$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa File: e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa (raw, json) Hash identifier: 7+B9WM6qQXboEYboAZuOmGdeVzqRqOixtIJKFo5YBYM= Subject key identifier: E7:5F:32:D8:AF:84:52:19:DE:00:A5:5D:75:B8:93:69:CF:7D:98:A2 Certificate issuer: /CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f Certificate serial: 010D0C9F4328584AE1966ED4561FB2F1613D6500 Authority key identifier: FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 21779 IP address blocks: 76.164.240.0/20 maxlen: 24 198.48.44.0/22 maxlen: 24 199.195.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6e:d4:56:1f:b2:f1:61:3d:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=519acfcc-960d-4ee8-b5ae-5f10ccddf9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8e:ea:09:76:cf:d0:c7:45:7d:38:9b:63:74: e8:55:3c:18:0d:ca:af:fb:29:f5:bf:cd:85:06:8b: b7:95:fd:82:da:32:a3:7d:b3:1b:f5:ec:5b:87:bd: 27:de:a5:25:49:4a:19:d1:5b:82:61:46:75:9f:c2: 3a:a6:51:53:e8:72:56:fa:08:8f:55:4c:0c:7a:87: f9:83:9d:58:15:15:97:38:0e:25:20:db:c9:14:c7: a2:0a:f7:8c:a8:de:ed:8e:25:13:a4:cb:87:17:31: da:d4:31:21:9a:b3:7f:5d:d0:b0:52:09:e5:2d:7e: 53:7c:51:c1:b9:cd:28:44:c9:3d:df:5e:ad:e2:74: 9c:ad:e5:cf:75:2e:75:5f:22:91:92:bd:9e:53:3c: 2b:e2:12:76:51:bd:bf:a2:d9:42:53:ba:63:e8:9d: d0:32:be:37:f8:a4:08:69:63:00:f7:07:98:18:35: 4c:2b:fd:69:f5:d8:4f:3a:fe:a9:55:03:ba:1f:0a: ad:5e:a5:67:ad:8a:ea:38:5c:93:26:c8:27:2e:19: 23:10:51:b3:5b:28:9b:21:57:cb:46:f6:8b:14:52: f5:14:ff:76:75:d2:8c:68:44:f2:ab:53:1b:36:52: af:de:c6:5f:f5:ef:c3:ef:5c:59:59:12:c2:d8:53: 20:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5F:32:D8:AF:84:52:19:DE:00:A5:5D:75:B8:93:69:CF:7D:98:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl X509v3 Authority Key Identifier: keyid:FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer sbgp-ipAddrBlock: critical IPv4: 76.164.240.0/20 198.48.44.0/22 199.195.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:fa:df:e8:d7:30:36:da:5f:09:55:58:24:9d:02:12:91:01: 33:ba:3f:af:b0:13:46:0a:f9:ae:41:52:ab:f5:27:65:ff:ec: ac:bc:a7:f3:ad:88:50:fa:a4:0d:10:ba:d4:90:69:d1:98:46: 35:c1:3e:d4:c5:9e:f5:03:02:ce:af:2e:bb:8a:a3:4a:02:78: d7:e7:61:ac:66:9d:89:ec:18:25:66:3e:4b:bc:0e:bc:19:c9: 8d:7e:76:1e:53:20:eb:23:90:17:9e:bc:06:52:01:de:1a:98: b9:d7:6a:76:de:ca:77:04:c7:9c:af:16:9c:98:42:1c:c7:90: 68:95:67:f6:42:35:7c:24:9e:03:d2:ab:77:aa:82:a6:b9:ad: 22:ff:bc:70:ef:1f:bd:11:ae:e3:5f:d0:b8:0b:30:54:83:1a: 64:0e:ee:e9:68:3c:4d:4c:94:ff:e3:56:4b:7e:2a:65:0b:db: 0f:aa:fd:51:d7:aa:40:77:8e:ff:47:ef:ce:c0:2a:95:b2:d0: cf:f5:e2:95:39:5a:e2:49:89:26:c2:d0:09:a1:99:e9:84:65: 14:86:a6:4d:f4:c6:e9:3d:2f:bc:d0:f2:f2:09:73:68:ac:da: be:3f:d8:09:8a:dc:ef:bf:89:35:56:d2:e3:74:5d:8c:68:6b: a1:38:0e:07 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErhlm7UVh+y8WE9ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY1NTljZjgtYWQxOC00NGMwLTkwZDctM2ExZDkxOTVl ZDJmMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NTE5YWNmY2MtOTYwZC00ZWU4LWI1YWUtNWYxMGNjZGRmOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi47qCXbP0MdFfTibY3ToVTwYDcqv+yn1v82F Bou3lf2C2jKjfbMb9exbh70n3qUlSUoZ0VuCYUZ1n8I6plFT6HJW+giPVUwMeof5 g51YFRWXOA4lINvJFMeiCveMqN7tjiUTpMuHFzHa1DEhmrN/XdCwUgnlLX5TfFHB uc0oRMk9316t4nScreXPdS51XyKRkr2eUzwr4hJ2Ub2/otlCU7pj6J3QMr43+KQI aWMA9weYGDVMK/1p9dhPOv6pVQO6HwqtXqVnrYrqOFyTJsgnLhkjEFGzWyibIVfL RvaLFFL1FP92ddKMaETyq1MbNlKv3sZf9e/D71xZWRLC2FMgywIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOdfMtivhFIZ3gClXXW4k2nPfZiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjU1 OWNmOC1hZDE4LTQ0YzAtOTBkNy0zYTFkOTE5NWVkMmYvZTI1ZGY0MGQtMDJjMi0z YTZjLTlhOTUtNjc2MmNjZmI3NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWY1NTljZjgtYWQxOC00NGMwLTkw ZDctM2ExZDkxOTVlZDJmLzVmNTU5Y2Y4LWFkMTgtNDRjMC05MGQ3LTNhMWQ5MTk1 ZWQyZi5jcmwwHwYDVR0jBBgwFoAU/je2butrPMyKuCHKJD81alECAEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjU1OWNmOC1hZDE4LTQ0YzAtOTBkNy0zYTFk OTE5NWVkMmYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQETKTwAwQC xjAsAwQCx8O4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADn63+jXMDbaXwlVWCSdAhKRATO6P6+wE0YK+a5B Uqv1J2X/7Ky8p/OtiFD6pA0QutSQadGYRjXBPtTFnvUDAs6vLruKo0oCeNfnYaxm nYnsGCVmPku8DrwZyY1+dh5TIOsjkBeevAZSAd4amLnXanbeyncEx5yvFpyYQhzH kGiVZ/ZCNXwkngPSq3eqgqa5rSL/vHDvH70RruNf0LgLMFSDGmQO7uloPE1MlP/j Vkt+KmUL2w+q/VHXqkB3jv9H787AKpWy0M/14pU5WuJJiSbC0AmhmemEZRSGpk30 xuk9L7zQ8vIJc2is2r4/2AmK3O+/iTVW0uN0XYxoa6E4Dgc= -----END CERTIFICATE-----Generated at Wed Aug 20 21:21:56 2025 by rpki-client