$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa File: b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa (raw, json) Hash identifier: CXicMfntZf+i4siv73+Xn8VmMNcbEOlLqnQ5cC6zvWI= Subject key identifier: BD:C1:7E:2F:98:64:E6:A6:D1:AF:D4:C2:D6:5D:9F:61:C8:2D:72:80 Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F4328584BB7EBF6FD0C3A9127521AEBE0 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa Signing time: Sat 01 Nov 2025 19:36:04 +0000 ROA not before: Sat 01 Nov 2025 19:36:04 +0000 ROA not after: Fri 30 Jan 2026 20:36:04 +0000 asID: 13737 IP address blocks: 67.214.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:eb:f6:fd:0c:3a:91:27:52:1a:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Nov 1 19:36:04 2025 GMT Not After : Jan 30 20:36:04 2026 GMT Subject: CN=a6f5d8af-f640-47da-874e-c43aaa01ff9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:52:79:04:f3:f3:60:8f:a2:15:28:ac:a5: fe:17:f0:63:20:72:1a:4f:b7:5b:1b:37:9e:4b:2c: 9c:69:b9:12:ab:60:9f:91:3b:0e:82:32:cf:9c:f8: 7c:14:35:3e:7f:ca:5b:b5:bf:39:19:49:c1:77:10: 6e:ac:41:19:0b:f5:21:4a:ab:a0:11:7c:7a:1a:2c: 3f:fa:84:d5:7f:4e:2e:3d:8d:ec:b1:ef:d5:2a:62: 51:dd:ea:8c:a5:65:8e:68:f6:2b:28:dd:ba:40:c0: d0:10:30:f6:26:18:80:68:c1:63:5c:ad:c8:fd:f8: 88:54:27:19:4e:bf:a6:9b:4d:bb:d0:8f:84:a6:d3: 68:38:96:34:43:3d:2d:fa:09:bc:5e:79:8b:d4:16: bd:97:98:68:aa:da:60:35:24:5a:f4:a6:b8:83:a5: 2d:18:80:99:c0:6a:4b:1c:72:07:dd:6d:da:ae:c7: 60:06:41:2d:e3:b8:8a:d3:60:9d:b0:a8:6d:1a:63: 2b:4f:84:6b:4c:b3:2f:95:a5:5f:cd:f3:ff:d1:0e: 03:59:a3:03:7f:87:e7:3b:e3:42:63:b3:e0:ab:e5: 31:64:4c:6a:76:5d:85:1b:b0:eb:68:ac:47:81:66: a6:e2:a5:86:70:53:4a:29:b4:55:03:91:70:8d:d4: a5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C1:7E:2F:98:64:E6:A6:D1:AF:D4:C2:D6:5D:9F:61:C8:2D:72:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 67.214.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e1:ed:a8:13:c8:3c:e5:20:e4:05:68:e3:e8:bc:10:d7:28: 25:4d:d0:95:df:f5:d8:ab:d6:ea:a8:6e:02:7c:91:e3:c6:06: c1:2e:51:e4:b0:5b:75:07:83:6a:26:99:65:69:16:0d:75:47: b8:09:2a:f3:a1:37:bd:56:1b:ef:f0:62:e5:ff:24:48:7e:f6: 4d:2f:fe:15:86:96:e2:6b:db:b3:3f:2b:30:d4:d8:f5:1a:cc: d3:b1:fb:82:23:b4:bc:39:a6:52:93:d0:76:cf:12:85:cc:75: 82:d2:59:9c:44:0b:c0:16:47:5f:e9:80:74:0c:92:e3:c7:7e: 88:95:56:48:15:da:46:a8:7f:77:68:13:f4:da:40:fc:bc:24: c3:94:6f:36:36:19:45:59:ee:12:7d:0f:62:6d:27:92:6f:9a: 81:d6:55:e0:a6:a5:9a:9f:c9:c8:cb:19:5f:18:a7:03:e6:b3: e9:01:e8:02:50:b0:26:a2:5d:83:88:66:d6:7c:40:95:78:32: ab:fb:66:21:34:0f:a3:a9:a3:7d:66:31:26:66:dc:9c:a1:b1: 13:ff:28:19:d3:be:7e:e3:c0:33:cc:33:d4:b3:62:bd:56:7f: ca:24:75:2d:5f:93:e0:a2:67:e4:df:f5:b0:25:a8:ad:da:fa: 3f:28:bf:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu36/b9DDqRJ1Ia6+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI1MTEwMTE5MzYwNFoXDTI2MDEzMDIwMzYwNFowLzEtMCsGA1UEAxMk YTZmNWQ4YWYtZjY0MC00N2RhLTg3NGUtYzQzYWFhMDFmZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOBSeQTz82CPohUorKX+F/BjIHIaT7dbGzee SyycabkSq2CfkTsOgjLPnPh8FDU+f8pbtb85GUnBdxBurEEZC/UhSqugEXx6Giw/ +oTVf04uPY3sse/VKmJR3eqMpWWOaPYrKN26QMDQEDD2JhiAaMFjXK3I/fiIVCcZ Tr+mm0270I+EptNoOJY0Qz0t+gm8XnmL1Ba9l5hoqtpgNSRa9Ka4g6UtGICZwGpL HHIH3W3arsdgBkEt47iK02CdsKhtGmMrT4RrTLMvlaVfzfP/0Q4DWaMDf4fnO+NC Y7Pgq+UxZExqdl2FG7DraKxHgWam4qWGcFNKKbRVA5FwjdSlOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3Bfi+YZOam0a/UwtZdn2HILXKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvYjNlMjE4MTktM2NlOC0z YmI1LThiMDYtOWVlZGRjOWY2NTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9a0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPh7agTyDzlIOQFaOPovBDXKCVN0JXf9dir1uqobgJ8kePGBsEuUeSw W3UHg2ommWVpFg11R7gJKvOhN71WG+/wYuX/JEh+9k0v/hWGluJr27M/KzDU2PUa zNOx+4IjtLw5plKT0HbPEoXMdYLSWZxEC8AWR1/pgHQMkuPHfoiVVkgV2kaof3do E/TaQPy8JMOUbzY2GUVZ7hJ9D2JtJ5JvmoHWVeCmpZqfycjLGV8YpwPms+kB6AJQ sCaiXYOIZtZ8QJV4Mqv7ZiE0D6Opo31mMSZm3JyhsRP/KBnTvn7jwDPMM9SzYr1W f8okdS1fk+CiZ+Tf9bAlqK3a+j8ov9c= -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:47 2025 by rpki-client