$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa File: 2731d2f0-9541-3aab-bdf8-127310be17f3.roa (raw, json) Hash identifier: 47o47HhSeHmPDE+7OPijYfhtYvX3ath5JNvJDl9rSC0= Subject key identifier: 81:8B:3B:8F:D2:50:C8:C1:E6:62:63:04:4B:8B:BA:E1:E5:BD:9E:4A Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B047C088A877FD4072D3EE1C0 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 6621 IP address blocks: 67.44.48.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:08:8a:87:7f:d4:07:2d:3e:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=b32e3ec3-9ba1-4387-b396-bfe6b39fdc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:11:a4:51:6e:6f:23:cc:51:ae:e4:58:a8: a3:74:b3:41:19:6c:65:ee:4c:b7:10:95:54:42:ab: f4:26:9a:10:c5:30:fd:1a:ad:ef:f4:e2:eb:3e:94: 17:73:fb:95:8a:17:3a:f3:c3:95:a5:86:9c:ac:4b: 00:e7:b0:11:dd:a5:93:ce:e2:2d:38:6e:ca:3a:86: 53:67:58:d0:55:28:49:94:04:13:83:ad:e0:9a:4a: b2:17:c1:ba:5e:88:10:e9:d7:e5:be:f4:dd:aa:1c: bf:19:a1:c3:85:6d:95:3c:d5:c2:9d:08:21:86:3c: b1:57:01:8d:39:0b:5e:00:c3:ba:15:7d:36:ad:01: 44:43:bb:c6:e9:4c:4f:91:ca:a2:97:d7:e4:f3:4e: 2d:b5:90:ba:9d:50:79:f2:81:ae:a7:88:4f:59:fd: 70:e2:79:a0:8d:7a:e0:fe:d8:ba:f8:6c:42:c6:48: b4:bc:0d:06:e7:8e:68:94:3a:3f:80:97:8d:bf:6e: 12:e3:43:d3:89:5d:db:f8:3b:3d:ae:eb:56:4a:d4: 77:c1:54:c2:11:d3:f9:0b:b4:89:9a:49:66:41:1a: 22:23:ce:aa:a2:54:05:2e:95:52:90:06:e3:ff:67: 50:ce:2d:83:44:41:a6:be:5e:94:23:02:01:5b:ea: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8B:3B:8F:D2:50:C8:C1:E6:62:63:04:4B:8B:BA:E1:E5:BD:9E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b0:ae:5d:f1:ad:a9:54:8b:ed:da:15:85:c5:4a:28:a5:6a: f8:e9:ce:cd:81:b4:7d:c7:a3:24:1e:3d:28:e1:55:73:00:8c: 10:9e:d8:fa:69:c6:99:4a:9a:dd:79:9c:51:c4:18:4e:d4:5b: 0f:52:87:07:b5:9b:68:9c:d1:c2:17:88:ac:d8:94:49:f8:60: a9:40:8a:70:2c:c0:78:52:7d:43:28:f1:29:b8:87:2d:91:28: 19:8e:e7:5f:fc:f9:7e:1b:2b:8c:d0:93:9d:d9:22:95:e0:e9: 78:51:29:93:f6:6c:d4:38:b4:0b:95:b0:ef:a7:9d:17:f6:8f: e2:2b:7f:4c:fb:b5:7a:9e:bb:ae:e9:c0:1c:db:a0:66:18:07: 10:ef:4b:ac:2b:b6:d7:fe:c5:9d:3c:54:ec:d1:69:7c:4a:bd: c9:ed:6c:18:b1:ca:c2:96:eb:c2:be:ff:19:e8:0a:e1:6f:0d: 39:fe:cb:74:3f:7c:f4:b8:e9:90:31:aa:81:16:11:15:17:1e: 33:eb:40:30:cc:36:99:59:37:71:a1:25:09:2a:e4:3d:e7:8d: a2:c0:3b:c6:8e:65:8b:eb:f6:ab:71:a3:c1:d3:cc:4b:40:36: 21:4a:1b:04:6c:c2:ea:20:74:11:23:8e:65:b5:66:55:87:8d: bd:48:c4:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAiKh3/UBy0+4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjMyZTNlYzMtOWJhMS00Mzg3LWIzOTYtYmZlNmIzOWZkYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJYRpFFubyPMUa7kWKijdLNBGWxl7ky3EJVU Qqv0JpoQxTD9Gq3v9OLrPpQXc/uVihc688OVpYacrEsA57AR3aWTzuItOG7KOoZT Z1jQVShJlAQTg63gmkqyF8G6XogQ6dflvvTdqhy/GaHDhW2VPNXCnQghhjyxVwGN OQteAMO6FX02rQFEQ7vG6UxPkcqil9fk804ttZC6nVB58oGup4hPWf1w4nmgjXrg /ti6+GxCxki0vA0G545olDo/gJeNv24S40PTiV3b+Ds9rutWStR3wVTCEdP5C7SJ mklmQRoiI86qolQFLpVSkAbj/2dQzi2DREGmvl6UIwIBW+oWQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGLO4/SUMjB5mJjBEuLuuHlvZ5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMjczMWQyZjAtOTU0MS0z YWFiLWJkZjgtMTI3MzEwYmUxN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuwrl3xralUi+3aFYXFSiilavjpzs2BtH3HoyQePSjhVXMAjBCe2Ppp xplKmt15nFHEGE7UWw9Shwe1m2ic0cIXiKzYlEn4YKlAinAswHhSfUMo8Sm4hy2R KBmO51/8+X4bK4zQk53ZIpXg6XhRKZP2bNQ4tAuVsO+nnRf2j+Irf0z7tXqeu67p wBzboGYYBxDvS6wrttf+xZ08VOzRaXxKvcntbBixysKW68K+/xnoCuFvDTn+y3Q/ fPS46ZAxqoEWERUXHjPrQDDMNplZN3GhJQkq5D3njaLAO8aOZYvr9qtxo8HTzEtA NiFKGwRswuogdBEjjmW1ZlWHjb1IxM8= -----END CERTIFICATE-----Generated at Sat Oct 11 13:29:55 2025 by rpki-client