$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa File: 022d8988-9d2b-32ce-97c6-f993375ebefa.roa (raw, json) Hash identifier: eqeU9SQ7OrHgDYiX5ELx7WwjKUGc4ss4Al3oXxXSjr8= Subject key identifier: C4:2A:85:B1:76:55:33:1C:9E:1D:B5:43:98:53:06:A1:26:80:33:A6 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AD7D109B8594C62B2E1B2BF80 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 398233 IP address blocks: 67.214.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:09:b8:59:4c:62:b2:e1:b2:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=dcf2be2d-9bcb-4277-ae5c-69711dbb2204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:cc:6b:7e:c9:19:53:03:39:d5:6c:73:6a: 43:0a:e5:f2:32:b3:12:ec:00:d9:cb:ad:88:23:38: d0:eb:fb:18:8c:30:e9:8a:0b:eb:c9:a8:a6:88:40: fe:ff:7c:b7:83:a1:b3:f3:38:32:da:d0:f5:b8:90: c7:6f:0d:40:7d:b0:57:f4:c5:85:86:8c:a4:13:f3: 7d:b3:28:9a:ea:12:94:42:24:bb:8e:84:eb:58:47: 9e:bf:7f:64:c6:f1:92:d4:a3:a7:8b:24:ab:e8:7e: b1:3d:60:b0:8a:58:1a:a9:0d:3c:bc:8b:db:3d:b4: 50:48:20:3d:4d:17:ff:39:71:c2:74:b4:f3:0a:ed: 92:9e:f6:d5:8e:4f:86:d1:fa:a6:f6:c2:bf:b7:fa: aa:db:f0:8d:ac:2e:00:78:b4:8f:46:a0:5d:0d:91: dc:41:27:15:49:16:c7:e7:49:5b:d8:56:46:ae:97: ac:2d:5a:c0:65:6d:15:46:cc:af:1c:2d:f0:0c:e3: 45:8c:ad:80:47:ce:ae:8f:77:f3:ee:58:f8:82:61: 6a:38:1e:70:14:b7:d0:da:72:44:94:76:ee:81:0f: 45:2d:c5:79:a6:d6:18:ae:c3:0e:51:2e:c6:0c:d1: d0:be:7a:e7:4c:08:f8:eb:65:be:88:cd:e5:cb:15: 00:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2A:85:B1:76:55:33:1C:9E:1D:B5:43:98:53:06:A1:26:80:33:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 67.214.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d0:16:f1:05:b5:70:46:13:5a:cd:74:0c:1b:b0:2b:40:b2: ff:4a:6b:f9:26:09:ff:c9:4f:fb:83:ff:eb:38:fc:ec:9f:4f: 14:95:27:77:f2:ee:30:9a:4e:ab:b0:f7:06:39:52:e4:e0:16: f8:a1:f1:e5:8a:2d:bc:49:78:e4:f8:c5:2c:99:b3:6d:b2:ce: 1f:c3:6d:d0:47:56:e7:05:cb:86:a1:65:d3:28:eb:e1:11:af: 62:b3:1e:df:59:56:18:9a:ba:5d:e3:33:1d:29:3e:ab:fb:1a: 6b:33:90:32:ff:69:8e:d5:b6:8f:e1:3c:09:41:d3:76:13:ed: 99:40:23:8f:4a:dd:68:ef:ad:23:ec:2a:c6:6a:dc:38:07:c6: c2:a6:3b:4b:cc:fe:d5:4f:0c:16:74:bd:1b:14:a4:a6:ed:04: 61:3b:11:39:20:1c:5d:45:41:20:19:9b:99:80:43:d7:12:81: 59:dc:31:93:95:bf:d7:9c:6e:64:52:d8:84:e9:57:2b:b4:41: 03:94:4c:2f:f8:58:b0:40:3a:10:88:e3:6f:2a:04:91:de:a6: 28:39:b3:25:50:4a:33:0d:bb:e6:48:f9:0e:b4:0f:75:f1:c2: 42:76:63:18:d3:59:bb:de:9c:49:88:8d:d4:d1:94:34:81:d5: a1:78:96:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Qm4WUxisuGyv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZGNmMmJlMmQtOWJjYi00Mjc3LWFlNWMtNjk3MTFkYmIyMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4HMa37JGVMDOdVsc2pDCuXyMrMS7ADZy62I IzjQ6/sYjDDpigvryaimiED+/3y3g6Gz8zgy2tD1uJDHbw1AfbBX9MWFhoykE/N9 syia6hKUQiS7joTrWEeev39kxvGS1KOniySr6H6xPWCwilgaqQ08vIvbPbRQSCA9 TRf/OXHCdLTzCu2SnvbVjk+G0fqm9sK/t/qq2/CNrC4AeLSPRqBdDZHcQScVSRbH 50lb2FZGrpesLVrAZW0VRsyvHC3wDONFjK2AR86uj3fz7lj4gmFqOB5wFLfQ2nJE lHbugQ9FLcV5ptYYrsMOUS7GDNHQvnrnTAj462W+iM3lyxUAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQqhbF2VTMcnh21Q5hTBqEmgDOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMDIyZDg5ODgtOWQyYi0z MmNlLTk3YzYtZjk5MzM3NWViZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9Z3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvQFvEFtXBGE1rNdAwbsCtAsv9Ka/kmCf/JT/uD/+s4/OyfTxSVJ3fy 7jCaTquw9wY5UuTgFvih8eWKLbxJeOT4xSyZs22yzh/DbdBHVucFy4ahZdMo6+ER r2KzHt9ZVhiaul3jMx0pPqv7GmszkDL/aY7Vto/hPAlB03YT7ZlAI49K3WjvrSPs KsZq3DgHxsKmO0vM/tVPDBZ0vRsUpKbtBGE7ETkgHF1FQSAZm5mAQ9cSgVncMZOV v9ecbmRS2ITpVyu0QQOUTC/4WLBAOhCI428qBJHepig5syVQSjMNu+ZI+Q60D3Xx wkJ2YxjTWbvenEmIjdTRlDSB1aF4lnM= -----END CERTIFICATE-----Generated at Thu Aug 21 12:41:02 2025 by rpki-client