$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa File: ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa (raw, json) Hash identifier: nsPpxXj2tIbzFOVHlQFVnZjDGlkXVaag1rtM/y9SldE= Subject key identifier: 86:E7:D1:B6:1C:6E:29:30:CF:38:72:56:03:F5:A9:F1:88:33:6C:F6 Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Certificate serial: 010D0C9F4328584B48E1BAA42EB77A9C164054C0 Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 22351 IP address blocks: 64.88.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ba:a4:2e:b7:7a:9c:16:40:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=30d61d3b-91ec-4068-828f-b413ec561e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:2d:68:5b:90:fa:94:da:23:4a:08:28:ae: 5d:90:0c:f9:1a:72:9b:ff:75:97:92:b4:4b:c9:38: 52:6f:d3:98:50:9e:61:41:8f:f9:63:71:3d:6c:e8: 0c:9d:de:ca:2d:66:8a:2f:21:fc:08:da:31:7d:b8: 8a:3f:74:30:dc:4a:5d:1e:71:46:f6:e9:ef:d6:67: a6:7f:3d:e4:78:bb:e5:b2:9e:83:ee:d6:f3:56:3a: e1:ff:cc:93:88:5d:f2:1c:17:7e:a7:ee:e2:e2:6b: cc:fa:77:78:37:5e:9a:e2:f4:7a:29:08:85:c6:54: d0:f4:7b:b4:fd:57:71:d7:6d:2c:b3:3a:03:7c:b0: ef:92:d5:19:76:9e:9c:dc:7b:54:4b:2b:e0:f9:4d: c6:06:0d:04:aa:46:98:0e:e6:20:2a:7b:74:e5:02: 8a:04:9b:cd:76:5d:d7:b3:47:81:c1:76:c9:fc:e9: b6:23:67:97:49:49:74:c6:bf:07:d4:fc:ca:b9:c7: 5d:c0:82:30:22:e7:0b:80:e1:01:a8:89:61:7c:4d: e5:50:a9:c0:a6:ff:3f:db:49:fb:7c:14:0b:4d:08: a4:44:47:b1:a3:fa:5a:bd:09:f7:97:5b:5a:08:1c: ce:58:81:fe:72:b8:99:42:95:c0:2e:0e:bf:51:ac: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E7:D1:B6:1C:6E:29:30:CF:38:72:56:03:F5:A9:F1:88:33:6C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl X509v3 Authority Key Identifier: keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer sbgp-ipAddrBlock: critical IPv4: 64.88.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f6:d9:10:96:12:f3:6c:97:69:35:ba:d7:f3:43:fb:77:92: f7:27:42:00:8c:f8:61:80:f4:33:bb:51:07:c0:cf:a9:4b:50: cd:b7:ba:b7:64:4f:4e:58:c9:32:fb:1e:62:50:0c:5e:6c:90: 39:1b:3c:a8:6a:57:e7:28:d9:de:b7:cf:6e:7c:d8:55:fe:04: 11:31:bb:19:ba:90:6d:1d:bf:72:74:16:de:2d:9b:41:42:a1: 47:76:bd:fe:c6:03:10:ad:f3:b1:26:d1:47:7e:0a:4c:68:bf: b3:b3:ff:5c:cb:49:ee:7b:04:1a:fc:33:85:aa:73:9c:c3:d8: c4:de:1b:c1:b6:2b:e3:34:6c:22:90:05:d2:ec:9c:a0:9e:2b: cc:f2:d3:2a:97:bb:53:b3:98:ae:09:5f:7b:4d:0a:8e:c7:5a: 10:6e:dc:7f:70:e2:86:a1:f6:91:5c:d4:67:0b:2f:01:50:70: a4:d9:6e:64:29:dc:cf:86:43:63:44:f7:0d:e7:1f:0f:e3:41: 7f:ee:44:1a:46:45:4f:eb:11:fc:7a:d0:72:72:a4:75:bc:ac: 61:8e:fc:f2:1f:19:38:cc:6f:60:f4:e0:4d:fb:24:07:e2:71: 65:8b:d4:44:66:be:ae:f6:fd:de:13:31:81:e4:c2:ec:ac:0a: ef:3b:b5:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bqkLrd6nBZAVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh YTQ0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzBkNjFkM2ItOTFlYy00MDY4LTgyOGYtYjQxM2VjNTYxZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OEtaFuQ+pTaI0oIKK5dkAz5GnKb/3WXkrRL yThSb9OYUJ5hQY/5Y3E9bOgMnd7KLWaKLyH8CNoxfbiKP3Qw3EpdHnFG9unv1mem fz3keLvlsp6D7tbzVjrh/8yTiF3yHBd+p+7i4mvM+nd4N16a4vR6KQiFxlTQ9Hu0 /Vdx120sszoDfLDvktUZdp6c3HtUSyvg+U3GBg0EqkaYDuYgKnt05QKKBJvNdl3X s0eBwXbJ/Om2I2eXSUl0xr8H1PzKucddwIIwIucLgOEBqIlhfE3lUKnApv8/20n7 fBQLTQikREexo/pavQn3l1taCBzOWIH+criZQpXALg6/Uay2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbn0bYcbikwzzhyVgP1qfGIM2z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvZWNiYTAwYTEtNWZmOS0z ZmE3LWFjYzctZGQyY2RhMzE0NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4 YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/22RCWEvNsl2k1utfzQ/t3kvcnQgCM+GGA9DO7UQfAz6lLUM23urdk T05YyTL7HmJQDF5skDkbPKhqV+co2d63z2582FX+BBExuxm6kG0dv3J0Ft4tm0FC oUd2vf7GAxCt87Em0Ud+Ckxov7Oz/1zLSe57BBr8M4Wqc5zD2MTeG8G2K+M0bCKQ BdLsnKCeK8zy0yqXu1OzmK4JX3tNCo7HWhBu3H9w4oah9pFc1GcLLwFQcKTZbmQp 3M+GQ2NE9w3nHw/jQX/uRBpGRU/rEfx60HJypHW8rGGO/PIfGTjMb2D04E37JAfi cWWL1ERmvq72/d4TMYHkwuysCu87tX0= -----END CERTIFICATE-----Generated at Sat Oct 11 05:15:56 2025 by rpki-client