$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa File: 25fc7d99-3882-3be7-a700-9d69920c8f76.roa (raw, json) Hash identifier: egPE13p+ge/iahqVONeKiCVMVNXSgMnuo0TVsBugRfE= Subject key identifier: BE:CB:F7:AC:59:FF:E6:17:7F:21:62:AB:6F:79:7E:0C:9F:AF:70:9B Certificate issuer: /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Certificate serial: 010D0C9F4328584AB650F1CD3921A45BE165FF04 Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 36666 IP address blocks: 67.215.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f1:cd:39:21:a4:5b:e1:65:ff:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=40aa7c98-f803-4b61-92ac-3d8610e83494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:42:a1:a5:64:de:6c:f6:80:bb:32:98:79: 03:ed:d8:db:d4:a3:2f:82:d6:4d:df:1e:1f:87:6c: 1f:01:71:43:44:cd:5b:b3:6c:03:d3:71:d0:a8:2c: b2:96:8a:a0:a6:a6:e1:da:11:7d:ff:b8:0c:22:7d: 70:13:60:fd:08:76:c3:54:7a:fc:f0:5d:83:a7:0f: 51:fb:c4:f8:c8:ed:3a:b1:be:c4:e2:87:9f:fb:97: 94:f7:82:a5:31:e0:a1:a5:20:5e:8e:1a:c8:db:21: 77:3a:44:a0:a6:bd:91:09:08:3c:64:89:53:55:25: d3:a1:1a:91:6a:36:7e:21:e7:42:70:42:bf:31:ce: 1a:dd:32:35:43:78:9e:9c:28:7e:72:da:04:14:ee: ad:06:38:d6:2d:09:da:5d:86:a1:fa:f7:5d:0e:36: b5:6b:10:9a:96:02:01:a7:93:e6:19:9c:83:e3:f2: 28:0d:fa:83:20:73:d1:c0:75:6c:6d:2d:f1:0a:ec: 15:0d:84:21:ef:32:80:93:c0:e0:f3:1f:48:f7:8c: 01:8d:b3:24:54:0f:b7:03:27:64:ac:ee:92:4b:b7: 94:9d:83:d2:af:56:c0:6d:ca:5d:a6:1f:bc:67:de: aa:44:19:ca:1b:4a:3e:bd:aa:1c:e3:c2:b3:81:47: fe:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:F7:AC:59:FF:E6:17:7F:21:62:AB:6F:79:7E:0C:9F:AF:70:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl X509v3 Authority Key Identifier: keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer sbgp-ipAddrBlock: critical IPv4: 67.215.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:38:53:3f:e4:e2:f8:25:b5:30:66:25:85:90:ee:41:67:17: 23:06:24:57:92:62:4a:60:3b:19:3f:74:39:de:61:6e:e6:e0: 63:ba:91:1d:d3:46:34:ce:80:44:cb:84:28:3a:40:1e:23:ba: 26:a5:fa:49:d3:af:c9:fc:6e:6a:d9:fc:29:7a:53:d3:94:18: b9:e4:99:34:2a:9d:f6:a3:b0:11:4e:54:8b:5e:5b:b2:79:ac: b0:66:33:2a:b3:6a:13:a7:df:07:a9:fd:18:66:ba:6b:58:ad: 77:b1:6b:43:9f:69:c1:41:b0:26:8d:00:d0:ac:dd:0d:91:7a: 1a:9e:71:9a:d7:3b:34:fd:15:81:ad:92:f3:89:98:d1:37:79: 18:55:5a:67:09:22:2a:45:5f:82:25:e0:5c:5e:37:eb:d5:ef: 03:e0:33:c0:de:b0:6a:af:6b:b9:5b:62:5e:af:73:e5:4a:2b: dc:38:36:9a:5a:b3:6a:29:d1:1b:f3:d2:dc:6b:25:c5:db:37: fb:d2:8c:66:e9:d1:09:49:99:39:aa:5a:81:87:81:00:20:3c: fe:58:20:74:59:fa:13:e9:cf:9e:38:e0:0d:fd:e4:44:e0:fc: ba:6e:10:6e:7b:e6:e5:bd:d3:cb:39:9e:d0:28:96:81:0b:aa: ec:a5:08:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPHNOSGkW+Fl/wQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUw ZWViMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NDBhYTdjOTgtZjgwMy00YjYxLTkyYWMtM2Q4NjEwZTgzNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDpCoaVk3mz2gLsymHkD7djb1KMvgtZN3x4f h2wfAXFDRM1bs2wD03HQqCyyloqgpqbh2hF9/7gMIn1wE2D9CHbDVHr88F2Dpw9R +8T4yO06sb7E4oef+5eU94KlMeChpSBejhrI2yF3OkSgpr2RCQg8ZIlTVSXToRqR ajZ+IedCcEK/Mc4a3TI1Q3ienCh+ctoEFO6tBjjWLQnaXYah+vddDja1axCalgIB p5PmGZyD4/IoDfqDIHPRwHVsbS3xCuwVDYQh7zKAk8Dg8x9I94wBjbMkVA+3Aydk rO6SS7eUnYPSr1bAbcpdph+8Z96qRBnKG0o+vaoc48KzgUf+5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7L96xZ/+YXfyFiq295fgyfr3CbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGUz MzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvMjVmYzdkOTktMzg4Mi0z YmU3LWE3MDAtOWQ2OTkyMGM4Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBlMzM4YjktMmE2My00ZGZmLTkz NzEtYzhhOGU5MzUwZWViL2UwZTMzOGI5LTJhNjMtNGRmZi05MzcxLWM4YThlOTM1 MGVlYi5jcmwwHwYDVR0jBBgwFoAUNDUW6fpcIavP8B9lsDFncZERP8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4 ZTkzNTBlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc4Uz/k4vgltTBmJYWQ7kFnFyMGJFeSYkpgOxk/dDneYW7m4GO6kR3T RjTOgETLhCg6QB4juial+knTr8n8bmrZ/Cl6U9OUGLnkmTQqnfajsBFOVIteW7J5 rLBmMyqzahOn3wep/RhmumtYrXexa0OfacFBsCaNANCs3Q2RehqecZrXOzT9FYGt kvOJmNE3eRhVWmcJIipFX4Il4FxeN+vV7wPgM8DesGqva7lbYl6vc+VKK9w4Nppa s2op0Rvz0txrJcXbN/vSjGbp0QlJmTmqWoGHgQAgPP5YIHRZ+hPpz5444A395ETg /LpuEG575uW908s5ntAoloELquylCLk= -----END CERTIFICATE-----Generated at Wed Aug 6 00:45:09 2025 by rpki-client