$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4c16fa-17dc-385c-bb08-f828318586ba.roa File: 7e4c16fa-17dc-385c-bb08-f828318586ba.roa (raw, json) Hash identifier: mY95OsqXgwK1YN3r+ma9Fk8Zron5Os9aLZjBfuCRiYU= Subject key identifier: 1E:C3:46:81:84:5B:65:EE:6E:2B:E9:3C:E9:73:6A:3E:13:B9:86:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7B209259CEF837717B5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4c16fa-17dc-385c-bb08-f828318586ba.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.171.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:b2:09:25:9c:ef:83:77:17:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2cdd4eb6-542e-4927-8d01-4d1b881f87b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:60:53:64:97:e8:06:0d:0c:be:76:ea:44: 5b:76:c6:ea:9a:dd:38:7d:39:4c:ee:c5:e7:05:e9: f6:34:61:38:96:de:71:4e:76:64:a0:ac:95:1a:8f: 79:20:2b:49:9e:57:14:b8:6e:07:37:e6:83:9b:77: 8e:27:c4:3d:ae:a1:7b:5d:17:ba:ff:b0:dc:a3:86: 86:57:26:78:82:98:ac:3a:f9:be:4a:8b:d6:88:68: f8:83:42:29:6b:f0:b8:e0:18:fe:b0:7c:55:d1:7c: dd:58:e9:5d:03:e8:4b:76:69:d1:7e:a8:ab:c0:79: 9f:34:38:36:d6:34:83:b9:79:1d:c5:8d:6b:e7:c2: 73:e8:53:0c:fb:12:b5:8f:d6:74:f2:11:38:d6:e6: fc:ac:f1:d4:1a:60:19:22:03:2e:fa:6e:24:8c:6c: 6a:0a:24:7e:d9:6c:82:40:b6:06:1c:b8:15:dc:1a: f0:f5:5d:3d:d4:e7:0c:3f:51:af:4d:0c:6c:74:f3: 07:15:54:cf:7d:51:da:7c:13:32:14:51:d7:b5:1d: 19:c5:eb:08:ed:69:cf:da:07:6f:ab:16:a9:7a:1d: 3b:73:95:f3:f1:2c:43:4c:bb:bc:cd:57:bc:fc:d1: 2c:28:c7:e2:fa:7e:7a:e3:2f:b3:5f:3d:61:d0:da: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C3:46:81:84:5B:65:EE:6E:2B:E9:3C:E9:73:6A:3E:13:B9:86:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4c16fa-17dc-385c-bb08-f828318586ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:73:a7:78:ac:12:5c:45:e8:df:e0:06:a7:e0:c0:42:01:2a: de:28:62:00:fa:9c:8c:3f:62:ce:7c:a8:76:92:53:cd:ea:6a: 00:e6:10:3f:63:fb:2f:5c:6b:1c:9b:2a:0d:5c:51:05:60:10: 45:7d:16:13:5c:4b:25:cd:65:7d:d4:c9:ea:b5:3e:5a:95:90: 09:8d:25:af:aa:15:80:ec:83:0a:66:8b:79:1f:e7:6b:c3:01: 73:b6:9f:89:df:79:ed:35:4d:f1:1b:6f:d8:89:61:26:f1:43: 93:f0:84:e3:6f:29:31:1e:e3:a0:49:02:18:1a:7f:e1:da:3b: ff:3a:73:d8:38:79:4a:9b:61:16:40:5a:27:fd:49:dd:a3:45: 28:b0:ef:f3:a6:d9:b0:55:54:5b:f7:c6:be:46:ee:16:1b:e9: ad:c1:85:fa:cf:2a:59:a1:48:84:da:38:cb:da:43:87:5f:9e: 1c:cf:89:e0:bd:2f:33:d0:ed:04:9c:a9:fd:23:b3:76:2d:ea: 13:75:7b:c8:a5:5b:3f:b7:d9:e4:5c:88:ae:a9:80:84:b7:6d: 7a:32:05:62:3c:67:a8:e3:ff:e6:42:10:79:6d:90:71:68:05: d6:cc:44:76:ff:a4:15:e1:de:5e:2f:d4:23:4c:0e:f5:a1:ce: a9:c3:4b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7IJJZzvg3cXtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmNkZDRlYjYtNTQyZS00OTI3LThkMDEtNGQxYjg4MWY4N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBtgU2SX6AYNDL526kRbdsbqmt04fTlM7sXn Ben2NGE4lt5xTnZkoKyVGo95ICtJnlcUuG4HN+aDm3eOJ8Q9rqF7XRe6/7Dco4aG VyZ4gpisOvm+SovWiGj4g0Ipa/C44Bj+sHxV0XzdWOldA+hLdmnRfqirwHmfNDg2 1jSDuXkdxY1r58Jz6FMM+xK1j9Z08hE41ub8rPHUGmAZIgMu+m4kjGxqCiR+2WyC QLYGHLgV3Brw9V091OcMP1GvTQxsdPMHFVTPfVHafBMyFFHXtR0ZxesI7WnP2gdv qxapeh07c5Xz8SxDTLu8zVe8/NEsKMfi+n564y+zXz1h0NrsuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7DRoGEW2XubivpPOlzaj4TuYY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U0YzE2ZmEtMTdkYy0z ODVjLWJiMDgtZjgyODMxODU4NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6uwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9zp3isElxF6N/gBqfgwEIBKt4oYgD6nIw/Ys58qHaSU83qagDmED9j +y9caxybKg1cUQVgEEV9FhNcSyXNZX3Uyeq1PlqVkAmNJa+qFYDsgwpmi3kf52vD AXO2n4nfee01TfEbb9iJYSbxQ5PwhONvKTEe46BJAhgaf+HaO/86c9g4eUqbYRZA Wif9Sd2jRSiw7/Om2bBVVFv3xr5G7hYb6a3BhfrPKlmhSITaOMvaQ4dfnhzPieC9 LzPQ7QScqf0js3Yt6hN1e8ilWz+32eRciK6pgIS3bXoyBWI8Z6jj/+ZCEHltkHFo BdbMRHb/pBXh3l4v1CNMDvWhzqnDS1o= -----END CERTIFICATE-----Generated at Tue Oct 21 19:34:31 2025 by rpki-client