$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa File: 5b2340ea-6054-31e3-b42d-7f23e40eb030.roa (raw, json) Hash identifier: kLSsHkHR3qljNVPyig8HX4ECwjl2QqpH+Z4ESM6LRGc= Subject key identifier: 8C:AD:4A:F1:2F:D8:84:6C:BD:C1:6A:3D:7E:B9:38:F3:41:AB:ED:6A Certificate issuer: /CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Certificate serial: 010D0C9F4328584B3556E378BCA8AFD642A11C80 Authority key identifier: 68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 399603 IP address blocks: 64.112.14.0/24 maxlen: 32 2602:fc9c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e3:78:bc:a8:af:d6:42:a1:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8b97fb36-fa66-4c12-bfa0-ca954b6e4618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:64:a1:83:3f:11:17:35:ff:cf:89:0c:91:e7: 8e:53:74:8b:e7:a2:cc:41:73:f7:81:b0:37:39:08: 91:ee:ee:83:4a:40:10:d6:5c:8e:d1:8e:29:99:d2: bd:99:91:73:b7:56:f0:5d:f2:f7:e6:14:6d:f1:ec: 91:1f:88:e8:ec:5e:49:9a:3a:22:84:ba:44:77:ca: 2c:be:ab:86:3b:a8:79:b5:55:ea:47:90:23:76:e6: af:a0:ad:c7:9c:32:16:03:ff:24:86:58:19:e5:49: 4d:9e:27:3f:89:a3:61:8f:d6:4a:fb:d8:bc:8c:1f: ec:fe:f9:b8:ff:28:22:ed:c5:0d:5f:2d:d1:8c:ed: fa:1f:11:03:57:c2:52:81:59:2e:68:f4:be:d4:5a: b8:83:71:b7:5c:dc:d3:fe:67:f3:f0:83:50:4c:35: c9:62:91:eb:32:fb:0d:83:1f:ba:49:11:b9:9c:f0: 14:f4:ea:d0:d0:d2:1d:1b:75:6e:1e:a1:eb:37:62: 1b:b0:f6:61:a7:22:4d:26:03:a5:e7:1c:79:7d:66: fd:75:bd:50:e7:23:d8:d3:a7:3f:b9:10:eb:05:c5: e3:fa:2d:47:2a:40:49:f5:b3:66:30:72:fd:ff:f4: 35:5e:5c:da:a1:50:76:2b:d0:e5:f7:e1:a3:66:38: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:4A:F1:2F:D8:84:6C:BD:C1:6A:3D:7E:B9:38:F3:41:AB:ED:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl X509v3 Authority Key Identifier: keyid:68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.14.0/24 IPv6: 2602:fc9c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:46:03:6c:f8:66:6f:e0:fa:4d:c7:aa:12:39:89:36:30:e4: 09:68:7d:a3:df:3a:2a:ce:0b:21:a5:50:3b:8e:87:f8:a0:c2: fa:1c:4f:85:39:a7:7f:51:1e:33:b0:49:8b:4b:2c:f0:8d:6f: 5b:6c:32:d6:60:d3:8c:5b:47:72:b1:c4:8f:64:08:be:ad:b1: 5d:9a:4a:50:27:62:95:27:fc:fc:e6:6e:2c:fc:d3:39:9d:7d: 83:51:98:8e:d1:01:0c:fe:f9:6e:90:7a:91:e6:fa:62:c4:88: bf:a7:51:13:b4:51:c1:37:9f:44:bf:84:5e:1b:97:53:41:53: 08:30:00:b7:16:35:b6:1a:56:3d:fb:aa:18:bb:56:15:63:55: b6:52:fb:54:7e:47:00:27:5f:72:5c:66:bc:3f:29:66:95:e4: cb:03:28:a5:27:2e:8c:4b:a1:83:dc:15:4e:37:34:94:11:ce: b4:df:52:61:70:c2:bb:f4:3b:7c:f4:ef:05:05:38:cf:84:43: 67:60:eb:20:4d:fb:d2:e7:b0:a4:b9:8d:67:ea:46:ab:8c:cf: 69:4c:39:5b:d1:ce:9e:95:40:54:8e:5c:ce:65:a1:0c:6c:f6: 1d:c6:71:9c:2d:76:8f:fd:85:e1:8e:52:85:fe:ab:78:a0:73: dc:79:2c:5a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs1VuN4vKiv1kKhHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1ZjZjZjgtMWVmOC00NDJiLWEyM2QtNDNjZjc5ZWQ1 ZDNmMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OGI5N2ZiMzYtZmE2Ni00YzEyLWJmYTAtY2E5NTRiNmU0NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimShgz8RFzX/z4kMkeeOU3SL56LMQXP3gbA3 OQiR7u6DSkAQ1lyO0Y4pmdK9mZFzt1bwXfL35hRt8eyRH4jo7F5JmjoihLpEd8os vquGO6h5tVXqR5AjduavoK3HnDIWA/8khlgZ5UlNnic/iaNhj9ZK+9i8jB/s/vm4 /ygi7cUNXy3RjO36HxEDV8JSgVkuaPS+1Fq4g3G3XNzT/mfz8INQTDXJYpHrMvsN gx+6SRG5nPAU9OrQ0NIdG3VuHqHrN2IbsPZhpyJNJgOl5xx5fWb9db1Q5yPY06c/ uRDrBcXj+i1HKkBJ9bNmMHL9//Q1XlzaoVB2K9Dl9+GjZjgHDwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIytSvEv2IRsvcFqPX65OPNBq+1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVm NmNmOC0xZWY4LTQ0MmItYTIzZC00M2NmNzllZDVkM2YvNWIyMzQwZWEtNjA1NC0z MWUzLWI0MmQtN2YyM2U0MGViMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDI1ZjZjZjgtMWVmOC00NDJiLWEy M2QtNDNjZjc5ZWQ1ZDNmLzAyNWY2Y2Y4LTFlZjgtNDQyYi1hMjNkLTQzY2Y3OWVk NWQzZi5jcmwwHwYDVR0jBBgwFoAUaD1Gqlk7+gSlHA4BIDF4Ax1XUWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVmNmNmOC0xZWY4LTQ0MmItYTIzZC00M2Nm NzllZDVkM2YuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQHAOMA4E AgACMAgDBgQmAvycADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8RgNs+GZv4PpNx6oSOYk2MOQJaH2j3zoq zgshpVA7jof4oML6HE+FOad/UR4zsEmLSyzwjW9bbDLWYNOMW0dyscSPZAi+rbFd mkpQJ2KVJ/z85m4s/NM5nX2DUZiO0QEM/vlukHqR5vpixIi/p1ETtFHBN59Ev4Re G5dTQVMIMAC3FjW2GlY9+6oYu1YVY1W2UvtUfkcAJ19yXGa8PylmleTLAyilJy6M S6GD3BVONzSUEc6031JhcMK79Dt89O8FBTjPhENnYOsgTfvS57CkuY1n6karjM9p TDlb0c6elUBUjlzOZaEMbPYdxnGcLXaP/YXhjlKF/qt4oHPceSxa -----END CERTIFICATE-----Generated at Sat Oct 11 01:04:35 2025 by rpki-client