$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfd6be3a-9ee7-395d-a77a-13f0520a22d6.roa File: dfd6be3a-9ee7-395d-a77a-13f0520a22d6.roa (raw, json) Hash identifier: 1Aqn0vTS5PXgq7Lsfvirt6Y2dusJP26V+twWuSbXvdw= Subject key identifier: 4D:37:EF:72:54:A9:92:AF:2B:F1:5F:CD:A3:FC:76:A3:E6:0A:F0:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBD3F189EBB8E331062320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfd6be3a-9ee7-395d-a77a-13f0520a22d6.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33667 IP address blocks: 67.172.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:d3:f1:89:eb:b8:e3:31:06:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=52379926-24d2-4e6e-8187-d3e7caf118f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:44:cc:8b:22:f8:e2:7a:32:fd:9e:9e:f6: d0:68:41:46:5e:c5:bb:e4:d5:3d:a9:aa:39:ac:08: a1:cf:83:67:c9:1d:4e:1d:dd:b9:93:ab:c5:0e:2a: e1:0e:1d:d3:c3:10:fe:a0:7f:10:22:fe:aa:a7:5b: da:a0:4b:63:ca:3f:9e:45:dd:72:6a:b5:cd:de:45: 48:c4:a9:b6:59:5b:2d:83:53:37:3b:48:b1:b7:50: c4:eb:b8:12:86:8d:83:6f:d1:12:35:9d:83:7a:37: c2:97:31:ba:49:92:24:1e:3d:e9:38:c7:73:02:32: 15:52:2e:7d:47:2f:3e:2f:11:34:90:76:aa:21:79: db:1c:88:6b:a2:2d:1f:e7:ac:ea:69:65:fd:9e:81: 55:13:3c:a3:b1:b8:10:9a:e5:f3:33:15:57:31:05: fc:45:3d:03:a6:c1:c9:a1:65:fa:18:fb:1f:fb:23: db:88:c1:9a:d7:f3:0e:18:22:4e:2f:e8:05:d9:f7: 17:60:6d:2d:05:97:6c:78:12:dc:1a:41:26:01:14: a1:7f:04:74:02:12:60:8f:0c:9b:53:e1:d9:0e:90: 02:18:71:16:f8:4a:03:53:6f:d5:f1:64:60:b3:ea: ce:3e:14:23:ba:0a:8b:72:10:d3:90:7b:b6:46:6d: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:EF:72:54:A9:92:AF:2B:F1:5F:CD:A3:FC:76:A3:E6:0A:F0:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfd6be3a-9ee7-395d-a77a-13f0520a22d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.172.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:40:d7:be:09:cd:cf:90:bc:1c:89:56:19:47:1c:57:95:3b: 90:6c:c8:33:55:df:d3:61:4a:2a:6a:2e:f5:e8:31:75:7a:cc: 55:c9:02:24:0a:10:c0:a0:ff:a4:ca:5a:d1:1e:fc:0e:60:61: cf:c2:4b:96:71:b6:3c:21:64:38:f9:91:41:64:18:b5:29:36: 11:4b:1e:0b:13:d6:b9:89:2b:5a:9a:da:9b:30:15:5d:80:d8: 09:ea:14:bc:8f:e0:c7:1a:77:d3:1d:b1:11:e1:d6:48:b9:2e: e8:f0:f0:60:1c:d9:75:49:66:e8:54:62:43:e2:ad:26:e8:1e: 09:65:9a:d6:f8:7c:09:b9:ca:eb:29:a5:6c:07:82:f6:2d:5c: da:68:c5:6a:a7:d3:1f:9e:ba:9f:0e:bc:e3:ad:2d:9b:0d:18: f7:98:d6:18:18:68:dd:f8:c5:9b:e6:27:44:ed:93:b0:b2:cc: fb:6c:83:5e:66:f8:db:12:50:37:3b:42:e2:5b:3f:79:2e:71: 6f:69:9d:2c:6d:df:b2:75:d4:d8:af:ed:ac:3c:4d:de:1f:4b: 0e:02:c0:a6:fe:e8:8c:81:c0:e8:9b:25:48:69:18:fc:df:82: d4:d2:7b:71:28:ae:4c:da:25:26:39:f5:ae:d6:92:99:f6:55: ca:d1:db:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+9Pxieu44zEGIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NTIzNzk5MjYtMjRkMi00ZTZlLTgxODctZDNlN2NhZjExOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaJEzIsi+OJ6Mv2envbQaEFGXsW75NU9qao5 rAihz4NnyR1OHd25k6vFDirhDh3TwxD+oH8QIv6qp1vaoEtjyj+eRd1yarXN3kVI xKm2WVstg1M3O0ixt1DE67gSho2Db9ESNZ2DejfClzG6SZIkHj3pOMdzAjIVUi59 Ry8+LxE0kHaqIXnbHIhroi0f56zqaWX9noFVEzyjsbgQmuXzMxVXMQX8RT0DpsHJ oWX6GPsf+yPbiMGa1/MOGCJOL+gF2fcXYG0tBZdseBLcGkEmARShfwR0AhJgjwyb U+HZDpACGHEW+EoDU2/V8WRgs+rOPhQjugqLchDTkHu2Rm2ppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0373JUqZKvK/FfzaP8dqPmCvDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZkNmJlM2EtOWVlNy0z OTVkLWE3N2EtMTNmMDUyMGEyMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ6xwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVA174Jzc+QvByJVhlHHFeVO5BsyDNV39NhSipqLvXoMXV6zFXJAiQK EMCg/6TKWtEe/A5gYc/CS5ZxtjwhZDj5kUFkGLUpNhFLHgsT1rmJK1qa2pswFV2A 2AnqFLyP4Mcad9MdsRHh1ki5Lujw8GAc2XVJZuhUYkPirSboHgllmtb4fAm5yusp pWwHgvYtXNpoxWqn0x+eup8OvOOtLZsNGPeY1hgYaN34xZvmJ0Ttk7CyzPtsg15m +NsSUDc7QuJbP3kucW9pnSxt37J11Niv7aw8Td4fSw4CwKb+6IyBwOibJUhpGPzf gtTSe3EorkzaJSY59a7Wkpn2VcrR24o= -----END CERTIFICATE-----Generated at Sun Jul 20 21:02:09 2025 by rpki-client