$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa File: 4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa (raw, json) Hash identifier: IGi7aOMfQt1C+oY09PWfnHPg2t/c8GEbJYkTwpzEfs0= Subject key identifier: 3D:4D:86:06:10:AD:E9:EF:64:DD:84:2F:BD:13:7C:D3:A5:0A:2C:2B Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F4328584B153C1B649B7718CA1E22BB40 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 33651 IP address blocks: 64.84.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1b:64:9b:77:18:ca:1e:22:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=b3320eb4-21c0-4e47-81ce-b8e0385b2c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:ee:07:8b:36:37:e7:f3:7f:12:d9:63:6b: d1:0e:80:a4:d8:fe:a3:db:a3:95:99:8f:a9:59:53: a1:d6:75:97:d3:eb:5f:f1:87:9c:cd:36:c9:d6:d2: 95:76:f1:d2:88:c0:a0:88:b7:d4:cc:bc:48:48:65: 9c:55:a4:38:42:9e:18:15:f6:98:f4:66:ae:32:05: 99:9c:d5:04:43:64:ce:35:5f:1d:0f:83:30:8f:b5: 77:8b:df:eb:95:83:c0:1f:3b:7a:25:32:c1:79:cd: a0:05:e6:8b:4e:0d:3f:29:85:b6:db:93:20:fc:9e: ff:69:ea:5b:ec:33:ae:14:d8:36:d6:3c:4b:26:9a: c5:47:f5:48:c0:12:9c:88:f3:29:0c:d6:e5:70:25: 50:20:31:eb:c8:72:a0:e7:db:2a:7a:28:11:83:bc: eb:34:40:ef:fe:42:ba:a2:ac:c1:db:54:99:3b:39: 9f:91:1a:92:d3:8e:93:f6:71:3e:23:b1:3d:56:09: ef:ac:32:fc:57:7a:07:8d:ad:f0:8d:63:3b:f7:46: 3d:67:79:75:60:23:47:d9:cb:c0:4e:57:24:fc:4d: 9f:00:1f:29:2c:5f:01:59:c4:89:c6:dc:f6:3b:a8: bf:67:16:9c:15:27:c8:c3:32:24:d7:be:bb:17:4f: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4D:86:06:10:AD:E9:EF:64:DD:84:2F:BD:13:7C:D3:A5:0A:2C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:74:61:49:f6:19:b8:66:5f:e4:c3:f5:2b:2d:c7:35:05:7f: 3f:5b:0e:2e:6a:d3:e4:87:aa:26:24:c2:59:e5:e4:9d:ce:5c: da:e2:79:1c:b5:d6:7e:93:5f:0b:0d:74:f6:6b:54:62:73:01: f9:33:8c:a4:8b:72:49:b2:d4:e3:1b:aa:0b:20:7a:31:9b:b1: e1:f2:35:37:c0:4d:3a:d9:fb:73:c9:72:3f:71:b3:4f:4e:8c: d7:bd:b4:af:3e:4b:f9:52:9a:92:57:5c:90:f5:b9:95:c7:ca: c3:67:f7:e3:8c:e9:d3:16:0c:04:90:17:90:96:b4:b4:3d:4a: 8d:e4:35:9d:a0:ad:ae:4b:2f:71:d3:f7:56:82:58:f5:ae:dd: 15:a8:a9:e9:0b:0c:a9:42:e3:8c:8d:a8:54:53:92:c0:7d:cc: 4d:f1:33:ba:ec:9e:28:c9:05:7c:2c:18:9a:c7:30:46:af:f8: 70:61:4a:0d:60:3d:5a:17:09:f6:51:58:12:02:97:bd:2e:5c: 4f:de:85:0c:db:f4:a7:bb:7a:2d:39:2f:34:00:90:9c:6a:98: ad:13:f8:f9:a2:38:e3:72:4c:5f:cf:e3:66:22:d5:59:df:d2: 83:e8:d9:0b:78:2f:88:af:29:ea:a5:0c:a2:0b:d6:9e:61:30: da:d5:47:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBtkm3cYyh4iu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YjMzMjBlYjQtMjFjMC00ZTQ3LTgxY2UtYjhlMDM4NWIyYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCHuB4s2N+fzfxLZY2vRDoCk2P6j26OVmY+p WVOh1nWX0+tf8YeczTbJ1tKVdvHSiMCgiLfUzLxISGWcVaQ4Qp4YFfaY9GauMgWZ nNUEQ2TONV8dD4Mwj7V3i9/rlYPAHzt6JTLBec2gBeaLTg0/KYW225Mg/J7/aepb 7DOuFNg21jxLJprFR/VIwBKciPMpDNblcCVQIDHryHKg59sqeigRg7zrNEDv/kK6 oqzB21SZOzmfkRqS046T9nE+I7E9VgnvrDL8V3oHja3wjWM790Y9Z3l1YCNH2cvA Tlck/E2fAB8pLF8BWcSJxtz2O6i/ZxacFSfIwzIk1767F0/1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1NhgYQrenvZN2EL70TfNOlCiwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvNGM4ZjZmY2ItOGIxMS0z YTQ5LWFmNjItZjU5YTM2ZmRjZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB0YUn2GbhmX+TD9SstxzUFfz9bDi5q0+SHqiYkwlnl5J3OXNrieRy1 1n6TXwsNdPZrVGJzAfkzjKSLckmy1OMbqgsgejGbseHyNTfATTrZ+3PJcj9xs09O jNe9tK8+S/lSmpJXXJD1uZXHysNn9+OM6dMWDASQF5CWtLQ9So3kNZ2gra5LL3HT 91aCWPWu3RWoqekLDKlC44yNqFRTksB9zE3xM7rsnijJBXwsGJrHMEav+HBhSg1g PVoXCfZRWBICl70uXE/ehQzb9Ke7ei05LzQAkJxqmK0T+PmiOONyTF/P42Yi1Vnf 0oPo2Qt4L4ivKeqlDKIL1p5hMNrVR7E= -----END CERTIFICATE-----Generated at Thu Oct 9 06:23:54 2025 by rpki-client