$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa File: 94c2624e-44d2-3cbc-b242-94286db631a8.roa (raw, json) Hash identifier: v31ZoN1HBn5LTiCfx741MKemCh0q9/VTl9Uwj5fo+xc= Subject key identifier: D1:AF:71:47:63:7F:B1:B1:ED:F2:3D:67:DD:8D:A9:F9:27:E1:93:D6 Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584A94D0D7DF276AAF841574FC20 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 397422 IP address blocks: 67.59.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d7:df:27:6a:af:84:15:74:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=f075b0f8-c1de-4c33-b87c-7ffe6ebfeb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:16:d0:a1:c4:3f:c0:94:58:cc:3e:04:9d: 8c:ab:44:8a:a3:32:93:31:ec:fa:32:f0:ed:f4:1a: 61:15:c4:30:0f:6d:99:46:32:e0:57:02:89:9a:f6: f1:1e:de:ba:38:91:ab:d0:49:bc:5c:3a:fd:39:1b: e6:e3:0e:bb:53:b2:1d:0c:93:45:b6:9b:8c:f1:08: c1:1f:b3:f6:c2:4c:e2:47:51:b5:08:e3:43:b0:1e: 7b:e6:31:ff:35:1d:95:f7:d7:1c:bf:3c:42:32:e3: a6:f1:18:43:27:28:86:b5:3f:4e:53:f8:7d:7f:62: de:e0:9f:c5:2b:68:f3:00:ad:2d:ac:f0:f5:c1:28: c8:95:e2:c1:a0:6b:c5:07:51:2a:ff:b5:87:b7:ba: e4:a6:a3:65:cc:0c:1c:bb:fc:ac:2d:5c:4a:8c:53: 22:25:bb:73:5d:18:dd:20:52:2b:b5:39:89:23:1f: b9:55:6e:2e:6c:a4:5f:0c:5d:8e:6e:9f:01:dc:fc: de:e4:78:91:86:7a:0f:fe:7f:90:6e:27:fd:41:2c: e6:3b:32:bb:44:b3:51:b0:e0:32:78:15:77:88:b8: 2e:f7:24:ce:4b:2b:51:98:01:36:72:9c:0b:c0:2e: fa:dd:58:6e:f4:ce:31:ca:4c:ed:1d:2d:df:fb:fa: 95:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AF:71:47:63:7F:B1:B1:ED:F2:3D:67:DD:8D:A9:F9:27:E1:93:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.59.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:34:18:8a:d7:5a:2d:6f:47:90:ab:26:f4:3f:78:fa:4c:81: 61:26:77:a6:f0:32:52:d1:01:5f:bb:5e:50:bc:7d:a1:df:4f: be:f6:b6:b1:9f:5b:d4:db:ee:9b:bd:a7:6d:e5:44:f5:d1:4d: 3f:33:16:35:fc:8f:9c:e0:29:03:3c:e7:b2:44:c3:47:4f:36: 36:f9:10:2c:a3:2c:3f:72:f8:d7:ba:4d:00:ee:bf:46:0b:e8: 89:60:fb:ad:da:6c:f4:46:bf:ec:87:aa:92:a5:43:f6:1f:c1: 5e:e1:eb:44:72:1b:9b:ca:92:38:5e:6d:a8:5e:7b:f3:5f:e6: 61:8f:04:d9:33:ba:7b:87:2f:6f:2c:40:52:4c:a5:30:81:24: 8d:7b:be:ac:fc:a6:a7:2c:12:0d:a1:fc:dc:3d:ba:7b:93:76: 25:4e:01:a3:bf:00:ec:f4:8a:e9:e3:5f:e2:19:0e:6a:26:a9: e4:b7:fd:f1:14:7a:61:7a:42:5f:f8:c1:e0:b1:2f:8a:71:fd: 92:e3:24:10:76:83:50:6d:87:16:eb:25:48:f5:d5:fe:5c:46: db:d8:b1:eb:f0:7a:a3:40:5b:e1:3b:2b:17:8b:98:4c:79:88: 16:9d:7d:83:f8:4e:56:72:d7:7f:d1:c5:1d:f6:2b:7c:9f:3e: 41:0b:7d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NffJ2qvhBV0/CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk ZjA3NWIwZjgtYzFkZS00YzMzLWI4N2MtN2ZmZTZlYmZlYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWkW0KHEP8CUWMw+BJ2Mq0SKozKTMez6MvDt 9BphFcQwD22ZRjLgVwKJmvbxHt66OJGr0Em8XDr9ORvm4w67U7IdDJNFtpuM8QjB H7P2wkziR1G1CONDsB575jH/NR2V99ccvzxCMuOm8RhDJyiGtT9OU/h9f2Le4J/F K2jzAK0trPD1wSjIleLBoGvFB1Eq/7WHt7rkpqNlzAwcu/ysLVxKjFMiJbtzXRjd IFIrtTmJIx+5VW4ubKRfDF2Obp8B3Pze5HiRhnoP/n+Qbif9QSzmOzK7RLNRsOAy eBV3iLgu9yTOSytRmAE2cpwLwC763Vhu9M4xykztHS3f+/qV/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGvcUdjf7Gx7fI9Z92Nqfkn4ZPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvOTRjMjYyNGUtNDRkMi0z Y2JjLWIyNDItOTQyODZkYjYzMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB80GIrXWi1vR5CrJvQ/ePpMgWEmd6bwMlLRAV+7XlC8faHfT772trGf W9Tb7pu9p23lRPXRTT8zFjX8j5zgKQM857JEw0dPNjb5ECyjLD9y+Ne6TQDuv0YL 6Ilg+63abPRGv+yHqpKlQ/YfwV7h60RyG5vKkjhebahee/Nf5mGPBNkzunuHL28s QFJMpTCBJI17vqz8pqcsEg2h/Nw9unuTdiVOAaO/AOz0iunjX+IZDmomqeS3/fEU emF6Ql/4weCxL4px/ZLjJBB2g1BthxbrJUj11f5cRtvYsevweqNAW+E7KxeLmEx5 iBadfYP4TlZy13/RxR32K3yfPkELfbc= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:15 2025 by rpki-client