$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa File: f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa (raw, json) Hash identifier: aNPTMMbxdXmIa0dcu29PBpdPTDFF5nGXdtVyyrcRlq8= Subject key identifier: 0D:F0:2C:89:3A:64:ED:0C:12:4A:B1:F5:FE:E7:EB:E0:B1:83:5E:F4 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584B110BF84AB1878F22640C3D00 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14090 IP address blocks: 64.21.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:f8:4a:b1:87:8f:22:64:0c:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=29c77fa8-97c0-4008-80cb-eca630762733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:df:12:52:e7:3b:82:ed:1b:63:d5:c9:30: b9:8e:86:de:74:55:ec:98:9e:9d:b1:df:4b:ec:a5: a0:cc:a0:a8:bd:b4:a1:b1:fe:19:bf:f2:2c:bc:35: 32:6f:70:30:c2:4d:f9:67:d7:4b:73:99:80:1d:f5: 39:1d:58:47:1d:60:7e:52:f5:04:f5:b5:c1:3b:11: 14:85:71:98:43:38:1a:bc:24:eb:f0:87:93:d5:71: 01:33:fa:e9:23:73:ef:75:1b:28:92:e7:d3:9d:92: 4d:e3:26:8f:75:64:fb:11:fa:0c:fb:46:37:db:c3: ed:fd:45:65:f8:32:c6:21:01:ad:5f:11:0b:6c:dc: 42:46:3b:53:d9:a6:ff:67:96:f5:35:74:da:c0:2a: b4:e9:55:20:85:94:44:ef:9c:9f:4c:23:cb:65:16: 69:39:ad:83:8a:04:a9:30:08:32:ae:d1:79:3b:07: 8e:5d:cf:32:f2:f9:4e:32:94:9e:1d:0c:6d:d3:b7: 7b:07:d8:61:ee:0f:81:9b:91:b2:61:6d:e3:5e:58: e7:7e:82:17:77:51:80:80:de:60:4e:6c:4c:fc:79: 10:af:dc:a6:a6:ed:cd:77:b4:df:16:3b:ca:a0:09: 0a:6f:d1:5e:54:b8:4e:73:ed:ce:84:34:93:68:b2: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F0:2C:89:3A:64:ED:0C:12:4A:B1:F5:FE:E7:EB:E0:B1:83:5E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d3:71:8e:2d:34:98:14:a6:ae:fa:35:1e:dd:8c:7c:95:ff: e5:bf:d4:b3:4c:c0:e5:5a:04:49:98:a4:25:8d:39:a0:3c:7f: ce:04:9f:52:cf:a6:00:5c:c1:70:3a:d7:4f:3a:3f:e7:67:20: 93:e3:a3:d6:78:c0:e8:20:7d:e8:6e:2e:b0:eb:bf:94:d6:80: 73:f9:7a:64:68:03:59:bf:d6:8e:2e:d5:14:30:d8:fb:a7:de: 6a:38:b0:f7:f8:6c:7c:6e:df:dd:3f:ae:63:6f:97:ee:e6:94: 22:28:0c:fa:5f:17:de:b6:5a:a2:a3:46:fa:a0:f1:7d:e0:d6: b6:b1:d7:ea:57:aa:28:3b:84:fe:35:34:d8:4f:d6:3f:fd:1e: 92:46:51:64:34:9c:78:19:37:75:74:16:05:92:a0:06:34:0c: 36:27:60:14:b6:68:a6:5e:c2:3f:02:40:53:38:2b:0d:43:c1: 87:1c:65:1a:82:f2:23:d1:d0:0f:aa:52:0c:b3:7e:ba:4f:2c: a7:93:81:f9:fd:1d:71:3a:be:a0:76:a8:b8:46:8a:1c:ff:2c: ef:23:e8:b8:3d:88:5b:4f:dd:00:fa:10:09:e9:86:0a:6e:aa: a8:cf:6c:3e:1b:56:92:58:2c:82:e0:38:f0:91:2a:7a:d7:da: 6c:bb:bc:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/hKsYePImQMPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjljNzdmYTgtOTdjMC00MDA4LTgwY2ItZWNhNjMwNzYyNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnbfElLnO4LtG2PVyTC5jobedFXsmJ6dsd9L 7KWgzKCovbShsf4Zv/IsvDUyb3Awwk35Z9dLc5mAHfU5HVhHHWB+UvUE9bXBOxEU hXGYQzgavCTr8IeT1XEBM/rpI3PvdRsokufTnZJN4yaPdWT7EfoM+0Y328Pt/UVl +DLGIQGtXxELbNxCRjtT2ab/Z5b1NXTawCq06VUghZRE75yfTCPLZRZpOa2DigSp MAgyrtF5OweOXc8y8vlOMpSeHQxt07d7B9hh7g+Bm5GyYW3jXljnfoIXd1GAgN5g TmxM/HkQr9ympu3Nd7TfFjvKoAkKb9FeVLhOc+3OhDSTaLKnSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3wLIk6ZO0MEkqx9f7n6+Cxg170MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZjBmMTRjYTUtZmI5Ni0z MWJiLTgxMWUtMmYwMjIwMTQwY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjTcY4tNJgUpq76NR7djHyV/+W/1LNMwOVaBEmYpCWNOaA8f84En1LP pgBcwXA61086P+dnIJPjo9Z4wOggfehuLrDrv5TWgHP5emRoA1m/1o4u1RQw2Pun 3mo4sPf4bHxu390/rmNvl+7mlCIoDPpfF962WqKjRvqg8X3g1rax1+pXqig7hP41 NNhP1j/9HpJGUWQ0nHgZN3V0FgWSoAY0DDYnYBS2aKZewj8CQFM4Kw1DwYccZRqC 8iPR0A+qUgyzfrpPLKeTgfn9HXE6vqB2qLhGihz/LO8j6Lg9iFtP3QD6EAnphgpu qqjPbD4bVpJYLILgOPCRKnrX2my7vKM= -----END CERTIFICATE-----Generated at Thu Sep 18 07:08:17 2025 by rpki-client