$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa File: 25289940-5314-3e04-a710-ae91cf64f9b9.roa (raw, json) Hash identifier: mQtuhx1je8WIBU5XW4Ann2eSt2E/uJWGdGf6JbDZbrc= Subject key identifier: 5F:D5:CE:64:8C:D6:8A:15:BC:35:36:73:90:F8:7B:10:40:C1:43:C0 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584ACCA64E4CB36B2D1EDE69F95C Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 13649 IP address blocks: 72.250.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4e:4c:b3:6b:2d:1e:de:69:f9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=480e1ba1-c133-421e-89b3-ee535ee10c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:db:5e:f3:b0:63:c7:27:d4:a0:31:bd:e1: 92:18:40:ef:ba:84:64:89:0e:6a:9f:21:e8:a6:d1: b1:82:2c:c5:9d:ab:fb:99:b8:4a:11:f3:b9:2d:1c: dc:51:cf:00:79:e4:a0:2a:c3:cb:74:d8:46:23:0b: b7:e1:62:4a:f9:bd:f4:39:d7:b1:f2:09:fb:b5:90: a7:fc:50:60:ee:0f:c0:b7:8b:e2:e0:a2:d0:f9:c2: 83:14:97:0f:86:4d:84:13:f9:92:7d:27:ab:f1:99: 85:e5:b0:98:40:8e:76:29:a3:90:fc:4a:92:21:be: 5e:2e:b7:f1:4e:dc:7c:02:8d:5d:38:5d:fc:d4:16: 12:12:1a:32:59:0e:5c:3a:d3:42:55:47:74:ec:43: e5:2f:8e:5e:2e:db:68:c3:67:44:ff:b8:d1:a1:01: 56:ba:25:62:fb:91:26:88:80:55:3e:0c:94:6d:18: 51:8f:0b:cd:1a:7b:9f:2f:60:22:bd:26:28:a3:3e: a8:77:af:3c:99:1a:f7:70:f2:0d:62:5d:96:6e:07: d7:34:e9:40:3a:c5:51:7c:9d:24:b9:5e:72:21:10: 7b:1f:e3:cd:7a:96:89:b3:6d:ca:8a:30:bc:6d:d3: 45:f8:6f:73:3e:f9:c4:99:e7:55:68:e0:a4:44:86: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:CE:64:8C:D6:8A:15:BC:35:36:73:90:F8:7B:10:40:C1:43:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 72.250.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f9:a7:62:6e:ae:df:e0:3b:38:df:84:8b:32:f5:bb:df:b4:ce: 4a:80:04:2f:9b:62:be:64:f5:33:bd:81:9d:ac:b1:71:d7:28: 4f:8b:7c:e1:14:0a:67:f4:02:61:8d:5c:51:ac:4f:db:45:ee: 3e:1a:e6:98:f9:df:b8:0b:cd:c7:1d:1f:75:b8:b1:19:f6:b1: 36:b8:6c:b4:55:44:5f:bc:90:49:69:52:69:d6:a1:5b:2b:b6: 3c:21:39:3b:c7:c4:f4:2f:9d:2c:7a:a6:43:3f:1f:a9:df:34: fc:19:3b:91:72:ca:76:4b:b1:cc:89:6c:c6:74:93:da:bc:e8: d8:b1:0c:8a:67:9e:c9:f4:30:f0:09:80:08:73:70:de:78:3a: 29:1a:d9:5d:7a:cb:b4:fb:0f:84:0c:37:b3:89:2e:bb:9c:9a: c4:2d:d3:51:cd:c1:38:d8:05:c1:20:18:70:2e:b8:ab:02:43: 58:44:e9:f8:09:f8:d3:52:a5:97:92:14:b7:94:02:d8:1e:26: 97:88:25:16:03:8c:94:93:c4:0c:c3:43:6a:5b:9f:47:6b:fe: 8e:09:4b:98:85:a1:7b:cf:0e:3f:43:04:31:20:de:0b:78:aa: f9:1b:c3:3c:f5:fa:88:54:32:af:d2:5e:6a:91:1b:f8:0c:43: 33:9e:9c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk5Ms2stHt5p+VwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NDgwZTFiYTEtYzEzMy00MjFlLTg5YjMtZWU1MzVlZTEwYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr/bXvOwY8cn1KAxveGSGEDvuoRkiQ5qnyHo ptGxgizFnav7mbhKEfO5LRzcUc8AeeSgKsPLdNhGIwu34WJK+b30Odex8gn7tZCn /FBg7g/At4vi4KLQ+cKDFJcPhk2EE/mSfSer8ZmF5bCYQI52KaOQ/EqSIb5eLrfx Ttx8Ao1dOF381BYSEhoyWQ5cOtNCVUd07EPlL45eLttow2dE/7jRoQFWuiVi+5Em iIBVPgyUbRhRjwvNGnufL2AivSYooz6od688mRr3cPINYl2WbgfXNOlAOsVRfJ0k uV5yIRB7H+PNepaJs23KijC8bdNF+G9zPvnEmedVaOCkRIb6ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/VzmSM1ooVvDU2c5D4exBAwUPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMjUyODk5NDAtNTMxNC0z ZTA0LWE3MTAtYWU5MWNmNjRmOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSPoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPmnYm6u3+A7ON+EizL1u9+0zkqABC+bYr5k9TO9gZ2ssXHXKE+LfOEU Cmf0AmGNXFGsT9tF7j4a5pj537gLzccdH3W4sRn2sTa4bLRVRF+8kElpUmnWoVsr tjwhOTvHxPQvnSx6pkM/H6nfNPwZO5FyynZLscyJbMZ0k9q86NixDIpnnsn0MPAJ gAhzcN54Oika2V16y7T7D4QMN7OJLrucmsQt01HNwTjYBcEgGHAuuKsCQ1hE6fgJ +NNSpZeSFLeUAtgeJpeIJRYDjJSTxAzDQ2pbn0dr/o4JS5iFoXvPDj9DBDEg3gt4 qvkbwzz1+ohUMq/SXmqRG/gMQzOenJ0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:29 2025 by rpki-client