$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1daee083-a244-3874-8497-ba5ff3dd13bf.roa File: 1daee083-a244-3874-8497-ba5ff3dd13bf.roa (raw, json) Hash identifier: X1GxN1gLKHTicalxsEIec4h9yKvnsU5zX4j/vBEmc7A= Subject key identifier: CB:55:A6:65:0F:DA:69:B7:8E:F3:56:8F:45:B3:35:12:91:02:4B:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA4E502044221D9BF67880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1daee083-a244-3874-8497-ba5ff3dd13bf.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 67.167.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:4e:50:20:44:22:1d:9b:f6:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9f3cccca-6dbd-4fc6-a71b-164368f653d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:8d:ec:15:ec:02:0b:41:ff:cc:9b:53:be: 6b:aa:36:52:7a:30:51:04:c2:be:47:a3:d6:ee:c4: 7b:cb:0b:10:94:17:a0:f9:2e:a7:64:89:51:79:40: f1:f2:af:71:57:40:ff:07:ab:7e:06:e7:6c:c6:74: bb:d0:f3:88:ac:32:a7:86:25:a5:1d:7f:88:f2:fc: 4a:5c:d1:c9:0b:05:9a:2b:fc:b9:ae:0b:85:c8:7c: a8:ba:17:38:4f:a3:1b:60:d5:8e:86:76:94:e7:ed: ef:70:78:a5:6f:b7:30:f0:28:27:5a:30:8f:2e:f4: 1d:39:86:f6:f4:23:0f:61:12:78:68:76:e1:43:45: fe:47:31:00:a7:8b:9b:48:9b:e4:13:27:0a:8e:6b: 5b:e6:ef:3e:40:27:36:07:71:af:fa:06:cf:e8:ea: 0c:d3:c8:7e:94:d2:ee:3f:72:4c:c1:0d:63:4b:63: 7c:37:81:f7:b4:69:28:20:fc:8f:2f:51:03:e1:5b: 5c:f0:ad:ed:2a:f0:ea:2e:a0:10:15:28:80:d0:9a: 81:55:ca:7b:2f:56:7b:09:87:be:76:72:db:c6:15: 4c:5a:a6:71:5d:a6:03:4a:b1:e3:cc:1c:0d:b3:72: 83:10:c2:63:8f:c9:dd:71:fb:ec:e7:8f:e6:7b:3f: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:55:A6:65:0F:DA:69:B7:8E:F3:56:8F:45:B3:35:12:91:02:4B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1daee083-a244-3874-8497-ba5ff3dd13bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:86:39:62:fc:6e:4c:fc:cd:41:7c:a7:e1:11:5f:a7:a3:7d: 19:c9:71:dd:1b:7d:62:4a:1d:57:e3:41:b4:53:a8:b5:13:27: f3:35:ee:54:de:9b:36:ab:1e:72:c4:49:38:d6:66:e1:4f:67: 4f:b8:69:ff:8b:86:30:41:5b:4b:b4:10:5b:07:b2:57:68:7f: 25:ec:54:df:70:2e:d3:63:b1:ff:ed:0c:42:a8:49:db:b5:51: 13:aa:b7:fb:85:a9:d7:c1:b1:41:5b:9d:e8:67:40:21:3f:42: d9:a8:c1:c9:65:74:0e:6a:6d:30:83:f8:0d:1b:09:f8:e1:9b: 3e:b9:29:fe:76:ff:19:64:96:15:fa:e3:10:f4:ad:b5:22:b6: 79:6f:b3:ad:a5:bc:d5:d4:5c:a9:9d:7f:fa:45:79:75:61:f7: d6:4e:d8:b9:e9:83:92:55:4d:cf:cb:52:de:9d:a5:06:d8:18: 65:dc:6a:1b:e3:02:95:3e:f9:56:da:04:7e:a9:0f:b3:47:e1: b1:67:53:87:c2:e0:91:b9:77:2d:d1:4f:9f:5a:ea:d2:91:46: 08:47:8e:a5:63:13:b9:e2:c7:fa:e3:16:29:96:9e:6d:f8:6b: 98:73:d2:1f:41:13:b3:b3:a2:a1:93:98:9e:6e:2b:66:ff:2d: 09:9d:4d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqk5QIEQiHZv2eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWYzY2NjY2EtNmRiZC00ZmM2LWE3MWItMTY0MzY4ZjY1M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4CN7BXsAgtB/8ybU75rqjZSejBRBMK+R6PW 7sR7ywsQlBeg+S6nZIlReUDx8q9xV0D/B6t+BudsxnS70POIrDKnhiWlHX+I8vxK XNHJCwWaK/y5rguFyHyouhc4T6MbYNWOhnaU5+3vcHilb7cw8CgnWjCPLvQdOYb2 9CMPYRJ4aHbhQ0X+RzEAp4ubSJvkEycKjmtb5u8+QCc2B3Gv+gbP6OoM08h+lNLu P3JMwQ1jS2N8N4H3tGkoIPyPL1ED4Vtc8K3tKvDqLqAQFSiA0JqBVcp7L1Z7CYe+ dnLbxhVMWqZxXaYDSrHjzBwNs3KDEMJjj8ndcfvs54/mez/+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtVpmUP2mm3jvNWj0WzNRKRAkvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWRhZWUwODMtYTI0NC0z ODc0LTg0OTctYmE1ZmYzZGQxM2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKGOWL8bkz8zUF8p+ERX6ejfRnJcd0bfWJKHVfjQbRTqLUTJ/M17lTe mzarHnLESTjWZuFPZ0+4af+LhjBBW0u0EFsHsldofyXsVN9wLtNjsf/tDEKoSdu1 UROqt/uFqdfBsUFbnehnQCE/QtmowclldA5qbTCD+A0bCfjhmz65Kf52/xlklhX6 4xD0rbUitnlvs62lvNXUXKmdf/pFeXVh99ZO2Lnpg5JVTc/LUt6dpQbYGGXcahvj ApU++VbaBH6pD7NH4bFnU4fC4JG5dy3RT59a6tKRRghHjqVjE7nix/rjFimWnm34 a5hz0h9BE7OzoqGTmJ5uK2b/LQmdTaY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:46:41 2025 by rpki-client