$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa File: cb1754c2-89fa-3b4c-a110-0ca448297dac.roa (raw, json) Hash identifier: DbsqzCdtgMTt0Gf6wPiU7xQOgCmfBQkX4M/owjzW/40= Subject key identifier: EE:6A:70:DF:B9:D1:18:92:B2:5B:1C:B5:2D:50:2A:4C:36:BE:B6:D7 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AD7D1097522F0603316E91480 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 55269 IP address blocks: 67.214.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:09:75:22:f0:60:33:16:e9:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=898e6807-24e8-4c2f-ada6-58e1a0b28c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:46:ac:39:b9:11:76:02:f4:e4:ff:63:8a:76: 51:b4:59:ad:e1:4e:3f:4a:78:8e:0f:1c:49:c5:cc: 4d:c7:74:81:1f:a5:36:6e:e6:62:81:c1:47:e3:2c: 22:c3:1e:21:73:f9:1b:83:4e:de:60:ad:0a:bc:f7: 63:33:f8:9b:11:d6:06:16:55:95:a1:5f:4f:8c:3d: 5e:23:4d:71:ea:07:0f:03:ad:32:e1:29:23:82:7e: e0:e7:5d:eb:79:6a:b5:07:55:b0:f4:51:6a:70:e0: 2a:41:2d:3e:c7:63:10:a8:97:ac:55:b3:35:cb:ea: 9e:77:d7:aa:64:5a:ab:7b:c7:01:e4:70:bd:52:80: 23:66:fe:af:91:77:d6:e0:59:37:2a:35:87:8c:4b: e1:df:42:e3:39:7b:cc:69:7c:e2:77:0d:24:23:f8: 62:d0:6f:cc:0e:c2:53:50:6a:f6:e1:19:fc:f2:68: 2c:b9:5b:b2:ae:5f:16:61:84:d7:14:c7:c5:e0:8c: 6f:5c:74:7e:77:c3:ba:60:1d:52:ff:ef:4b:ff:43: 94:db:55:f0:3e:c3:6b:44:2a:10:a6:0e:44:c1:db: e3:b9:37:ee:68:94:40:99:2e:35:1f:e0:83:cb:73: 29:57:c7:5a:c0:46:d5:f0:27:43:3a:66:2d:e4:fa: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6A:70:DF:B9:D1:18:92:B2:5B:1C:B5:2D:50:2A:4C:36:BE:B6:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 67.214.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9d:d8:37:50:5f:9a:cc:9e:15:15:9c:49:af:70:8a:a9:22: 10:2b:0c:e2:15:00:27:a7:0d:46:b0:71:11:3b:18:00:b2:fb: 89:9b:9e:69:55:46:67:4c:f7:f1:3d:c8:c3:79:9e:ec:f9:dd: 0e:65:83:10:36:b8:aa:56:e4:82:16:e6:18:b9:d4:b1:8d:96: 6c:fb:97:f6:38:d8:d0:8d:ec:6b:95:c1:22:5d:ba:54:c9:e4: a7:d5:57:22:08:76:fc:2d:37:6d:f7:ce:a1:1a:df:de:29:eb: 15:e5:f3:ed:a1:c8:e4:30:e7:74:68:70:9e:5c:b2:59:2b:bc: 2f:94:5d:aa:e6:70:dc:f1:b1:47:f7:1e:0a:8c:15:f2:f8:e2: cc:91:74:ea:00:8c:c4:ad:fc:7d:71:24:01:a1:e0:60:d8:21: 4b:d9:68:48:ea:64:8c:12:df:80:5e:74:f2:6e:ef:a7:6b:eb: 73:09:0a:7b:80:70:80:e2:85:b7:82:fa:b2:88:15:a4:b7:5c: 4a:18:c9:35:98:40:dc:bd:f4:cb:e6:e4:49:f7:bb:40:71:13: 96:ef:5f:ee:b5:2a:fe:ab:dd:da:02:a2:16:07:03:56:5b:56: ce:df:63:56:17:84:2b:21:6c:f2:e9:28:35:dd:a0:a3:2c:63: 51:3e:85:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Ql1IvBgMxbpFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ODk4ZTY4MDctMjRlOC00YzJmLWFkYTYtNThlMWEwYjI4YzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UasObkRdgL05P9jinZRtFmt4U4/SniODxxJ xcxNx3SBH6U2buZigcFH4ywiwx4hc/kbg07eYK0KvPdjM/ibEdYGFlWVoV9PjD1e I01x6gcPA60y4Skjgn7g513reWq1B1Ww9FFqcOAqQS0+x2MQqJesVbM1y+qed9eq ZFqre8cB5HC9UoAjZv6vkXfW4Fk3KjWHjEvh30LjOXvMaXzidw0kI/hi0G/MDsJT UGr24Rn88mgsuVuyrl8WYYTXFMfF4IxvXHR+d8O6YB1S/+9L/0OU21XwPsNrRCoQ pg5EwdvjuTfuaJRAmS41H+CDy3MpV8dawEbV8CdDOmYt5PrrkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5qcN+50RiSslsctS1QKkw2vrbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvY2IxNzU0YzItODlmYS0z YjRjLWExMTAtMGNhNDQ4Mjk3ZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9ZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKd2DdQX5rMnhUVnEmvcIqpIhArDOIVACenDUawcRE7GACy+4mbnmlV RmdM9/E9yMN5nuz53Q5lgxA2uKpW5IIW5hi51LGNlmz7l/Y42NCN7GuVwSJdulTJ 5KfVVyIIdvwtN233zqEa394p6xXl8+2hyOQw53RocJ5cslkrvC+UXarmcNzxsUf3 HgqMFfL44syRdOoAjMSt/H1xJAGh4GDYIUvZaEjqZIwS34BedPJu76dr63MJCnuA cIDihbeC+rKIFaS3XEoYyTWYQNy99Mvm5En3u0BxE5bvX+61Kv6r3doCohYHA1Zb Vs7fY1YXhCshbPLpKDXdoKMsY1E+hRI= -----END CERTIFICATE-----Generated at Thu Aug 21 12:41:06 2025 by rpki-client