$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd12f79-4984-3abb-8370-82a3b8e18508.roa File: bfd12f79-4984-3abb-8370-82a3b8e18508.roa (raw, json) Hash identifier: ilPoYzgij62hRjkqw30AvLPfVGm+RlTfyfcnHv3DGUM= Subject key identifier: CB:78:81:84:34:B3:6B:28:B9:B5:94:5B:02:22:53:36:B2:9D:F0:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7B15A0CC2C57FDBDE2540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd12f79-4984-3abb-8370-82a3b8e18508.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.170.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:b1:5a:0c:c2:c5:7f:db:de:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e12a9f37-72f3-4d33-b463-60abd634cd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1c:0c:40:5f:da:e6:0f:76:1b:15:97:12:83: 8b:e7:ed:c8:d9:6c:db:12:d7:50:de:00:7d:c0:03: ec:60:9a:04:07:81:c2:97:35:b9:7c:dd:d3:37:77: 4e:bf:bc:ab:68:95:2e:1f:a2:32:9f:1e:64:18:8a: a0:db:7b:d1:fa:d6:72:77:b1:fc:83:25:09:71:78: 0f:48:34:f9:a5:e0:3a:34:c1:43:3b:81:e2:6d:58: 0c:07:46:2e:e5:f1:dd:04:10:e2:ef:35:0b:8a:31: 35:f7:e5:6d:66:b2:db:f0:f2:bc:2e:79:7a:9a:62: 4a:8d:56:c1:a7:0d:a5:7d:45:36:aa:f7:1b:eb:ef: 6b:64:c9:f7:61:57:08:c0:45:65:2e:3d:f9:da:ca: 82:c5:9d:e2:02:b4:a4:11:31:18:99:f5:35:e3:a6: af:e3:76:6d:2d:b4:1f:90:83:48:f4:e7:3d:08:f3: 76:21:a7:94:81:ff:6b:6f:a0:03:ee:d8:66:19:1b: 69:f3:6c:51:fb:89:84:46:08:6a:8d:ed:47:f3:f7: 20:1e:93:11:d5:d8:a1:5f:f1:90:4f:bc:a2:a9:0d: 07:96:2d:d9:f7:cd:14:e0:16:36:b7:d5:40:f1:ed: 1d:61:24:5a:0b:83:89:26:a8:2d:60:62:ef:91:f6: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:81:84:34:B3:6B:28:B9:B5:94:5B:02:22:53:36:B2:9D:F0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd12f79-4984-3abb-8370-82a3b8e18508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:5f:af:eb:fb:b2:cb:d3:84:7c:ca:82:1f:09:a2:53:4e:0c: 44:4f:9f:ac:47:11:be:c6:45:eb:c6:1d:d5:cc:45:68:96:7f: 01:d6:ad:52:05:f2:3f:0e:11:4e:e2:0f:36:fb:51:67:e0:fc: 8a:9a:a9:8c:94:d0:f0:ea:5b:32:62:13:ce:41:cc:46:02:34: d7:88:04:a4:f1:c3:1e:7f:ce:6d:17:fc:20:7b:e9:2a:5c:37: 05:be:7f:4e:d6:75:7e:71:3f:86:d0:25:ff:32:a6:87:54:85: d4:67:b7:1f:75:f5:dd:ff:f1:ee:f2:bc:34:19:79:fc:45:40: 63:10:32:2e:b0:0a:8b:16:13:23:b3:84:68:ca:77:ec:91:40: f2:f3:ce:d6:39:73:63:12:2a:ba:3b:84:fd:09:48:ae:0c:e0: 22:eb:2e:53:cc:5d:07:48:fe:8e:f6:93:2d:fa:fc:42:7f:61: 2a:7c:dc:0f:e3:ab:d3:72:8c:fd:30:e8:ff:b8:3e:69:3b:e3: a6:c5:8c:8c:d0:d3:e9:88:0e:c1:02:82:1d:eb:b6:74:a6:a7: 69:13:f5:f3:6a:1e:d2:24:8f:a7:cf:66:f3:4e:df:bd:d6:3c: bb:9d:4c:3d:fc:4c:a1:5f:a3:61:0f:84:6e:e3:23:48:f1:1f: 67:08:dc:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7FaDMLFf9veJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTEyYTlmMzctNzJmMy00ZDMzLWI0NjMtNjBhYmQ2MzRjZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRwMQF/a5g92GxWXEoOL5+3I2WzbEtdQ3gB9 wAPsYJoEB4HClzW5fN3TN3dOv7yraJUuH6Iynx5kGIqg23vR+tZyd7H8gyUJcXgP SDT5peA6NMFDO4HibVgMB0Yu5fHdBBDi7zULijE19+VtZrLb8PK8Lnl6mmJKjVbB pw2lfUU2qvcb6+9rZMn3YVcIwEVlLj352sqCxZ3iArSkETEYmfU146av43ZtLbQf kINI9Oc9CPN2IaeUgf9rb6AD7thmGRtp82xR+4mERghqje1H8/cgHpMR1dihX/GQ T7yiqQ0Hli3Z980U4BY2t9VA8e0dYSRaC4OJJqgtYGLvkfZf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt4gYQ0s2soubWUWwIiUzaynfDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkMTJmNzktNDk4NC0z YWJiLTgzNzAtODJhM2I4ZTE4NTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBfr+v7ssvThHzKgh8JolNODERPn6xHEb7GRevGHdXMRWiWfwHWrVIF 8j8OEU7iDzb7UWfg/IqaqYyU0PDqWzJiE85BzEYCNNeIBKTxwx5/zm0X/CB76Spc NwW+f07WdX5xP4bQJf8ypodUhdRntx919d3/8e7yvDQZefxFQGMQMi6wCosWEyOz hGjKd+yRQPLzztY5c2MSKro7hP0JSK4M4CLrLlPMXQdI/o72ky36/EJ/YSp83A/j q9NyjP0w6P+4Pmk746bFjIzQ0+mIDsECgh3rtnSmp2kT9fNqHtIkj6fPZvNO373W PLudTD38TKFfo2EPhG7jI0jxH2cI3Co= -----END CERTIFICATE-----Generated at Tue Oct 21 19:33:44 2025 by rpki-client