$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25af67c9-2f84-38a2-a506-7e75f6aa8e7d.roa File: 25af67c9-2f84-38a2-a506-7e75f6aa8e7d.roa (raw, json) Hash identifier: 5EEwgqVzGh50chFGxxRi/DIG3zATqbHYL1fVFLrjAGM= Subject key identifier: 5D:5D:4E:41:2A:E6:99:1D:37:16:39:07:0D:FC:F8:17:31:D6:DE:6B Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AF0F1554B47EF149FEF558540 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25af67c9-2f84-38a2-a506-7e75f6aa8e7d.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9304 IP address blocks: 216.83.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:55:4b:47:ef:14:9f:ef:55:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=c5e7cefb-860a-4b68-9ced-57db225a1bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:a4:b0:a9:0b:70:2c:78:3b:8a:d2:84:48: dd:0c:4a:24:9f:fc:41:df:8f:6e:46:97:15:4d:f2: 72:d5:a6:d7:a8:d4:c5:07:09:8c:97:f9:d1:fa:12: a3:51:7f:4d:34:48:7d:73:b4:34:16:5b:31:b5:c3: e8:79:85:2c:4c:cb:08:5d:31:1e:30:02:ca:4c:9d: 27:9f:2a:f5:38:65:56:87:64:e8:03:54:00:4d:15: b3:0b:fd:a9:3f:f1:92:57:32:e7:7f:06:5f:e3:d9: 61:2e:a6:98:2e:85:b5:a9:9f:66:28:93:88:14:29: a6:33:7f:80:dc:4d:2b:61:e6:df:43:61:61:aa:a8: 69:51:68:a4:71:3e:4f:aa:48:4d:3f:cc:e6:d2:41: 15:d0:0a:a9:df:c4:5b:4d:82:ce:01:9f:5a:99:95: bd:c3:b2:3b:6a:bd:2f:0d:3c:da:99:f9:ce:83:68: f5:7e:36:2f:93:86:12:8e:25:53:42:3a:58:22:c7: ab:10:47:59:f5:b4:ec:48:61:a8:7e:fe:a7:24:92: 80:63:a5:ea:f3:4d:c5:49:ca:ba:1d:79:fc:69:62: c4:e4:3f:bc:69:4e:f3:df:25:d0:01:e7:e8:84:f8: 0e:ee:8d:9a:b3:fc:9f:40:f0:ba:39:8c:4a:99:e1: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5D:4E:41:2A:E6:99:1D:37:16:39:07:0D:FC:F8:17:31:D6:DE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25af67c9-2f84-38a2-a506-7e75f6aa8e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ee:c8:54:a3:c6:80:6c:07:39:b2:74:fe:66:d2:78:7f:86: 33:0d:ce:e5:e8:68:48:3b:a9:cb:d8:6f:67:45:a4:90:c6:c0: f2:f8:be:9d:92:a0:2b:6c:ae:de:b2:ec:fa:f5:0b:3e:bf:5f: 88:be:83:47:a3:79:42:4c:78:1d:d4:0a:86:5e:ee:31:34:df: 5f:84:df:53:11:0d:81:bb:19:67:6b:cc:dc:0f:d6:4e:28:9e: d1:95:a5:1c:ca:55:ed:26:d1:74:ad:30:58:92:ce:ee:ca:df: e9:89:5c:cc:39:8d:d7:6a:df:ca:39:e1:09:49:9a:a2:3e:d1: 2c:7a:e2:aa:ff:42:d6:73:58:84:38:30:fa:f9:af:c1:89:75: e1:9b:87:25:09:c6:fe:87:93:54:21:fd:6f:67:54:6e:49:0b: e6:1f:c2:f0:75:32:76:98:bf:48:96:a8:47:7e:a7:28:de:1d: a5:7b:49:d1:50:30:0a:22:b1:9e:e1:fa:d3:07:7b:0d:51:07: a5:94:51:ec:4a:04:cd:e4:2d:44:f1:ff:e5:44:f6:6d:03:59: 3b:6b:e7:6c:fe:3b:d8:c7:c1:6d:ab:5a:d1:c3:f0:ab:b2:e9: c4:33:2f:fe:4a:5d:d6:6a:c7:9a:66:bc:85:7c:06:59:fa:3c: 87:e9:f6:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VVLR+8Un+9VhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YzVlN2NlZmItODYwYS00YjY4LTljZWQtNTdkYjIyNWExYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoyksKkLcCx4O4rShEjdDEokn/xB349uRpcV TfJy1abXqNTFBwmMl/nR+hKjUX9NNEh9c7Q0FlsxtcPoeYUsTMsIXTEeMALKTJ0n nyr1OGVWh2ToA1QATRWzC/2pP/GSVzLnfwZf49lhLqaYLoW1qZ9mKJOIFCmmM3+A 3E0rYebfQ2FhqqhpUWikcT5PqkhNP8zm0kEV0Aqp38RbTYLOAZ9amZW9w7I7ar0v DTzamfnOg2j1fjYvk4YSjiVTQjpYIserEEdZ9bTsSGGofv6nJJKAY6Xq803FScq6 HXn8aWLE5D+8aU7z3yXQAefohPgO7o2as/yfQPC6OYxKmeG2VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1dTkEq5pkdNxY5Bw38+Bcx1t5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMjVhZjY3YzktMmY4NC0z OGEyLWE1MDYtN2U3NWY2YWE4ZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2FMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvuyFSjxoBsBzmydP5m0nh/hjMNzuXoaEg7qcvYb2dFpJDGwPL4vp2S oCtsrt6y7Pr1Cz6/X4i+g0ejeUJMeB3UCoZe7jE031+E31MRDYG7GWdrzNwP1k4o ntGVpRzKVe0m0XStMFiSzu7K3+mJXMw5jddq38o54QlJmqI+0Sx64qr/QtZzWIQ4 MPr5r8GJdeGbhyUJxv6Hk1Qh/W9nVG5JC+YfwvB1MnaYv0iWqEd+pyjeHaV7SdFQ MAoisZ7h+tMHew1RB6WUUexKBM3kLUTx/+VE9m0DWTtr52z+O9jHwW2rWtHD8Kuy 6cQzL/5KXdZqx5pmvIV8Bln6PIfp9nM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:51:53 2025 by rpki-client