$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa File: bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa (raw, json) Hash identifier: QzSvXBJECDd0WJWFTsEO46Qr6SnB1AboUr8gCVPM7XM= Subject key identifier: 91:D7:52:AD:D9:4E:BB:04:B7:73:62:00:8E:01:0C:25:3E:38:92:AC Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584B328C43FCAB8446E9ADC0BA00 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 32086 IP address blocks: 67.59.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:43:fc:ab:84:46:e9:ad:c0:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=270ea3a6-2e8f-42b4-899d-329954e86ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:30:32:fb:ea:d4:90:3d:f5:6a:1b:81:28: ea:16:f2:d1:3d:7e:8f:f8:29:66:9b:00:24:96:e2: 1d:8c:58:2a:03:b4:0a:80:d8:76:71:36:19:e5:78: c0:a2:90:8d:59:fb:58:e7:65:78:49:72:ba:74:89: 04:33:07:82:f9:02:a3:2d:79:c4:db:1f:dc:58:31: d4:6f:dd:99:85:a4:c8:2d:bd:59:5b:b4:57:fe:44: 40:97:00:e0:a7:07:78:d9:b4:58:99:90:95:25:c8: 91:48:9d:f9:d1:13:cf:f7:f5:17:56:e6:8a:d4:e4: 16:2a:98:a0:ba:8d:c2:a4:11:02:84:a0:79:4d:5b: dd:f2:8f:bd:9b:b7:2e:dd:6b:d5:ec:ae:98:05:9f: 9d:0d:63:01:65:87:3b:4d:eb:a6:e7:d4:34:b2:34: 05:db:55:c8:fc:13:26:84:d8:f1:01:b5:22:65:25: c2:4e:34:6d:39:c0:af:cf:7b:91:16:84:40:f2:50: 5a:98:bd:6f:62:b2:fa:a1:87:a6:9c:7c:6f:8d:15: 7a:d3:31:e0:e0:f2:6f:7e:e9:a0:3c:19:0b:de:74: c7:f9:7a:d3:04:39:80:ec:ad:7b:e4:63:ff:41:6b: ce:a7:a8:ab:c3:66:5a:8d:b4:b1:41:ba:16:92:0c: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D7:52:AD:D9:4E:BB:04:B7:73:62:00:8E:01:0C:25:3E:38:92:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.59.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:99:29:e4:7f:46:0a:cd:5b:5b:54:07:59:03:d2:b2:3a:61: 0d:9e:ad:64:52:2f:ff:49:d0:0c:f4:d4:6d:41:04:6b:9f:97: b4:75:25:78:a2:ba:29:1b:e3:c8:e1:ed:d9:f6:eb:32:f8:0c: 44:f6:25:92:f2:8e:d6:04:6b:3a:1c:0f:d3:de:4d:f1:ce:6a: b4:72:ba:08:f0:9c:a6:e5:af:4c:29:f9:fb:18:fe:69:86:82: ee:22:bb:aa:ee:14:5f:5b:2d:d8:0e:12:de:c2:b2:3a:a1:ab: e2:12:86:48:92:6c:19:69:88:62:4e:dd:75:01:81:db:c8:87: b9:3f:3b:aa:ef:60:e7:a1:71:de:61:2e:8c:d5:9f:76:d8:38: 86:99:8d:56:82:13:e8:e5:22:63:bb:dc:f9:06:37:fb:b6:b2: 1c:15:e4:9a:db:ef:cc:88:4f:72:ea:e1:e2:e9:be:57:79:dc: 74:15:53:ae:d4:ea:de:8e:00:fc:63:f7:aa:d8:aa:0f:73:75: a9:8e:59:b1:af:88:42:88:2d:21:16:88:29:a9:08:a0:cc:6a: ba:23:df:46:e6:2b:5e:2f:c9:e8:3c:1e:32:a0:13:a5:f1:db: e0:49:c5:df:02:b9:53:ff:b3:68:4e:8c:49:02:71:07:21:3c: 74:0a:95:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEP8q4RG6a3AugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MjcwZWEzYTYtMmU4Zi00MmI0LTg5OWQtMzI5OTU0ZTg2ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmkwMvvq1JA99WobgSjqFvLRPX6P+ClmmwAk luIdjFgqA7QKgNh2cTYZ5XjAopCNWftY52V4SXK6dIkEMweC+QKjLXnE2x/cWDHU b92ZhaTILb1ZW7RX/kRAlwDgpwd42bRYmZCVJciRSJ350RPP9/UXVuaK1OQWKpig uo3CpBEChKB5TVvd8o+9m7cu3WvV7K6YBZ+dDWMBZYc7Teum59Q0sjQF21XI/BMm hNjxAbUiZSXCTjRtOcCvz3uRFoRA8lBamL1vYrL6oYemnHxvjRV60zHg4PJvfumg PBkL3nTH+XrTBDmA7K175GP/QWvOp6irw2ZajbSxQboWkgzUcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHXUq3ZTrsEt3NiAI4BDCU+OJKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvYmY0OTQ0ZDEtOGI1My0z NzQ3LWI1YTAtZGJjYzIxNjQxNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWZKeR/RgrNW1tUB1kD0rI6YQ2erWRSL/9J0Az01G1BBGufl7R1JXii uikb48jh7dn26zL4DET2JZLyjtYEazocD9PeTfHOarRyugjwnKblr0wp+fsY/mmG gu4iu6ruFF9bLdgOEt7Csjqhq+IShkiSbBlpiGJO3XUBgdvIh7k/O6rvYOehcd5h LozVn3bYOIaZjVaCE+jlImO73PkGN/u2shwV5Jrb78yIT3Lq4eLpvld53HQVU67U 6t6OAPxj96rYqg9zdamOWbGviEKILSEWiCmpCKDMaroj30bmK14vyeg8HjKgE6Xx 2+BJxd8CuVP/s2hOjEkCcQchPHQKlaE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:39:00 2025 by rpki-client