$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa File: dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa (raw, json) Hash identifier: 2YUfEh61LN0Bg8CsJYvXKBWDblQetZKaRlNgPis8s7g= Subject key identifier: 17:EC:B2:EE:64:7A:89:D4:43:8D:61:19:72:75:FF:07:8E:1B:74:65 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584ACE0B9E1FDFF186BE995E7678 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 27235 IP address blocks: 65.120.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9e:1f:df:f1:86:be:99:5e:76:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=73e7506d-a92a-4556-81ad-bb80dec33fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:04:25:70:64:98:ae:49:ba:de:1b:1d:90: 06:a0:1a:53:5c:f5:4c:bd:c6:14:b4:b3:9a:87:87: a2:8d:fc:84:7d:cb:65:df:d3:9a:fc:7f:45:e2:b1: 1f:8e:b8:da:12:29:cf:c5:a0:ce:05:00:46:3f:78: e6:b4:c0:22:06:e5:87:d4:be:3c:18:9b:7f:1c:84: e4:6a:73:a8:b3:c2:70:73:95:21:45:0b:e9:fe:b8: e3:dd:98:85:50:13:c0:60:ef:a9:9b:dc:3b:10:79: ce:ac:24:ac:7d:f6:6f:98:e5:41:69:0e:56:a4:38: b1:dc:ee:6f:c4:d3:33:2b:03:f3:b1:ae:d9:56:de: b5:ae:1d:b6:86:28:b0:94:7c:83:9e:27:7c:62:ff: c6:0f:0a:25:27:ec:8f:b4:84:24:17:5d:82:27:96: 6a:45:45:9d:df:51:7d:ed:c2:60:ea:d2:c9:cf:c9: 1d:f9:71:73:9e:6c:49:0d:cf:d1:4a:7c:76:ee:70: 43:01:1e:ce:15:52:2a:dd:84:99:5b:f3:95:3f:53: 37:bd:8e:4c:c9:f4:2d:3b:10:ee:10:93:b0:62:92: da:88:db:eb:33:76:14:b4:9c:b2:86:4f:a2:cf:f0: d7:15:a9:33:31:3c:2e:6c:14:91:90:4b:59:03:a0: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EC:B2:EE:64:7A:89:D4:43:8D:61:19:72:75:FF:07:8E:1B:74:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.120.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:df:9a:d9:a9:f3:41:fa:d9:8a:e1:6f:ea:84:24:a0:ec:c4: 58:58:72:a9:52:2c:aa:62:ce:c1:14:da:10:3c:82:71:3a:85: 9d:c1:18:50:5e:93:7f:9f:86:74:56:23:ec:db:15:ec:d5:e1: d3:95:51:19:d4:9f:f6:e8:3b:fb:20:6a:1f:5d:d9:f0:01:08: d2:3a:b6:69:6f:08:51:3e:5b:a9:e9:a4:ce:0d:77:07:ea:84: 8b:13:a3:a1:de:ed:df:f6:b2:5f:61:ce:79:77:5a:c2:40:34: 27:1c:c5:bd:18:1a:be:8b:95:46:7e:51:38:aa:9c:9f:30:ba: d5:de:e6:40:2b:b4:83:01:ac:0c:c7:a2:4f:91:c2:ed:a4:7a: 81:73:f0:ef:e0:a9:40:4c:f1:74:d8:1d:7a:ab:ed:33:f3:43: 11:80:8d:c8:22:d3:dd:f4:1e:90:5e:ca:63:a9:fe:07:bc:e4: 77:11:3b:64:3d:e7:75:45:7e:71:71:35:0d:08:e4:93:69:94: b6:9d:a6:5c:83:62:45:9e:51:e7:b9:97:5a:34:8b:14:51:04: 89:d9:23:4e:c7:3c:b1:8c:60:cd:5b:eb:ba:96:2b:06:35:b3: e8:19:80:77:ac:65:02:89:c3:0a:1e:b7:76:df:49:c5:14:6c: 3e:2c:2e:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC54f3/GGvpledngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NzNlNzUwNmQtYTkyYS00NTU2LTgxYWQtYmI4MGRlYzMzZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L8EJXBkmK5Jut4bHZAGoBpTXPVMvcYUtLOa h4eijfyEfctl39Oa/H9F4rEfjrjaEinPxaDOBQBGP3jmtMAiBuWH1L48GJt/HITk anOos8Jwc5UhRQvp/rjj3ZiFUBPAYO+pm9w7EHnOrCSsffZvmOVBaQ5WpDix3O5v xNMzKwPzsa7ZVt61rh22hiiwlHyDnid8Yv/GDwolJ+yPtIQkF12CJ5ZqRUWd31F9 7cJg6tLJz8kd+XFznmxJDc/RSnx27nBDAR7OFVIq3YSZW/OVP1M3vY5MyfQtOxDu EJOwYpLaiNvrM3YUtJyyhk+iz/DXFakzMTwubBSRkEtZA6CiOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfssu5keonUQ41hGXJ1/weOG3RlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZGZlMGVjM2MtMTRiMS0z YmRmLTlmMjUtNmRjZTc1MWRlMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQXgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTfmtmp80H62Yrhb+qEJKDsxFhYcqlSLKpizsEU2hA8gnE6hZ3BGFBe k3+fhnRWI+zbFezV4dOVURnUn/boO/sgah9d2fABCNI6tmlvCFE+W6nppM4Ndwfq hIsTo6He7d/2sl9hznl3WsJANCccxb0YGr6LlUZ+UTiqnJ8wutXe5kArtIMBrAzH ok+Rwu2keoFz8O/gqUBM8XTYHXqr7TPzQxGAjcgi0930HpBeymOp/ge85HcRO2Q9 53VFfnFxNQ0I5JNplLadplyDYkWeUee5l1o0ixRRBInZI07HPLGMYM1b67qWKwY1 s+gZgHesZQKJwwoet3bfScUUbD4sLns= -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:41 2025 by rpki-client