$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa File: 02940a4b-8f05-3cde-9acb-b94b17f34781.roa (raw, json) Hash identifier: d/w0lgXUjmMO4fiw8BB9UgBdbgvXxut28Ax5EDbLomI= Subject key identifier: 21:28:82:2F:62:6E:9F:0E:12:56:BB:A7:CE:DF:28:99:45:B6:6A:F5 Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F4328584B16A159BBA562DF9F5BF63DC0 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 64.84.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:59:bb:a5:62:df:9f:5b:f6:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=d99c62eb-7ca7-46b5-ab49-492b1252ef6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:8d:f7:bf:89:4e:c9:e8:56:9e:14:28:08: 19:20:01:dd:72:15:53:fc:8e:42:56:9c:b6:4e:56: a6:2d:e3:ba:78:ea:ef:a0:e8:0d:ac:3b:f7:3d:7b: 60:33:99:2c:5b:74:c7:0f:ac:45:7d:83:2f:07:99: 7b:06:28:35:39:70:57:dd:60:bd:25:d7:68:fa:6f: 44:cb:ba:a1:5e:ac:b6:3c:14:c4:35:d4:c8:02:56: ff:35:72:96:1e:0e:01:ec:c4:45:8b:08:94:97:78: 15:94:84:36:8e:41:dc:51:ad:c0:3a:dc:73:5d:6d: cc:7f:16:b8:bc:10:f6:d4:1d:7b:de:d4:b2:1a:58: 36:71:50:83:a7:bd:eb:1e:f2:4f:d6:6b:71:dd:1a: 49:ba:10:be:05:f6:27:87:66:82:41:ad:b9:3e:c6: d8:83:0d:44:c3:64:50:1a:8a:59:7f:96:d6:f7:b7: bd:ad:7c:49:e3:e3:b9:4e:e9:03:07:f3:f5:7a:ef: a5:cf:bd:2e:c1:0c:ea:1f:d1:46:85:0f:90:74:ce: 0b:d0:87:62:e8:05:78:d1:0a:65:f8:8c:e2:06:a0: 78:da:4c:cd:80:41:0d:c5:56:19:16:62:95:40:4e: 8e:ad:4f:d5:61:7b:5c:6c:cf:c6:3a:1c:bc:69:42: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:28:82:2F:62:6E:9F:0E:12:56:BB:A7:CE:DF:28:99:45:B6:6A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:78:27:cd:0f:3f:6f:ad:eb:33:80:9e:6e:48:c2:3c:aa:7c: ad:15:7e:93:ee:d4:79:df:55:13:61:5a:04:73:62:31:ca:a2: 2c:e0:d0:13:b5:92:a2:32:98:9b:11:e1:b0:1c:02:bf:d3:c2: 5f:79:d2:6e:0b:7c:ee:34:f2:7b:60:49:c1:2b:61:54:cb:99: 1c:90:a5:f5:c0:4d:53:bc:dd:85:2a:3c:f6:d5:9a:8a:99:9d: c1:b0:68:fc:82:2a:c1:6a:f6:3e:a7:46:21:cf:8e:7d:96:e8: 42:2b:c6:74:33:87:c9:78:3f:b9:3c:1c:c2:bf:d3:69:29:55: 6d:97:33:b3:59:58:2a:0f:d1:5a:cb:a8:52:26:8e:07:fa:1c: 77:e1:85:59:7e:7d:8c:0f:89:81:90:71:96:84:f7:6b:a5:64: df:49:e2:51:76:31:02:22:f8:d4:12:67:46:08:04:2b:0e:0d: e6:3c:88:2f:4f:6f:b5:97:39:0d:be:d4:fc:6f:77:63:ae:cb: 70:37:d9:4e:b1:e2:52:be:70:2d:5b:04:11:ba:39:53:c1:4c: d4:e2:74:4c:9c:b9:fb:c8:f9:b3:7c:80:b0:87:c8:84:b2:65: c1:9a:58:bd:a7:01:d6:b4:d5:6c:ed:3c:e3:5a:e8:42:5a:b7: 83:f9:56:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVm7pWLfn1v2PcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDk5YzYyZWItN2NhNy00NmI1LWFiNDktNDkyYjEyNTJlZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1GN97+JTsnoVp4UKAgZIAHdchVT/I5CVpy2 TlamLeO6eOrvoOgNrDv3PXtgM5ksW3THD6xFfYMvB5l7Big1OXBX3WC9Jddo+m9E y7qhXqy2PBTENdTIAlb/NXKWHg4B7MRFiwiUl3gVlIQ2jkHcUa3AOtxzXW3Mfxa4 vBD21B173tSyGlg2cVCDp73rHvJP1mtx3RpJuhC+BfYnh2aCQa25PsbYgw1Ew2RQ GopZf5bW97e9rXxJ4+O5TukDB/P1eu+lz70uwQzqH9FGhQ+QdM4L0Idi6AV40Qpl +IziBqB42kzNgEENxVYZFmKVQE6OrU/VYXtcbM/GOhy8aUIVQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEogi9ibp8OEla7p87fKJlFtmr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvMDI5NDBhNGItOGYwNS0z Y2RlLTlhY2ItYjk0YjE3ZjM0NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN4J80PP2+t6zOAnm5IwjyqfK0VfpPu1HnfVRNhWgRzYjHKoizg0BO1 kqIymJsR4bAcAr/Twl950m4LfO408ntgScErYVTLmRyQpfXATVO83YUqPPbVmoqZ ncGwaPyCKsFq9j6nRiHPjn2W6EIrxnQzh8l4P7k8HMK/02kpVW2XM7NZWCoP0VrL qFImjgf6HHfhhVl+fYwPiYGQcZaE92ulZN9J4lF2MQIi+NQSZ0YIBCsODeY8iC9P b7WXOQ2+1Pxvd2Ouy3A32U6x4lK+cC1bBBG6OVPBTNTidEycufvI+bN8gLCHyISy ZcGaWL2nAda01WztPONa6EJat4P5VjQ= -----END CERTIFICATE-----Generated at Thu Oct 9 01:25:18 2025 by rpki-client