BP6MG6FcLPDJD9ljPI0XvgUN5ZMW/skEWH 9hVThDwJ4IsfgY7jXn9R3ztyUF6LPrqB0spuajHeRmJ5lkFwJjB5bQSjoF6xrRgA ShLpPurR3ZihJeEHwDlnXgyopPGgB0imqxAQoxiTxSIiMJ33E8bbP7q9odh8G6oH 6fMvPE/LL902I5Ucv6VY0K4aCTQ2y+B0FhLKfgnnQITv2pYvkzeTKu3hHwrJNBY6 uL4kb+2T5zInNG4NwVlsklsHrUYO5z9YcWCLQj9ns19TnzouqB+Itn8Suo3A8ku/ /OQJbcccdGqJj9XkshICnBoCEIn4js8KkzQ/vEirOZzknIWgvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6CoeU8ZCsDj25VX1mVmfvf5njHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjM3MmI5YzEtNGQ2Yy0z YWM4LTg5MzEtNzRhNjFhN2I5MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoJ5barOo238mYVimc6T+8PDGPWarr2X4zxSSQXobh9jopH5If7xR2S pbnsVGDb2hSURtzfHR+U+iUGoiAeCcVB4tJn6bPu9SUq0X1LHC0Wpsq8kSj1Vprd nlbgYRiWKvFtRmHUSxaJ2a3CYBu0wPmnQ8CX2ZwaJlxzwNAkxnZyvTLtjJSPUWCX sc4DZFJOGrkhsUxqwMn3XA9rn5Q/+UbBcEMD6wqAvgPbNe9krIl5vSurnm+BnFKy GO/0axDH4LwqDcJixUvp/VrzhAsIpxvuWAPzUc1p3p9vl5hzMW1lL48geCaAYhWE Klt5TttlSw0DFA43MfmEo83wMo6W6G4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:49 2025 by rpki-client