$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa File: 3e4faa23-8443-3d90-82ac-ccf2625a1375.roa (raw, json) Hash identifier: 9X97pN6T0NnzNrjftJZVdCoMpkCsDPuC4N8hbJMLNQQ= Subject key identifier: 2B:07:24:06:4E:2E:24:44:4B:C1:24:0C:1C:EA:01:FF:0F:C8:73:0F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B0A116CD165FBCACEB0D6CC80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 14618 IP address blocks: 67.217.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6c:d1:65:fb:ca:ce:b0:d6:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=b4fe19ee-5cc0-4174-b70c-9ae9693182a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c8:62:b4:1a:25:d5:38:58:02:13:ad:fe:f2: 11:0f:ba:4c:91:00:ca:1f:1c:e1:e6:79:68:53:00: 9a:b7:ae:1f:08:c1:d5:a1:f8:15:07:4d:b9:2d:f2: aa:6b:7a:53:27:7e:d0:81:0f:3f:80:d2:11:0d:7b: 83:df:55:55:c8:29:00:c9:2d:4e:5a:80:17:7a:ff: 4a:3a:65:b6:e2:fa:8a:b8:ec:70:e1:84:dd:9c:25: e4:dd:8a:18:f8:6c:ea:54:e9:92:94:1b:f7:d2:e8: fd:b3:89:ec:6d:9d:64:89:66:1d:14:34:94:19:d2: c5:79:b9:18:d4:4d:05:3c:0a:ba:43:91:7d:f1:e7: f6:d9:6e:12:87:db:b1:bd:91:ff:6c:fc:68:9d:04: 52:ff:0e:c8:02:89:3a:e7:a9:ac:32:22:0e:e4:8a: 3a:7b:7f:b2:c9:da:7c:bb:78:18:2b:68:7d:37:77: 24:65:d6:1e:16:f9:b0:db:22:eb:12:4c:8c:85:92: a3:da:b6:58:34:53:df:4e:e2:69:b4:eb:2d:06:e7: f4:ff:2d:a2:c7:c1:6b:32:e8:76:a9:c3:43:0e:d1: 6f:e9:f5:56:00:3f:74:32:09:6d:aa:b5:9d:63:82: 42:2f:bd:bf:63:56:55:e9:f9:52:53:aa:e8:98:89: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:07:24:06:4E:2E:24:44:4B:C1:24:0C:1C:EA:01:FF:0F:C8:73:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8e:ae:ee:44:3e:5c:cc:f7:fe:76:35:bf:f4:5d:d7:07:0f: 54:81:96:06:03:a8:b0:42:80:72:99:95:0b:15:d8:23:13:d6: 44:c7:aa:b7:69:91:d6:c2:7e:3b:41:27:cf:9a:3e:bf:cc:e9: e1:87:97:15:ef:ba:85:4d:fc:dc:71:f6:62:bd:af:de:0e:8b: b5:03:7b:06:3f:56:0d:50:cb:36:81:6f:d9:e8:81:8d:d7:16: 13:cd:ba:84:e5:c4:4b:ba:72:a2:51:28:a6:9c:69:55:79:72: f9:d1:bb:26:c4:ac:90:7d:07:05:93:9f:3d:74:16:3f:8a:47: 45:48:57:d8:51:d2:23:c4:79:8e:21:e2:7b:a1:8a:ad:8a:98: 83:1b:d7:cf:6e:32:e8:79:ba:a9:78:de:3a:83:6c:58:30:80: c4:87:ab:68:12:cf:80:c9:3a:a7:7d:fb:30:33:43:88:ee:09: f4:6e:9b:cf:d6:4b:26:3e:48:80:71:fa:ba:fa:57:f0:6f:da: 28:0a:51:37:4d:39:55:6c:7d:eb:97:3d:7b:8d:69:2d:40:de: 1a:46:c9:b7:56:12:44:a4:05:e1:98:92:9c:05:42:41:49:ca: ea:65:e6:ac:02:4f:3f:ad:61:4e:c8:44:37:9e:a6:12:4c:59: 68:b0:11:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWzRZfvKzrDWzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YjRmZTE5ZWUtNWNjMC00MTc0LWI3MGMtOWFlOTY5MzE4MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkchitBol1ThYAhOt/vIRD7pMkQDKHxzh5nlo UwCat64fCMHVofgVB025LfKqa3pTJ37QgQ8/gNIRDXuD31VVyCkAyS1OWoAXev9K OmW24vqKuOxw4YTdnCXk3YoY+GzqVOmSlBv30uj9s4nsbZ1kiWYdFDSUGdLFebkY 1E0FPAq6Q5F98ef22W4Sh9uxvZH/bPxonQRS/w7IAok656msMiIO5Io6e3+yydp8 u3gYK2h9N3ckZdYeFvmw2yLrEkyMhZKj2rZYNFPfTuJptOstBuf0/y2ix8FrMuh2 qcNDDtFv6fVWAD90MgltqrWdY4JCL72/Y1ZV6flSU6romInrTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsHJAZOLiRES8EkDBzqAf8PyHMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvM2U0ZmFhMjMtODQ0My0z ZDkwLTgyYWMtY2NmMjYyNWExMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiOru5EPlzM9/52Nb/0XdcHD1SBlgYDqLBCgHKZlQsV2CMT1kTHqrdp kdbCfjtBJ8+aPr/M6eGHlxXvuoVN/Nxx9mK9r94Oi7UDewY/Vg1QyzaBb9nogY3X FhPNuoTlxEu6cqJRKKacaVV5cvnRuybErJB9BwWTnz10Fj+KR0VIV9hR0iPEeY4h 4nuhiq2KmIMb189uMuh5uql43jqDbFgwgMSHq2gSz4DJOqd9+zAzQ4juCfRum8/W SyY+SIBx+rr6V/Bv2igKUTdNOVVsfeuXPXuNaS1A3hpGybdWEkSkBeGYkpwFQkFJ yupl5qwCTz+tYU7IRDeephJMWWiwEVE= -----END CERTIFICATE-----Generated at Sun Aug 31 22:11:14 2025 by rpki-client