$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/08b02de8-23ba-3ab2-8f75-68c300ab4615.roa File: 08b02de8-23ba-3ab2-8f75-68c300ab4615.roa (raw, json) Hash identifier: 8WsUOh+wYaHOg5kVfV0PyLQ+K/2PrliRKhORZe1B+mM= Subject key identifier: 40:6F:D6:9C:5B:81:94:17:A4:39:A1:A0:DE:13:ED:AA:6E:24:D3:AE Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584B0E4164A9D9DE68CFFD6E8400 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/08b02de8-23ba-3ab2-8f75-68c300ab4615.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 1403 IP address blocks: 67.230.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:64:a9:d9:de:68:cf:fd:6e:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=5d6a994b-402f-405c-8e1a-be364c75c035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:e6:67:79:a4:aa:fc:3f:f0:3b:58:1a:85: c9:7f:27:45:9b:63:3c:c7:e8:47:d5:01:2e:a6:ab: 4f:24:9e:ac:c1:5f:47:f3:53:1c:00:0e:35:cc:bf: df:96:18:c3:dd:cc:35:25:5d:3b:9f:a7:41:4b:54: 59:35:e9:c4:d8:db:c1:5b:a4:45:d1:d5:e7:b4:fb: 1b:19:4d:6a:85:03:bb:a4:0c:8e:9a:b3:3f:67:a5: 4d:56:00:a7:d8:c7:ee:10:f1:1a:61:b8:c6:d3:6a: b1:64:ee:28:cc:6e:84:94:5d:10:b7:2d:a9:1c:1f: e2:72:e5:3b:76:71:77:2c:12:c9:0f:55:05:c9:e6: 19:ed:cf:80:aa:ef:5f:a0:44:d1:29:47:3e:57:db: 9f:4d:68:86:2e:a9:7b:82:11:84:8c:cc:d5:60:84: db:5d:96:0f:de:36:d2:5a:56:1a:74:fb:88:3c:aa: 53:b5:51:e8:02:c7:8e:97:45:2a:10:8f:a6:d1:82: 41:43:77:f9:3e:ad:7b:29:43:0a:95:29:ed:31:07: 89:6b:16:84:29:21:b0:c2:2f:03:72:b4:b7:4d:ad: 89:24:4c:ff:8b:f7:4f:98:a8:00:30:c6:f2:ec:29: 1a:58:1f:98:f7:0b:84:4e:b1:be:1f:bd:ea:ef:41: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6F:D6:9C:5B:81:94:17:A4:39:A1:A0:DE:13:ED:AA:6E:24:D3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/08b02de8-23ba-3ab2-8f75-68c300ab4615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 67.230.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:53:48:27:ae:7d:be:18:6c:72:71:ed:e9:8a:50:8b:1b:c5: 7f:85:fa:37:c2:f9:09:30:93:a1:d8:08:a3:37:25:33:e0:4e: 6b:6d:27:93:79:62:c7:df:0f:fb:3b:f1:4c:b0:b8:4e:71:61: 6d:7d:2c:7d:92:e3:1b:04:ea:17:f2:79:3a:a3:50:2a:70:5a: 41:09:99:35:8f:b8:0a:a9:dd:84:cf:2c:eb:30:d2:84:70:ea: 8f:92:03:4b:fe:0d:0e:d8:bd:90:96:08:1f:d1:f0:31:b5:0f: ff:6e:3a:f1:5d:10:ce:85:46:de:02:0d:f9:c5:80:c8:3d:9b: 49:81:ea:21:f9:79:de:4a:4a:19:70:b8:82:ec:c9:b4:3b:33: 61:1e:60:a1:76:74:87:2d:53:08:11:22:57:06:6a:a4:7a:02: 08:47:b2:66:f1:a0:cc:e4:7c:50:fe:a0:1d:0d:c3:e4:2f:11: db:e9:14:82:a8:60:21:2c:54:ab:15:cd:e6:7e:e1:d9:8d:4f: b5:80:a6:e9:62:74:37:75:37:ed:b3:ec:c6:9f:57:81:5c:c1: 5c:3c:bf:d5:d2:07:93:26:1d:5e:9e:36:e3:42:17:8c:50:14: 64:68:f0:9b:ac:28:f0:3c:97:aa:f7:58:a4:15:fd:f4:54:c9: e4:7f:42:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWSp2d5oz/1uhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWQ2YTk5NGItNDAyZi00MDVjLThlMWEtYmUzNjRjNzVjMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjvmZ3mkqvw/8DtYGoXJfydFm2M8x+hH1QEu pqtPJJ6swV9H81McAA41zL/flhjD3cw1JV07n6dBS1RZNenE2NvBW6RF0dXntPsb GU1qhQO7pAyOmrM/Z6VNVgCn2MfuEPEaYbjG02qxZO4ozG6ElF0Qty2pHB/icuU7 dnF3LBLJD1UFyeYZ7c+Aqu9foETRKUc+V9ufTWiGLql7ghGEjMzVYITbXZYP3jbS WlYadPuIPKpTtVHoAseOl0UqEI+m0YJBQ3f5Pq17KUMKlSntMQeJaxaEKSGwwi8D crS3Ta2JJEz/i/dPmKgAMMby7CkaWB+Y9wuETrG+H73q70FC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBv1pxbgZQXpDmhoN4T7apuJNOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMDhiMDJkZTgtMjNiYS0z YWIyLThmNzUtNjhjMzAwYWI0NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNTSCeufb4YbHJx7emKUIsbxX+F+jfC+Qkwk6HYCKM3JTPgTmttJ5N5 YsffD/s78UywuE5xYW19LH2S4xsE6hfyeTqjUCpwWkEJmTWPuAqp3YTPLOsw0oRw 6o+SA0v+DQ7YvZCWCB/R8DG1D/9uOvFdEM6FRt4CDfnFgMg9m0mB6iH5ed5KShlw uILsybQ7M2EeYKF2dIctUwgRIlcGaqR6AghHsmbxoMzkfFD+oB0Nw+QvEdvpFIKo YCEsVKsVzeZ+4dmNT7WApulidDd1N+2z7MafV4FcwVw8v9XSB5MmHV6eNuNCF4xQ FGRo8JusKPA8l6r3WKQV/fRUyeR/QoY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:10:22 2025 by rpki-client