$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa File: 28986011-044d-3ddc-91d9-ea7ed00e5470.roa (raw, json) Hash identifier: SZ4jcG+ra90x0uz1j80fFoqv0tWcE/aigvqCpmouUgY= Subject key identifier: 85:87:1F:A6:29:EC:5A:1A:C7:83:37:2E:94:8D:13:F5:11:12:CC:94 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584B0746C5846D866384EF9B5200 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 36692 IP address blocks: 67.215.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c5:84:6d:86:63:84:ef:9b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=d2d60c57-56d1-4384-8441-38b880164e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:f9:47:3a:e6:e0:5e:50:ea:d8:fb:18:96: fd:bc:06:5c:e1:03:62:68:34:37:47:8d:c3:e1:b6: 4d:c9:36:5d:09:38:ca:84:70:8c:e2:00:9e:a7:cd: 9a:7a:03:97:42:53:fb:66:00:66:32:b0:73:45:d9: 92:bd:0b:e2:56:f7:fa:7c:de:af:18:93:22:cb:84: 29:9e:3d:8f:c1:08:04:33:c5:af:ff:8f:ad:f9:45: 7f:a5:f4:ea:18:7f:68:c4:38:a0:fe:0f:d0:11:5a: a1:bb:f8:31:69:2e:d4:e3:15:51:4f:42:84:15:d6: 78:58:f8:c1:c0:93:be:8a:00:c7:47:cf:ad:1f:e4: 63:f2:eb:07:c2:09:6c:b8:44:ed:51:aa:20:fc:b8: d7:6d:92:12:25:70:c4:00:f6:45:2d:90:90:41:c2: 2d:f1:4d:1d:f0:0c:53:dd:41:6f:62:62:4f:3a:ec: 0f:03:9e:18:0f:9f:20:a6:e7:56:b4:42:51:53:5d: be:50:a9:43:19:b7:d1:10:b9:73:77:41:a8:3a:23: f0:4c:fb:e1:f3:f3:52:fe:53:1f:8e:82:f8:86:fc: 3f:d6:a4:35:a9:13:33:f6:90:fe:28:d4:9a:c1:80: 96:84:8a:04:02:1f:09:30:f2:00:06:f6:ba:f5:9f: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:1F:A6:29:EC:5A:1A:C7:83:37:2E:94:8D:13:F5:11:12:CC:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 67.215.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a0:b8:e5:f4:ef:f2:1a:5f:e1:c5:5d:7e:2b:3b:9c:19:bc: f7:6b:63:d6:a0:a5:ef:f0:39:11:4a:30:31:52:24:7f:ac:c8: 27:56:f0:67:ef:74:af:c2:83:1b:46:f6:e2:a3:2f:de:14:46: 92:81:8a:33:63:c5:67:17:cb:89:07:ce:10:9a:31:e8:c6:d0: 20:18:1e:dd:b3:c9:85:cc:5e:e2:f4:6a:1e:41:de:ee:a1:9f: 26:5d:74:f6:9c:df:ec:51:8a:e7:40:b6:c8:55:a5:4b:dc:49: 64:e8:2f:7a:8d:82:15:24:fc:0c:9b:27:c1:51:66:cb:c9:f4: 68:26:5f:51:21:3a:c2:6b:07:75:72:fa:29:80:0b:6e:9d:ca: d1:e0:04:b7:29:d1:64:44:66:1e:f2:07:60:48:5d:e6:1f:6f: 56:c1:dc:f3:22:8a:16:3c:2e:db:a8:75:92:2d:21:48:7c:de: 15:ca:2c:fb:48:20:2f:15:37:2f:19:89:6d:26:b4:8f:8f:1c: e3:6e:79:f8:7c:22:68:d5:c6:f5:98:0b:c5:77:a3:4b:af:67: a3:48:d1:ca:c5:71:5f:17:d7:bb:db:f6:2f:a4:c8:ab:ed:03: 44:67:c8:5e:a8:a4:42:02:0d:bc:c5:f8:bc:b9:de:2a:05:e3: 9d:60:84:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsWEbYZjhO+bUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZDJkNjBjNTctNTZkMS00Mzg0LTg0NDEtMzhiODgwMTY0ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjz5Rzrm4F5Q6tj7GJb9vAZc4QNiaDQ3R43D 4bZNyTZdCTjKhHCM4gCep82aegOXQlP7ZgBmMrBzRdmSvQviVvf6fN6vGJMiy4Qp nj2PwQgEM8Wv/4+t+UV/pfTqGH9oxDig/g/QEVqhu/gxaS7U4xVRT0KEFdZ4WPjB wJO+igDHR8+tH+Rj8usHwglsuETtUaog/LjXbZISJXDEAPZFLZCQQcIt8U0d8AxT 3UFvYmJPOuwPA54YD58gpudWtEJRU12+UKlDGbfRELlzd0GoOiPwTPvh8/NS/lMf joL4hvw/1qQ1qRMz9pD+KNSawYCWhIoEAh8JMPIABva69Z/xDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWHH6Yp7Foax4M3LpSNE/UREsyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMjg5ODYwMTEtMDQ0ZC0z ZGRjLTkxZDktZWE3ZWQwMGU1NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6guOX07/IaX+HFXX4rO5wZvPdrY9agpe/wORFKMDFSJH+syCdW8Gfv dK/CgxtG9uKjL94URpKBijNjxWcXy4kHzhCaMejG0CAYHt2zyYXMXuL0ah5B3u6h nyZddPac3+xRiudAtshVpUvcSWToL3qNghUk/AybJ8FRZsvJ9GgmX1EhOsJrB3Vy +imAC26dytHgBLcp0WREZh7yB2BIXeYfb1bB3PMiihY8LtuodZItIUh83hXKLPtI IC8VNy8ZiW0mtI+PHONuefh8ImjVxvWYC8V3o0uvZ6NI0crFcV8X17vb9i+kyKvt A0RnyF6opEICDbzF+Ly53ioF451ghA4= -----END CERTIFICATE-----Generated at Tue Sep 16 02:59:41 2025 by rpki-client