$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa File: 1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa (raw, json) Hash identifier: k3WMu3KwEjQ+p+hpktm3/H9+Oxvtu2whkc+ZXUCAbEA= Subject key identifier: 9E:7B:2A:C8:59:E0:33:F9:E9:A6:EC:2F:C4:17:07:CE:63:3D:5C:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7B0AB7D88FDB975BE2500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.170.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:b0:ab:7d:88:fd:b9:75:be:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9edbb6a3-1c87-40a7-867b-77a7dcee2b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:5a:d6:92:0e:08:d6:fb:ef:ad:81:83:63: 02:b0:57:91:de:d1:97:55:bd:30:f4:2a:56:da:9a: ae:d1:0c:0a:bd:d0:fa:89:88:83:29:85:7a:f2:b4: 0a:58:15:f1:0f:02:c0:7c:04:d6:21:08:64:65:bd: 43:2e:c3:09:a0:6a:af:32:ad:02:e7:27:ca:37:ac: 4c:7a:7f:61:a8:a4:67:fe:2b:e8:49:7b:d0:58:1c: 5a:66:a2:f5:da:47:5c:71:ac:0f:d9:f1:f9:62:ff: d0:63:ab:90:99:5a:e5:27:f7:09:86:31:93:35:40: bf:e1:05:fb:35:97:00:d1:85:3b:e8:5e:f5:d5:b7: c3:6a:2b:e4:c7:0d:6d:67:6c:59:77:b5:9c:78:dc: 8b:b6:3b:d1:b1:5e:f3:40:a9:2b:c1:cb:c3:69:2b: 80:9d:43:90:3b:39:a9:f2:bb:cf:2c:ea:4c:9f:25: 2c:04:67:be:c9:2e:c2:ac:5c:90:ae:24:25:ef:67: 36:3a:8c:5a:fe:50:b6:55:da:a7:4d:3f:a8:b8:0f: d7:be:f8:4a:87:59:c2:7f:a0:ad:40:a4:e3:e1:bf: d7:85:21:ba:15:0f:69:de:b9:e6:18:b2:3d:2f:3a: 68:b5:d9:6f:1e:a5:25:c8:6a:8f:cc:c3:ff:f3:5a: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7B:2A:C8:59:E0:33:F9:E9:A6:EC:2F:C4:17:07:CE:63:3D:5C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b4:00:c3:4c:d5:43:57:d4:b8:3b:6e:91:fc:55:b4:af:99: 4d:a3:1c:7c:23:85:e0:98:cd:ad:f5:cc:45:85:ec:2f:71:ed: 21:8d:4a:79:96:c8:46:0d:fb:5f:b8:3a:97:77:13:e9:8f:d0: 5d:9d:5d:72:d0:fc:7e:96:12:ab:3d:7d:2a:ba:0b:3e:df:0c: 0d:d1:57:ac:5f:7f:8a:b9:72:09:49:2a:c9:b3:f4:06:a3:b8: 9f:35:7a:99:e0:c4:58:34:29:e8:28:66:db:7c:55:1d:f4:c1: a3:b6:9c:38:88:fd:95:26:14:e8:fa:b4:47:16:84:b9:b3:b9: 30:64:dd:b9:84:9e:08:09:cb:ec:8e:7b:0b:dd:48:d5:e6:8e: 3b:ea:e9:20:6c:cc:2a:e5:63:ec:2a:83:2f:80:da:d3:0d:f4: e0:22:9f:01:d1:12:27:2a:80:44:f0:f2:2f:22:22:11:bd:5c: 1a:f0:13:7a:82:e9:5c:aa:e6:91:89:2a:1d:22:65:5f:c6:87: a8:d8:c9:97:77:ef:b4:87:4a:01:1b:11:99:53:58:d5:de:3a: 3e:c3:38:22:e2:b3:b0:51:a3:aa:09:f8:c5:1f:28:7e:0f:a5: ea:9b:4a:d9:01:0c:c6:99:63:84:15:fc:cc:8c:3f:3f:81:a6: f8:01:ee:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7CrfYj9uXW+JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWVkYmI2YTMtMWM4Ny00MGE3LTg2N2ItNzdhN2RjZWUyYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aJa1pIOCNb7762Bg2MCsFeR3tGXVb0w9CpW 2pqu0QwKvdD6iYiDKYV68rQKWBXxDwLAfATWIQhkZb1DLsMJoGqvMq0C5yfKN6xM en9hqKRn/ivoSXvQWBxaZqL12kdccawP2fH5Yv/QY6uQmVrlJ/cJhjGTNUC/4QX7 NZcA0YU76F711bfDaivkxw1tZ2xZd7WceNyLtjvRsV7zQKkrwcvDaSuAnUOQOzmp 8rvPLOpMnyUsBGe+yS7CrFyQriQl72c2Ooxa/lC2VdqnTT+ouA/XvvhKh1nCf6Ct QKTj4b/XhSG6FQ9p3rnmGLI9LzpotdlvHqUlyGqPzMP/81p9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ57KshZ4DP56absL8QXB85jPVz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWViYTFmOTgtODNlYi0z YThkLThlYzUtNTRmMGI5YTg0ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6qIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS0AMNM1UNX1Lg7bpH8VbSvmU2jHHwjheCYza31zEWF7C9x7SGNSnmW yEYN+1+4Opd3E+mP0F2dXXLQ/H6WEqs9fSq6Cz7fDA3RV6xff4q5cglJKsmz9Aaj uJ81epngxFg0KegoZtt8VR30waO2nDiI/ZUmFOj6tEcWhLmzuTBk3bmEnggJy+yO ewvdSNXmjjvq6SBszCrlY+wqgy+A2tMN9OAinwHREicqgETw8i8iIhG9XBrwE3qC 6Vyq5pGJKh0iZV/Gh6jYyZd377SHSgEbEZlTWNXeOj7DOCLis7BRo6oJ+MUfKH4P peqbStkBDMaZY4QV/MyMPz+BpvgB7iU= -----END CERTIFICATE-----Generated at Tue Oct 21 19:17:02 2025 by rpki-client