$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa File: 4a2880a2-399c-391a-b0ff-17a565b54dce.roa (raw, json) Hash identifier: NBUmC/FC4gdcd5NHIz93iLCG9P3l5KPmwABDSsitp9E= Subject key identifier: DE:08:AE:92:98:EB:39:5B:4D:03:08:DB:3D:1A:8C:42:05:43:04:20 Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584A96369288F72B85BF025697C0 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 26554 IP address blocks: 67.59.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:92:88:f7:2b:85:bf:02:56:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=5478a0d5-a7b0-486d-8672-18ddf05135fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:f9:b7:70:bc:b5:e6:26:30:1e:f5:ea:aa: a5:58:d9:cb:4a:a1:13:7d:d0:3a:aa:3d:f7:c9:6b: e0:5d:5c:43:04:b6:85:73:8f:63:7c:a7:63:7f:71: 56:cc:f2:3e:0b:fe:e0:42:d1:da:3f:29:5d:47:37: 0a:e8:8e:7e:b0:0e:f2:ea:17:7c:6c:33:30:d0:2d: 0b:d9:52:3a:91:e8:9f:2c:b2:6b:eb:63:cf:76:75: da:1c:a8:61:51:38:70:f2:d1:72:95:be:62:ec:f8: 19:fe:e7:24:51:a5:1e:2f:5b:40:9e:5c:67:0b:b8: 44:db:f7:a1:fc:7e:f6:25:2d:15:59:9e:8a:de:09: 60:ca:df:43:f6:99:c9:dd:5c:94:1c:d9:9d:7d:6a: 91:37:8c:b2:84:4a:d7:03:e7:46:14:e0:e3:a5:b5: 72:da:f5:e4:14:e2:3f:5c:aa:c4:ed:a5:f4:6e:7b: 32:a2:95:3c:47:d8:45:47:96:79:41:c7:12:2a:06: 0d:9a:39:9f:4a:31:3c:0a:81:9e:7a:7f:e1:af:95: a1:b6:db:c7:81:bb:ce:fc:ab:f4:5c:7f:85:66:0e: df:56:57:97:6f:90:10:04:c7:1e:b6:1c:f6:22:2a: 0a:2a:a0:98:06:ab:f7:51:97:a5:89:b9:31:ff:53: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:08:AE:92:98:EB:39:5B:4D:03:08:DB:3D:1A:8C:42:05:43:04:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: 67.59.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:39:ec:d3:7e:05:1a:cd:f2:9e:df:08:9a:da:57:10:74:54: 77:cc:bc:81:27:ad:ca:f4:41:df:6b:57:b0:d7:95:93:6f:30: 4f:ba:dc:1b:78:aa:0f:24:25:61:a6:a6:2c:f5:57:ef:77:92: 70:b8:8a:d7:f1:ee:f0:fa:e6:0f:76:db:62:dd:2e:67:fe:4a: 2b:5f:55:83:b7:2c:d2:6b:46:94:52:d6:42:47:60:80:fb:06: f6:a0:f8:b4:a5:9a:f8:71:67:b2:a2:91:1e:6f:3e:58:6a:b8: 45:6c:16:72:58:df:fa:4f:ab:a1:f8:c9:8e:1a:1a:d3:24:df: bb:80:46:62:af:12:4a:d1:c7:51:83:8d:b6:04:e0:5a:b1:e5: f2:dd:8b:18:ef:3b:de:19:f6:ff:db:a1:ce:c8:5c:d0:34:78: 7e:46:d8:6c:2a:ee:9a:78:e8:96:38:aa:02:8a:7e:29:95:ba: 77:bb:78:36:e1:d6:c4:3b:50:9d:0c:70:fa:84:ec:0b:73:37: 79:6f:7a:48:51:91:ef:96:4e:98:80:bc:1b:a0:9e:64:05:d1: b0:3e:54:ed:d5:32:c1:ca:8f:52:c2:6f:7e:e1:f9:4c:b3:6b: b5:88:24:66:1a:86:52:c4:03:1c:9b:de:4d:37:c6:97:be:9e: 48:0b:e9:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpKI9yuFvwJWl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NTQ3OGEwZDUtYTdiMC00ODZkLTg2NzItMThkZGYwNTEzNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNT5t3C8teYmMB716qqlWNnLSqETfdA6qj33 yWvgXVxDBLaFc49jfKdjf3FWzPI+C/7gQtHaPyldRzcK6I5+sA7y6hd8bDMw0C0L 2VI6keifLLJr62PPdnXaHKhhUThw8tFylb5i7PgZ/uckUaUeL1tAnlxnC7hE2/eh /H72JS0VWZ6K3glgyt9D9pnJ3VyUHNmdfWqRN4yyhErXA+dGFODjpbVy2vXkFOI/ XKrE7aX0bnsyopU8R9hFR5Z5QccSKgYNmjmfSjE8CoGeen/hr5WhttvHgbvO/Kv0 XH+FZg7fVleXb5AQBMcethz2IioKKqCYBqv3UZelibkx/1PPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4IrpKY6zlbTQMI2z0ajEIFQwQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvNGEyODgwYTItMzk5Yy0z OTFhLWIwZmYtMTdhNTY1YjU0ZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQzscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU57NN+BRrN8p7fCJraVxB0VHfMvIEnrcr0Qd9rV7DXlZNvME+63Bt4 qg8kJWGmpiz1V+93knC4itfx7vD65g9222LdLmf+SitfVYO3LNJrRpRS1kJHYID7 Bvag+LSlmvhxZ7KikR5vPlhquEVsFnJY3/pPq6H4yY4aGtMk37uARmKvEkrRx1GD jbYE4Fqx5fLdixjvO94Z9v/boc7IXNA0eH5G2Gwq7pp46JY4qgKKfimVune7eDbh 1sQ7UJ0McPqE7AtzN3lvekhRke+WTpiAvBugnmQF0bA+VO3VMsHKj1LCb37h+Uyz a7WIJGYahlLEAxyb3k03xpe+nkgL6V4= -----END CERTIFICATE-----Generated at Sat Jul 26 15:47:40 2025 by rpki-client