$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa File: 1b1477be-4861-34e9-a84a-b4ea3332351f.roa (raw, json) Hash identifier: c/HXLgHwIU/8ikVGKyE+pCJ9ys2Vz4teVyPSnylxTyg= Subject key identifier: 96:9B:B5:66:E9:A5:1D:27:F9:74:FE:2F:CC:5B:67:F7:F0:34:47:0A Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B1806E716A93FE74744587D00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11232 IP address blocks: 67.217.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e7:16:a9:3f:e7:47:44:58:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=39126e82-1c38-445c-99cb-98149c5f3f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:79:a7:a7:d7:10:24:94:76:75:14:2a:cb: 0f:5f:f7:fc:84:f2:9c:0a:1c:72:e6:0a:35:96:fd: e4:d7:5f:e3:bd:27:52:27:ed:88:d1:48:07:f1:3e: 58:b8:91:fd:78:dc:05:99:9e:02:24:83:97:d0:96: e5:8d:82:6f:33:18:09:55:46:94:d4:c1:47:93:34: b3:e1:64:e4:39:3c:a7:68:2e:d7:05:10:24:a1:de: 30:65:e6:cf:9e:38:2c:18:8e:00:5a:e4:54:39:45: b7:ee:61:a3:02:97:e9:ff:56:7d:29:7a:4f:1c:c5: 48:a9:dd:e4:b0:75:f3:07:77:bf:58:6a:99:3d:df: ae:b2:50:92:65:c4:36:97:18:92:04:4e:63:4f:af: d6:61:e9:4c:c1:4c:4e:5b:96:82:30:fc:6a:2f:2d: b0:79:28:57:e2:3e:8a:8f:fc:51:88:ec:d1:e7:c4: 6b:3f:64:d1:e4:85:b8:ac:41:21:31:66:b6:98:ec: 95:a4:ad:22:19:dd:68:e1:65:fd:14:86:be:86:92: ea:5c:1e:17:5e:d3:95:6c:76:5e:57:5d:0f:18:b1: 63:30:cd:9a:56:49:5c:61:ef:f8:6a:d4:6e:7d:e2: 63:b7:68:04:9a:89:de:84:81:6f:9e:7a:20:6e:39: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:B5:66:E9:A5:1D:27:F9:74:FE:2F:CC:5B:67:F7:F0:34:47:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8c:46:e6:e1:d6:23:12:39:b3:1b:c9:bd:7f:fd:50:a1:fb: 25:a7:5e:b0:af:8b:7d:b6:3c:74:ac:6b:09:bc:53:9f:18:63: 33:7b:5e:71:3d:42:9a:56:65:41:38:a0:da:4e:4c:09:ab:8c: a5:7b:b0:26:c8:a7:6c:b8:0b:c7:d5:e0:79:51:51:56:e9:2e: 10:18:65:1f:ae:6c:4b:11:cf:04:02:25:a4:6d:0d:21:84:11: 3a:02:35:b2:b8:96:65:37:0c:eb:bc:23:69:1e:68:a4:23:c5: 87:1f:f0:82:a0:76:9f:63:a1:e4:15:5a:46:71:78:2b:58:0b: d0:c9:d7:68:e3:68:0a:50:3c:4b:79:1a:18:7b:3c:39:2e:e8: 2e:b0:88:53:33:82:02:45:23:4a:7a:36:70:de:5d:29:64:89: 7c:6c:a8:f7:3f:f6:dc:e0:4f:11:5c:45:a6:c3:d3:b2:3d:d9: 8b:ec:b4:b7:ac:d2:a2:f5:76:bd:57:9c:44:a3:23:aa:29:0a: 67:41:71:a0:bb:c6:54:66:1d:5b:89:fb:71:dc:b1:0c:ba:de: a7:8e:b0:e8:97:0d:06:6a:9c:ad:42:ec:b1:2b:76:21:55:6c: be:23:a0:42:03:4f:72:6e:f3:f1:89:00:29:59:33:0f:b5:b2: 50:e7:2c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBucWqT/nR0RYfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzkxMjZlODItMWMzOC00NDVjLTk5Y2ItOTgxNDljNWYzZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ55p6fXECSUdnUUKssPX/f8hPKcChxy5go1 lv3k11/jvSdSJ+2I0UgH8T5YuJH9eNwFmZ4CJIOX0JbljYJvMxgJVUaU1MFHkzSz 4WTkOTynaC7XBRAkod4wZebPnjgsGI4AWuRUOUW37mGjApfp/1Z9KXpPHMVIqd3k sHXzB3e/WGqZPd+uslCSZcQ2lxiSBE5jT6/WYelMwUxOW5aCMPxqLy2weShX4j6K j/xRiOzR58RrP2TR5IW4rEEhMWa2mOyVpK0iGd1o4WX9FIa+hpLqXB4XXtOVbHZe V10PGLFjMM2aVklcYe/4atRufeJjt2gEmonehIFvnnogbjmn+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJabtWbppR0n+XT+L8xbZ/fwNEcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMWIxNDc3YmUtNDg2MS0z NGU5LWE4NGEtYjRlYTMzMzIzNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9kSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiMRubh1iMSObMbyb1//VCh+yWnXrCvi322PHSsawm8U58YYzN7XnE9 QppWZUE4oNpOTAmrjKV7sCbIp2y4C8fV4HlRUVbpLhAYZR+ubEsRzwQCJaRtDSGE EToCNbK4lmU3DOu8I2keaKQjxYcf8IKgdp9joeQVWkZxeCtYC9DJ12jjaApQPEt5 Ghh7PDku6C6wiFMzggJFI0p6NnDeXSlkiXxsqPc/9tzgTxFcRabD07I92YvstLes 0qL1dr1XnESjI6opCmdBcaC7xlRmHVuJ+3HcsQy63qeOsOiXDQZqnK1C7LErdiFV bL4joEIDT3Ju8/GJAClZMw+1slDnLAk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:55:03 2025 by rpki-client