$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa File: 40a22eee-4031-3336-8b2d-96d68d61d8a9.roa (raw, json) Hash identifier: ZumAuABKRtB21ikpXE4twzONvVvhhtVUSXPRPmCJM0g= Subject key identifier: B9:E2:15:79:86:D4:CF:98:41:16:74:CE:9E:18:0C:15:62:06:C1:C3 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584AEE2684A99EE717C85823AD80 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 35998 IP address blocks: 67.21.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:84:a9:9e:e7:17:c8:58:23:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=7895a011-7f13-4bbb-9802-7529da038a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:28:06:34:78:84:45:65:fa:2b:ac:7f:0a: 97:50:d8:6d:34:70:78:c3:e0:7b:10:be:a9:ba:14: cb:33:3b:63:bc:df:fa:4d:38:b8:07:72:0f:46:61: 73:8b:44:dd:73:11:75:6d:d4:f9:69:40:90:ef:cc: 48:21:a9:8e:56:6f:4b:ef:9d:14:63:4e:74:8f:92: ba:2a:50:1d:29:dc:6f:4c:f4:6d:90:c9:cc:a7:6d: 87:8c:99:f6:e0:a8:d3:d8:78:84:13:35:d3:3d:f6: 8a:86:03:e5:98:b5:79:fe:d8:3b:95:7f:55:9b:a6: c3:8d:54:ab:fa:f4:dc:7e:34:13:13:35:a9:dd:8c: 3f:38:e3:80:46:9f:31:f2:d3:e5:25:8e:39:2f:a5: f8:5e:8d:21:ab:1a:61:6c:dd:20:72:54:66:7a:18: ce:75:af:54:68:19:13:3d:4a:83:bb:8f:a9:ea:60: 1e:ee:40:e5:50:31:b1:dc:32:dc:97:5f:65:a7:ee: 3f:da:9b:36:9a:1d:c8:10:ff:17:1e:fc:b3:04:64: 3a:ee:85:f9:bc:0e:ef:0b:04:40:d5:04:32:00:75: 5d:62:96:c7:ec:3b:ef:79:ae:8b:3c:c0:2b:d6:71: 5f:f9:f9:5e:07:a1:4f:67:da:be:9a:e7:fe:f3:33: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:15:79:86:D4:CF:98:41:16:74:CE:9E:18:0C:15:62:06:C1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 67.21.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:24:af:91:2e:19:d8:cc:d7:8d:cc:1b:cf:36:63:41:a4:a4: ad:82:98:64:8d:80:1f:e8:ef:72:a9:6c:31:3e:4e:a6:b0:e0: 95:0d:07:12:ab:68:17:82:fe:7f:eb:80:45:0e:5e:d1:11:c9: 1d:d3:b3:5e:98:17:0c:e3:b9:5e:34:d2:9f:e9:ce:62:b8:70: 7f:ad:a6:00:f0:51:26:4e:8a:09:9f:6f:e2:14:ad:05:2c:62: 0c:2a:52:58:90:60:c6:56:bc:48:90:61:62:c3:71:2e:10:ca: 69:b2:70:3d:8f:5d:12:61:37:2b:a9:47:0d:f5:3b:50:3c:9a: d1:12:f9:8f:5e:69:b8:c4:3e:1f:9b:43:0d:b1:d0:8e:53:05: 5c:75:88:6e:89:1d:a9:30:e5:0f:94:d9:a1:e7:ef:6a:f2:77: ed:e3:e7:82:28:74:6d:72:3f:8f:4b:96:ae:61:03:8b:ae:5c: 84:d9:8d:9b:00:5b:58:a3:46:75:1c:51:c1:43:50:f0:70:4c: 03:04:b5:8f:a3:2b:ad:bf:af:d4:38:91:fd:c5:f8:98:e6:d4: cd:ff:59:f6:95:e0:0b:08:f2:00:07:f8:b1:22:49:dc:c7:06: fd:b9:e8:0c:b8:de:ee:90:58:95:de:eb:a1:77:8e:02:0c:94: da:9b:b6:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoSpnucXyFgjrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk Nzg5NWEwMTEtN2YxMy00YmJiLTk4MDItNzUyOWRhMDM4YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdMoBjR4hEVl+iusfwqXUNhtNHB4w+B7EL6p uhTLMztjvN/6TTi4B3IPRmFzi0TdcxF1bdT5aUCQ78xIIamOVm9L750UY050j5K6 KlAdKdxvTPRtkMnMp22HjJn24KjT2HiEEzXTPfaKhgPlmLV5/tg7lX9Vm6bDjVSr +vTcfjQTEzWp3Yw/OOOARp8x8tPlJY45L6X4Xo0hqxphbN0gclRmehjOda9UaBkT PUqDu4+p6mAe7kDlUDGx3DLcl19lp+4/2ps2mh3IEP8XHvyzBGQ67oX5vA7vCwRA 1QQyAHVdYpbH7Dvvea6LPMAr1nFf+fleB6FPZ9q+muf+8zNjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLniFXmG1M+YQRZ0zp4YDBViBsHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvNDBhMjJlZWUtNDAzMS0z MzM2LThiMmQtOTZkNjhkNjFkOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4kr5EuGdjM143MG882Y0GkpK2CmGSNgB/o73KpbDE+Tqaw4JUNBxKr aBeC/n/rgEUOXtERyR3Ts16YFwzjuV400p/pzmK4cH+tpgDwUSZOigmfb+IUrQUs YgwqUliQYMZWvEiQYWLDcS4QymmycD2PXRJhNyupRw31O1A8mtES+Y9eabjEPh+b Qw2x0I5TBVx1iG6JHakw5Q+U2aHn72ryd+3j54IodG1yP49Llq5hA4uuXITZjZsA W1ijRnUcUcFDUPBwTAMEtY+jK62/r9Q4kf3F+Jjm1M3/WfaV4AsI8gAH+LEiSdzH Bv256Ay43u6QWJXe66F3jgIMlNqbtuA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:04 2025 by rpki-client