$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25e94a85-36b2-3bdb-b0f4-ab13810d7322.roa File: 25e94a85-36b2-3bdb-b0f4-ab13810d7322.roa (raw, json) Hash identifier: YkC7jE/1twUAmljuMNrStNVrRu7bVDOsijM0YojMY7Q= Subject key identifier: 65:DC:DB:A6:8C:40:C5:0A:EC:B2:9A:07:37:C4:49:3E:B6:EA:3C:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB97C30FB5A5F77CF03200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25e94a85-36b2-3bdb-b0f4-ab13810d7322.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 20214 IP address blocks: 66.208.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:97:c3:0f:b5:a5:f7:7c:f0:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b8d4a770-3223-47ca-8dfe-f7be508f3bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:a4:dd:74:c8:88:93:01:e7:41:76:40:70: 1b:62:bc:e3:e0:f6:25:b4:71:01:25:c6:1d:10:a6: cb:34:f0:c5:01:c1:cf:35:3b:8d:b7:cb:78:fe:23: 0b:5c:39:76:fe:41:d5:06:5f:03:f7:4b:04:d9:d2: e7:ba:80:51:c6:b7:7d:45:2f:6a:a0:87:e1:d6:4c: 1b:15:4b:e7:c7:08:ad:09:0d:f8:4b:c1:65:5e:92: 2d:51:e3:72:20:83:d1:70:56:40:51:f9:36:8e:6a: 0f:28:5e:38:d1:fe:b4:8b:2f:1d:bf:f9:f9:20:9f: bf:ac:2a:1d:a4:f3:54:92:0b:9e:1f:e3:5b:3a:20: 70:3e:88:d8:0b:00:57:2d:40:cb:50:f5:b8:01:34: db:73:5a:06:04:fe:95:a8:fc:c8:e9:be:d0:59:8d: ab:23:85:b0:44:0b:d3:70:c1:e0:97:c3:45:2b:75: 13:e7:8e:63:74:95:a9:50:e2:f4:e3:f7:a9:fc:cb: 1a:51:73:63:74:98:49:95:f1:10:b7:d3:2a:d6:95: 72:e6:ee:3a:5e:ff:51:18:17:e9:39:6a:55:d8:9b: 81:f7:e6:a0:82:80:4f:36:e9:c0:44:b7:b0:78:f4: 99:95:fb:ba:8a:05:41:82:3d:a0:60:dd:ca:3b:e7: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DC:DB:A6:8C:40:C5:0A:EC:B2:9A:07:37:C4:49:3E:B6:EA:3C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25e94a85-36b2-3bdb-b0f4-ab13810d7322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.208.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a3:c2:37:94:00:f7:d3:ae:43:cd:0b:cf:c6:eb:e6:33:46: e6:6d:41:b2:a5:a3:8d:e0:de:80:ce:75:eb:a7:de:12:3b:f5: 82:5c:82:e9:c8:1f:3f:29:ed:15:f1:6b:d8:65:9c:af:40:98: 3b:77:20:87:46:d6:01:2b:ec:13:23:9f:25:2d:e6:5e:6b:9e: 10:13:69:36:60:92:c7:c0:08:28:bf:bf:15:0f:6a:08:25:49: 03:31:50:47:44:c5:3a:0c:8f:a7:12:95:29:11:56:d1:ad:98: ef:5d:59:20:94:6f:4b:9e:66:2b:ec:ff:51:07:7a:97:b0:01: 20:2f:f4:c3:e6:06:66:cc:d1:59:b4:33:76:ab:c9:12:6b:ad: 64:b7:9d:84:1b:d0:9f:a3:f5:a3:39:b0:a1:e7:2d:53:06:5b: 85:ea:91:b2:e0:65:01:05:3d:78:e0:63:93:8e:92:bb:f1:5a: 36:a6:c7:6a:13:5b:86:9d:ba:93:5f:b5:56:ef:c3:3f:fd:41: 60:67:ee:7f:e6:a3:19:fd:2a:1f:dc:c2:b6:b1:95:2b:19:68: e5:30:c9:7e:fe:39:49:8e:97:03:6a:78:83:cd:ed:2e:e1:13: a8:36:fa:0d:64:ac:49:9f:f1:39:78:31:03:49:75:be:33:73: 5b:f2:f9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+5fDD7Wl93zwMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjhkNGE3NzAtMzIyMy00N2NhLThkZmUtZjdiZTUwOGYzYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ymk3XTIiJMB50F2QHAbYrzj4PYltHEBJcYd EKbLNPDFAcHPNTuNt8t4/iMLXDl2/kHVBl8D90sE2dLnuoBRxrd9RS9qoIfh1kwb FUvnxwitCQ34S8FlXpItUeNyIIPRcFZAUfk2jmoPKF440f60iy8dv/n5IJ+/rCod pPNUkgueH+NbOiBwPojYCwBXLUDLUPW4ATTbc1oGBP6VqPzI6b7QWY2rI4WwRAvT cMHgl8NFK3UT545jdJWpUOL04/ep/MsaUXNjdJhJlfEQt9Mq1pVy5u46Xv9RGBfp OWpV2JuB9+aggoBPNunARLewePSZlfu6igVBgj2gYN3KO+cX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXc26aMQMUK7LKaBzfEST626jwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVlOTRhODUtMzZiMi0z YmRiLWIwZjQtYWIxMzgxMGQ3MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSjwjeUAPfTrkPNC8/G6+YzRuZtQbKlo43g3oDOdeun3hI79YJcgunI Hz8p7RXxa9hlnK9AmDt3IIdG1gEr7BMjnyUt5l5rnhATaTZgksfACCi/vxUPaggl SQMxUEdExToMj6cSlSkRVtGtmO9dWSCUb0ueZivs/1EHepewASAv9MPmBmbM0Vm0 M3aryRJrrWS3nYQb0J+j9aM5sKHnLVMGW4XqkbLgZQEFPXjgY5OOkrvxWjamx2oT W4adupNftVbvwz/9QWBn7n/moxn9Kh/cwraxlSsZaOUwyX7+OUmOlwNqeIPN7S7h E6g2+g1krEmf8Tl4MQNJdb4zc1vy+aA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:14:52 2025 by rpki-client