$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe59f363-17a3-38f4-8d7d-a27bad695a78.roa File: fe59f363-17a3-38f4-8d7d-a27bad695a78.roa (raw, json) Hash identifier: /pkokbibFIRvJQcgE0Lu5V+UuAQ8MA/65DtmuHvy290= Subject key identifier: 7C:E7:EF:00:5B:68:69:E9:BF:0A:DC:BA:84:9A:49:9F:98:CA:E0:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A95F0D390DA0EDCEA07880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe59f363-17a3-38f4-8d7d-a27bad695a78.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.169.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:5f:0d:39:0d:a0:ed:ce:a0:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9732710d-0cdd-44e3-991f-b9c153ac30be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:5d:59:98:14:e4:a9:9d:d8:03:80:6b:d6: 97:1a:39:11:c6:ec:7a:19:36:17:24:4d:de:2d:84: 5d:54:ed:bb:13:c5:0b:68:bc:79:eb:04:97:81:56: ad:a8:72:6d:85:47:e2:a4:29:8f:c7:57:ec:7e:8d: 48:45:f4:b6:ce:3d:01:1e:dc:93:bf:d5:02:4d:a8: 9f:2e:b7:95:b5:fa:c2:44:cf:e9:ea:23:c3:6e:32: ec:1c:fd:f0:13:13:f2:5a:ce:2e:69:cc:b1:ee:64: 03:7b:e2:b3:e7:8e:19:21:d8:b7:75:34:3d:7f:5e: 0a:47:a0:ba:62:5c:3c:55:5e:6e:e0:c3:71:1c:72: 0c:c5:c0:25:1d:d3:47:95:34:23:85:61:03:55:e1: d2:8a:76:53:8f:cc:b1:5b:e0:3d:98:44:f3:8e:11: 1a:55:8c:15:62:dc:8c:b1:72:51:1e:fe:17:5f:92: e2:52:8d:9c:f5:60:89:68:89:cd:a4:e2:2a:ae:fa: 6d:57:4c:78:d4:8d:38:c3:7f:8f:d7:ed:c8:0a:c3: 98:00:22:57:6b:77:5f:0f:8f:19:99:d4:b0:0f:c2: 60:28:56:fb:0c:88:0e:f6:52:6f:ec:e7:b5:f7:eb: 2c:aa:0a:0b:aa:03:8f:07:7d:aa:42:45:8f:e9:f8: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E7:EF:00:5B:68:69:E9:BF:0A:DC:BA:84:9A:49:9F:98:CA:E0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe59f363-17a3-38f4-8d7d-a27bad695a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:af:86:5c:b3:9a:2e:d0:fd:12:3e:b3:ca:6b:a3:cb:63:0c: ef:2b:bc:8d:9a:e6:4c:83:c0:9f:3d:e4:22:05:e4:22:1b:99: 67:7f:20:73:7c:52:7a:c9:a7:d3:47:f8:13:b8:f9:28:29:49: 30:02:f1:c7:5f:ea:60:c7:80:d6:0a:c2:cd:61:c9:5e:67:da: 9b:5d:19:37:8f:65:ff:41:c9:8b:24:84:10:65:74:01:c9:45: 7a:26:e2:9e:b0:45:c3:c3:72:00:82:b1:11:09:e3:5e:29:33: 85:15:74:1c:37:98:1a:1d:0c:7d:eb:d9:c7:e3:0c:9e:bd:4f: 46:34:99:36:2c:92:78:9f:1d:75:59:32:ea:63:bf:3f:50:44: 7c:20:2b:e6:d3:41:a7:0f:d1:ed:6e:fb:b8:84:36:1b:88:48: f0:59:df:db:e7:85:9a:7b:5f:8b:5d:11:02:f2:f7:b9:dd:b0: 77:33:05:d3:b0:88:69:0d:e3:28:c5:f4:51:d2:e3:95:41:0f: 11:e3:a9:e2:22:eb:4c:e0:c8:8c:9d:5e:75:09:20:79:01:08: 72:75:78:61:9d:11:d9:ca:d7:7d:2f:6c:d3:53:f3:d6:5b:de: 11:1d:6a:c8:d7:9a:f4:13:30:ab:49:df:83:ad:b4:0d:73:d3: fe:4e:fc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqV8NOQ2g7c6geIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTczMjcxMGQtMGNkZC00NGUzLTk5MWYtYjljMTUzYWMzMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4xdWZgU5Kmd2AOAa9aXGjkRxux6GTYXJE3e LYRdVO27E8ULaLx56wSXgVatqHJthUfipCmPx1fsfo1IRfS2zj0BHtyTv9UCTaif LreVtfrCRM/p6iPDbjLsHP3wExPyWs4uacyx7mQDe+Kz544ZIdi3dTQ9f14KR6C6 Ylw8VV5u4MNxHHIMxcAlHdNHlTQjhWEDVeHSinZTj8yxW+A9mETzjhEaVYwVYtyM sXJRHv4XX5LiUo2c9WCJaInNpOIqrvptV0x41I04w3+P1+3ICsOYACJXa3dfD48Z mdSwD8JgKFb7DIgO9lJv7Oe19+ssqgoLqgOPB32qQkWP6fjQ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzn7wBbaGnpvwrcuoSaSZ+YyuBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmU1OWYzNjMtMTdhMy0z OGY0LThkN2QtYTI3YmFkNjk1YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMuvhlyzmi7Q/RI+s8pro8tjDO8rvI2a5kyDwJ895CIF5CIbmWd/IHN8 UnrJp9NH+BO4+SgpSTAC8cdf6mDHgNYKws1hyV5n2ptdGTePZf9ByYskhBBldAHJ RXom4p6wRcPDcgCCsREJ414pM4UVdBw3mBodDH3r2cfjDJ69T0Y0mTYsknifHXVZ Mupjvz9QRHwgK+bTQacP0e1u+7iENhuISPBZ39vnhZp7X4tdEQLy97ndsHczBdOw iGkN4yjF9FHS45VBDxHjqeIi60zgyIydXnUJIHkBCHJ1eGGdEdnK130vbNNT89Zb 3hEdasjXmvQTMKtJ34OttA1z0/5O/JA= -----END CERTIFICATE-----Generated at Tue Oct 21 19:29:39 2025 by rpki-client