$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/25115bad-c7e4-3044-905c-ba78145afba5.roa File: 25115bad-c7e4-3044-905c-ba78145afba5.roa (raw, json) Hash identifier: c2uwyOylSP09g4815oUgvAcWaLb3GRWryWzPs59PQU4= Subject key identifier: 9A:8E:14:A0:42:2B:83:FB:C9:A4:14:E5:76:94:9B:E4:BE:4B:C9:55 Certificate issuer: /CN=4568d7ed-0cba-4999-8689-06708c0baea6 Certificate serial: 010D0C9F4328584A983FF0EC76A158894A8D3680 Authority key identifier: 45:9B:3B:DF:F9:74:DD:70:E1:F6:86:60:0E:C7:CC:4C:7E:60:A6:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/25115bad-c7e4-3044-905c-ba78145afba5.roa Signing time: Mon 21 Jul 2025 18:32:28 +0000 ROA not before: Mon 21 Jul 2025 18:32:28 +0000 ROA not after: Sun 19 Oct 2025 18:32:28 +0000 asID: 399384 IP address blocks: 104.249.168.0/24 maxlen: 24 2620:94:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:3f:f0:ec:76:a1:58:89:4a:8d:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4568d7ed-0cba-4999-8689-06708c0baea6 Validity Not Before: Jul 21 18:32:28 2025 GMT Not After : Oct 19 18:32:28 2025 GMT Subject: CN=5bc17c08-7898-4e10-b2b0-cf168f1382a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:4e:25:0f:28:b9:91:b2:24:04:0c:2b:55: eb:4c:35:24:ed:c3:14:ca:67:22:78:f0:95:33:bc: 5a:13:cd:0a:e6:86:44:4e:0f:cf:4e:14:58:5f:f4: 8f:23:97:39:c2:c1:f9:9f:ce:be:b7:3a:b4:7d:01: 0b:f3:27:95:98:cf:77:94:e7:dc:72:c3:f4:bf:2a: eb:52:d9:f5:ae:45:c7:b7:83:2f:64:3e:02:13:de: 26:0b:68:67:9c:c0:3e:b5:22:00:97:94:21:5b:9e: ae:80:d7:7d:cc:20:ee:4d:90:49:d8:83:28:cc:2b: 52:aa:b7:0d:61:7d:1b:90:0f:fa:88:b0:06:9b:7e: b4:e3:14:f5:1f:dc:3b:29:bd:b7:be:8e:a8:69:21: 50:ac:b1:04:72:9f:d9:79:73:1c:8a:95:13:19:1a: a9:5d:e8:7b:3a:fd:d9:91:9c:7b:6c:12:86:a7:18: 35:ff:9b:93:2a:8c:ce:ef:de:e0:8b:e2:98:0f:5d: 55:35:12:f5:78:66:dc:cf:89:e1:d9:1d:a9:d8:f6: 02:0d:ec:78:60:8b:aa:3a:6b:53:d9:09:e8:35:ef: 63:a4:7f:f4:ce:f6:fa:7f:61:f8:ea:b7:eb:37:46: e0:3b:7b:b7:4b:2f:dc:88:dc:7a:72:9f:0a:45:29: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:14:A0:42:2B:83:FB:C9:A4:14:E5:76:94:9B:E4:BE:4B:C9:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/25115bad-c7e4-3044-905c-ba78145afba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.crl X509v3 Authority Key Identifier: keyid:45:9B:3B:DF:F9:74:DD:70:E1:F6:86:60:0E:C7:CC:4C:7E:60:A6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6.cer sbgp-ipAddrBlock: critical IPv4: 104.249.168.0/24 IPv6: 2620:94:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:19:a4:34:8c:9a:3a:cf:0e:dc:40:5f:9c:24:ca:13:4f:8f: 03:6a:1d:84:9b:1b:b4:a0:f7:47:a8:06:00:4a:1f:fd:eb:3e: 14:a7:d5:5e:fd:ca:14:66:26:1b:f7:46:9e:6b:4f:3a:e9:af: 4a:82:e1:24:b1:e0:bd:3e:23:d8:14:a5:27:f3:92:c1:c9:6b: 3a:71:ad:9f:47:0c:33:61:78:a8:54:d9:8e:64:3b:62:a9:91: 02:c3:cc:23:5d:9d:4c:f3:fc:7d:46:d0:55:28:21:7e:f8:7c: 31:b1:6c:ee:89:c9:b9:30:aa:d2:d7:67:94:ff:3f:2d:db:28: fc:b7:0f:04:0b:fe:84:5d:c7:9f:e4:58:f0:70:9a:4f:f0:09: 6e:d4:c5:3d:f4:6f:35:68:11:f0:af:0a:29:72:77:cd:d9:44: a0:74:02:d8:26:bc:7d:7f:b0:7f:3c:16:14:60:95:75:14:5b: 7d:ce:8b:35:20:20:4d:e4:fc:72:eb:bf:c5:db:52:d5:55:15: 94:b5:2c:f4:3e:30:ea:91:ad:0d:c4:c4:0a:37:e4:76:1e:8c: d9:a8:4f:6c:d7:05:3a:af:57:2c:ee:2f:6d:31:3a:88:73:5f: 83:23:c0:16:48:2f:ec:48:91:eb:b0:95:aa:8e:0c:73:e2:7b: e3:e8:c5:0f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqYP/DsdqFYiUqNNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU2OGQ3ZWQtMGNiYS00OTk5LTg2ODktMDY3MDhjMGJh ZWE2MB4XDTI1MDcyMTE4MzIyOFoXDTI1MTAxOTE4MzIyOFowLzEtMCsGA1UEAxMk NWJjMTdjMDgtNzg5OC00ZTEwLWIyYjAtY2YxNjhmMTM4MmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+ZOJQ8ouZGyJAQMK1XrTDUk7cMUymciePCV M7xaE80K5oZETg/PThRYX/SPI5c5wsH5n86+tzq0fQEL8yeVmM93lOfccsP0vyrr Utn1rkXHt4MvZD4CE94mC2hnnMA+tSIAl5QhW56ugNd9zCDuTZBJ2IMozCtSqrcN YX0bkA/6iLAGm3604xT1H9w7Kb23vo6oaSFQrLEEcp/ZeXMcipUTGRqpXeh7Ov3Z kZx7bBKGpxg1/5uTKozO797gi+KYD11VNRL1eGbcz4nh2R2p2PYCDex4YIuqOmtT 2QnoNe9jpH/0zvb6f2H46rfrN0bgO3u3Sy/ciNx6cp8KRSnAPwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJqOFKBCK4P7yaQU5XaUm+S+S8lVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTY4 ZDdlZC0wY2JhLTQ5OTktODY4OS0wNjcwOGMwYmFlYTYvMjUxMTViYWQtYzdlNC0z MDQ0LTkwNWMtYmE3ODE0NWFmYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU2OGQ3ZWQtMGNiYS00OTk5LTg2 ODktMDY3MDhjMGJhZWE2LzQ1NjhkN2VkLTBjYmEtNDk5OS04Njg5LTA2NzA4YzBi YWVhNi5jcmwwHwYDVR0jBBgwFoAURZs73/l03XDh9oZgDsfMTH5gpiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTY4ZDdlZC0wY2JhLTQ5OTktODY4OS0wNjcw OGMwYmFlYTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaPmoMA8E AgACMAkDBwAmIACUYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcRmkNIyaOs8O3EBfnCTKE0+PA2odhJsb tKD3R6gGAEof/es+FKfVXv3KFGYmG/dGnmtPOumvSoLhJLHgvT4j2BSlJ/OSwclr OnGtn0cMM2F4qFTZjmQ7YqmRAsPMI12dTPP8fUbQVSghfvh8MbFs7onJuTCq0tdn lP8/Ldso/LcPBAv+hF3Hn+RY8HCaT/AJbtTFPfRvNWgR8K8KKXJ3zdlEoHQC2Ca8 fX+wfzwWFGCVdRRbfc6LNSAgTeT8cuu/xdtS1VUVlLUs9D4w6pGtDcTECjfkdh6M 2ahPbNcFOq9XLO4vbTE6iHNfgyPAFkgv7EiR67CVqo4Mc+J74+jFDw== -----END CERTIFICATE-----Generated at Sat Aug 9 05:43:31 2025 by rpki-client