$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa File: 2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa (raw, json) Hash identifier: SgbUG5G/h9PieqiWDYr5wE2u3v/IylL+Mf/H2fShEU8= Subject key identifier: FE:3C:93:BE:DE:24:51:35:7D:07:32:CD:F1:DE:78:B4:44:C3:E1:62 Certificate issuer: /CN=792c5c41-497a-4325-83ea-87d8b3dfdae9 Certificate serial: 010D0C9F4328584B0A1163A7B757C1AEF64A2940 Authority key identifier: 7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 397412 IP address blocks: 64.110.128.0/21 maxlen: 24 98.96.0.0/17 maxlen: 24 136.244.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:63:a7:b7:57:c1:ae:f6:4a:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792c5c41-497a-4325-83ea-87d8b3dfdae9 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=57e9cad5-63bd-454b-a9e7-e044ae27bb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:39:91:b2:cd:0c:0a:7e:ac:25:29:2e:12: 87:e7:3b:e3:bb:3d:36:45:06:96:30:33:2a:ad:60: 0d:46:0f:97:7c:ca:c8:1c:f5:a2:23:71:56:f7:01: a4:31:a5:df:fd:7c:e8:5f:b1:df:0d:f9:4c:46:32: 84:5e:c9:f2:ea:59:33:3a:a8:fa:6b:1f:8b:3d:79: 7d:c0:da:6c:3a:4b:6a:5e:bc:68:a7:18:7e:02:67: f4:79:b0:b8:76:c2:69:11:9f:bd:a1:08:b4:b2:e7: 87:d7:05:8b:67:eb:91:e6:e9:79:32:67:5a:75:6b: 06:d2:22:f0:b1:3b:47:9d:ed:bc:0a:58:0c:59:51: 35:57:5c:00:47:14:49:31:cd:46:94:c7:4c:48:41: f9:dd:de:68:c0:cc:db:5e:d1:22:2c:d2:cf:5a:48: 5a:81:6b:8d:1e:1a:46:0a:92:55:fa:63:e1:81:2f: aa:51:b2:bc:ef:bd:ba:90:f6:83:69:87:0c:f9:c6: d5:b6:47:fb:8b:a6:0f:25:2b:57:a1:ec:8f:8a:17: 6f:d7:37:68:39:af:b1:71:aa:73:cf:c3:54:1d:92: 58:05:f8:59:d3:2f:aa:c8:5b:a6:fc:37:f8:e4:c6: 79:66:59:ec:84:9b:02:fc:af:45:fb:e7:c9:f0:0c: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3C:93:BE:DE:24:51:35:7D:07:32:CD:F1:DE:78:B4:44:C3:E1:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl X509v3 Authority Key Identifier: keyid:7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer sbgp-ipAddrBlock: critical IPv4: 64.110.128.0/21 98.96.0.0/17 136.244.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6d:72:b1:1a:f2:83:5b:f8:b5:59:49:80:f2:19:d9:83:bb: 19:18:fc:0e:24:ea:96:03:86:c9:84:29:73:5d:f1:36:c7:fd: 94:d5:5a:d5:aa:aa:2f:1a:af:e1:84:50:3c:f3:82:7f:28:f3: 9b:9f:33:43:01:1f:ed:04:06:7b:83:c3:89:8c:6d:2e:ca:6e: 22:4c:a7:17:93:5d:36:a8:1c:ed:71:a0:e1:97:87:30:36:cd: cc:f1:36:48:f3:7b:25:e9:7a:d1:3d:cd:bb:23:fa:d3:05:4a: 47:25:5d:3c:82:ba:9f:5b:bf:a3:80:28:e3:c3:27:07:22:ba: 9e:43:a5:65:0d:81:85:a2:fd:3a:ae:e4:5d:2f:6d:07:9b:c2: 95:b4:8f:1e:a9:5a:d7:0f:ba:4f:27:aa:27:95:de:91:30:20: cf:c1:27:5d:f6:b0:e2:1d:02:8a:a5:e9:e7:b4:09:ce:63:f2: 8d:93:09:06:54:b7:70:73:b1:d4:7f:bf:a9:8a:0b:d9:0a:6d: 51:ac:a5:de:50:bf:7c:ec:98:e8:31:ec:25:4b:7d:e8:de:72: 48:ee:b7:4b:c6:fd:55:da:82:f7:43:71:a5:1b:06:61:f5:1c: 8a:44:9f:2b:80:37:9a:92:12:c3:df:9d:47:4e:1d:04:0b:99: 25:02:11:ea -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsKEWOnt1fBrvZKKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkyYzVjNDEtNDk3YS00MzI1LTgzZWEtODdkOGIzZGZk YWU5MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NTdlOWNhZDUtNjNiZC00NTRiLWE5ZTctZTA0NGFlMjdiYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglg5kbLNDAp+rCUpLhKH5zvjuz02RQaWMDMq rWANRg+XfMrIHPWiI3FW9wGkMaXf/XzoX7HfDflMRjKEXsny6lkzOqj6ax+LPXl9 wNpsOktqXrxopxh+Amf0ebC4dsJpEZ+9oQi0sueH1wWLZ+uR5ul5MmdadWsG0iLw sTtHne28ClgMWVE1V1wARxRJMc1GlMdMSEH53d5owMzbXtEiLNLPWkhagWuNHhpG CpJV+mPhgS+qUbK87726kPaDaYcM+cbVtkf7i6YPJStXoeyPihdv1zdoOa+xcapz z8NUHZJYBfhZ0y+qyFum/Df45MZ5ZlnshJsC/K9F++fJ8AyClQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFP48k77eJFE1fQcyzfHeeLREw+FiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83OTJj NWM0MS00OTdhLTQzMjUtODNlYS04N2Q4YjNkZmRhZTkvMjk1OWMxNTgtYzljNy0z NDhjLTlkMzYtYmIyYjgwYzliMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzkyYzVjNDEtNDk3YS00MzI1LTgz ZWEtODdkOGIzZGZkYWU5Lzc5MmM1YzQxLTQ5N2EtNDMyNS04M2VhLTg3ZDhiM2Rm ZGFlOS5jcmwwHwYDVR0jBBgwFoAUfXQlQZo4IJN/YM8yn1vWuOW2MZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83OTJjNWM0MS00OTdhLTQzMjUtODNlYS04N2Q4 YjNkZmRhZTkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG6AAwQH YmAAAwQGiPQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHBtcrEa8oNb+LVZSYDyGdmDuxkY/A4k6pYDhsmE KXNd8TbH/ZTVWtWqqi8ar+GEUDzzgn8o85ufM0MBH+0EBnuDw4mMbS7KbiJMpxeT XTaoHO1xoOGXhzA2zczxNkjzeyXpetE9zbsj+tMFSkclXTyCup9bv6OAKOPDJwci up5DpWUNgYWi/Tqu5F0vbQebwpW0jx6pWtcPuk8nqieV3pEwIM/BJ132sOIdAoql 6ee0Cc5j8o2TCQZUt3BzsdR/v6mKC9kKbVGspd5Qv3zsmOgx7CVLfejeckjut0vG /VXagvdDcaUbBmH1HIpEnyuAN5qSEsPfnUdOHQQLmSUCEeo= -----END CERTIFICATE-----Generated at Sat Oct 11 16:28:42 2025 by rpki-client