$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa File: 4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa (raw, json) Hash identifier: T5BW9SHhwVT0Yv+UvuVV/I3jot22cQeWZaOUkQ9kFzw= Subject key identifier: 0B:5A:7B:48:A3:F9:B1:1B:CC:03:12:6F:B2:29:AB:FE:5F:F9:BA:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A95F5D6C4D1805B0B119E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.170.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:5f:5d:6c:4d:18:05:b0:b1:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d14416af-6722-4984-8ceb-2f7678186182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:e5:05:f1:09:8c:ee:0b:1c:30:73:b2:0b: 12:5a:af:d6:2c:c7:24:0f:26:0c:14:47:32:7d:9c: 9f:5e:34:a3:65:cf:b1:c0:d0:87:1a:27:05:99:65: dd:61:03:84:22:c7:5e:9e:17:d0:da:84:4e:92:67: d9:00:2b:70:15:20:0c:7b:5e:6b:0b:c2:d3:78:bc: b0:28:72:f4:ce:4e:4f:43:cf:6a:a9:7d:d2:59:71: 1f:9a:0e:8d:7c:c8:b0:f0:a5:f2:5b:62:88:18:16: 2a:ee:3d:1a:e0:12:de:ff:f3:c3:62:6b:30:ab:56: 9d:83:a2:6f:e4:9a:7b:42:a2:7a:46:12:53:38:18: be:ea:f8:cf:82:59:60:18:65:cf:a3:fb:6c:06:e4: 25:9f:c9:66:97:85:4c:67:48:40:0a:9c:e0:de:c2: 7e:52:45:a8:a4:b2:0a:73:eb:09:0c:4a:81:c5:5e: 53:f6:c8:63:0b:41:95:d8:f8:63:b1:68:6e:5f:9c: 2e:19:25:e8:85:94:86:e3:06:32:58:63:8f:ae:6c: ed:16:7a:3b:d0:a5:42:f6:d6:e0:fe:b8:79:f8:10: d7:4a:ea:d6:e0:09:d8:5e:4a:41:4b:30:e2:f5:c0: 5b:ef:5f:5f:e7:16:29:b1:f9:f1:3a:9f:8f:16:5f: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5A:7B:48:A3:F9:B1:1B:CC:03:12:6F:B2:29:AB:FE:5F:F9:BA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:70:04:2c:0c:ea:4c:ec:79:66:2a:5a:1a:19:b3:6e:d8:77: 2e:9f:c2:9a:e7:71:03:4e:6d:ad:8c:00:b2:83:d3:83:9e:70: 3a:9f:75:33:04:db:20:52:f7:65:a2:5b:e7:39:e1:17:f4:1b: bc:f7:eb:d4:7b:f1:50:07:38:07:d0:c2:c3:fb:5a:9c:1e:1c: c6:37:82:c9:de:78:98:df:33:49:18:f5:45:40:ac:a8:59:a3: 7f:48:ba:db:92:23:70:11:59:a4:28:92:56:bb:9a:72:c1:ae: 18:2a:f8:d4:4e:08:01:25:7a:dd:21:5b:67:0b:9c:c5:93:33: 2b:03:7a:f1:cb:d8:d1:91:b5:fa:92:bc:61:f9:1a:9f:17:e0: 1e:53:c2:4e:49:01:06:0d:0a:7d:df:43:6c:c1:fd:75:ad:1e: aa:65:92:8c:93:55:c6:c3:d3:04:1d:0d:7e:b5:87:1f:93:99: 8a:3e:b4:1d:7a:f4:81:aa:b7:d1:df:d4:bb:06:66:2a:d9:bc: fd:97:fa:2c:0f:f9:d5:d1:16:d6:72:5d:ea:eb:52:9a:a6:0c: 8a:55:2a:24:7e:6b:07:5a:d5:e8:f9:8c:bf:f0:03:97:de:b5: 4b:16:e6:7a:11:34:e6:e0:d0:2e:91:b0:89:61:51:88:b6:73: d2:37:78:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqV9dbE0YBbCxGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDE0NDE2YWYtNjcyMi00OTg0LThjZWItMmY3Njc4MTg2MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlHlBfEJjO4LHDBzsgsSWq/WLMckDyYMFEcy fZyfXjSjZc+xwNCHGicFmWXdYQOEIsdenhfQ2oROkmfZACtwFSAMe15rC8LTeLyw KHL0zk5PQ89qqX3SWXEfmg6NfMiw8KXyW2KIGBYq7j0a4BLe//PDYmswq1adg6Jv 5Jp7QqJ6RhJTOBi+6vjPgllgGGXPo/tsBuQln8lml4VMZ0hACpzg3sJ+UkWopLIK c+sJDEqBxV5T9shjC0GV2PhjsWhuX5wuGSXohZSG4wYyWGOPrmztFno70KVC9tbg /rh5+BDXSurW4AnYXkpBSzDi9cBb719f5xYpsfnxOp+PFl9FPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtae0ij+bEbzAMSb7Ipq/5f+bowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGUzZjFlMGMtMDgyZS0z MTQ0LWEzNWUtM2FhNGU4NDcwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVwBCwM6kzseWYqWhoZs27Ydy6fwprncQNOba2MALKD04OecDqfdTME 2yBS92WiW+c54Rf0G7z369R78VAHOAfQwsP7WpweHMY3gsneeJjfM0kY9UVArKhZ o39IutuSI3ARWaQokla7mnLBrhgq+NROCAElet0hW2cLnMWTMysDevHL2NGRtfqS vGH5Gp8X4B5Twk5JAQYNCn3fQ2zB/XWtHqplkoyTVcbD0wQdDX61hx+TmYo+tB16 9IGqt9Hf1LsGZirZvP2X+iwP+dXRFtZyXerrUpqmDIpVKiR+awda1ej5jL/wA5fe tUsW5noRNObg0C6RsIlhUYi2c9I3eDA= -----END CERTIFICATE-----Generated at Tue Oct 21 19:30:05 2025 by rpki-client