$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa File: 8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa (raw, json) Hash identifier: p5amQxeZ5n7+GLR3eiCYr8CUwyiCK3k5V1e4QYk/DfY= Subject key identifier: 23:E7:16:D8:79:1B:F8:4C:2A:BC:CD:E5:66:35:3E:74:04:81:5B:58 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B41E715A239A64B199A8AC660 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 65.39.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:15:a2:39:a6:4b:19:9a:8a:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=cdbd877d-f9ea-4e56-a9d2-cd3f0a6ebea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:f9:ce:07:46:21:30:53:64:95:2b:98:74: ee:ed:92:59:8a:a8:f0:b7:62:6f:dc:49:69:f7:4b: db:db:cf:35:19:8c:97:ac:26:0e:83:f9:d9:9e:05: 7e:af:9b:45:27:c8:52:56:82:f7:9f:b9:ef:c8:96: bc:0c:c1:3f:cf:9c:36:51:ea:cb:15:73:da:01:6b: f4:b0:79:4a:11:c7:e0:7d:3e:93:93:67:d9:84:ad: 9f:f1:69:37:50:d4:a3:66:a2:a3:6b:a4:94:8b:a9: 83:1b:46:56:0c:33:76:1c:b7:b4:a8:b0:23:e4:de: 1d:cd:41:1b:03:be:d0:1a:9f:74:27:13:12:d7:57: a9:0e:b1:26:b9:d6:be:66:97:35:5d:d7:a3:44:68: f6:09:3e:b8:5d:0a:0d:58:0c:d3:b6:df:13:53:73: b4:e4:de:e3:34:e6:22:e8:71:4b:54:7b:83:de:65: cd:6f:d9:ab:99:9a:b9:77:5f:04:0c:f5:ea:2c:77: 0e:d3:65:79:1d:2e:57:ef:c3:ad:de:5d:dc:e1:02: 61:34:2f:f4:a7:b5:d8:e7:da:04:f6:e7:49:3c:df: 68:98:de:8f:36:e8:6d:79:fb:45:50:c5:99:b5:24: 43:cc:77:b0:61:3e:3f:ec:59:41:aa:90:46:82:1c: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E7:16:D8:79:1B:F8:4C:2A:BC:CD:E5:66:35:3E:74:04:81:5B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9b:d3:36:64:af:1d:5f:d5:23:96:c1:28:76:35:27:c0:02: 2a:ec:87:79:c7:c9:70:89:74:94:ba:da:5f:bf:51:27:b2:b6: 13:84:26:61:de:49:c8:29:a0:2e:42:50:d1:5b:36:fc:53:97: d2:a2:0f:27:bc:f9:49:ea:08:36:ed:f4:9f:3d:ef:ae:16:49: 3d:4c:81:ad:d5:79:34:9a:e6:59:28:ee:f0:45:b0:55:83:06: f1:1a:f5:70:bd:b0:26:d8:ad:64:5c:bf:76:f5:f8:d0:38:4d: 22:cc:0b:95:ef:4e:f8:23:a3:64:94:f2:55:41:d1:de:a9:d2: 18:81:35:b9:58:a6:fb:fc:99:20:a9:88:1a:60:81:a9:86:d8: 16:14:e4:7b:7e:da:4c:b3:b4:ab:bc:a7:f6:fe:82:f7:15:17: 4e:71:45:86:cf:d5:39:f7:23:dd:47:d8:ee:27:39:ae:59:4f: 49:7d:b7:9e:ad:b9:24:cc:82:9f:a0:b3:9b:60:53:89:95:79: b1:6f:58:00:c4:f2:1a:6e:ec:c1:a5:6e:03:3c:6b:9d:89:26: 97:55:86:1b:fd:dc:1a:66:6e:2e:a5:75:11:fe:63:29:58:5a: 87:fd:1d:a9:46:69:57:c9:8a:f7:65:c9:03:4a:ce:cc:20:e6: e2:13:bc:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xWiOaZLGZqKxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2RiZDg3N2QtZjllYS00ZTU2LWE5ZDItY2QzZjBhNmViZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2/5zgdGITBTZJUrmHTu7ZJZiqjwt2Jv3Elp 90vb2881GYyXrCYOg/nZngV+r5tFJ8hSVoL3n7nvyJa8DME/z5w2UerLFXPaAWv0 sHlKEcfgfT6Tk2fZhK2f8Wk3UNSjZqKja6SUi6mDG0ZWDDN2HLe0qLAj5N4dzUEb A77QGp90JxMS11epDrEmuda+Zpc1XdejRGj2CT64XQoNWAzTtt8TU3O05N7jNOYi 6HFLVHuD3mXNb9mrmZq5d18EDPXqLHcO02V5HS5X78Ot3l3c4QJhNC/0p7XY59oE 9udJPN9omN6PNuhteftFUMWZtSRDzHewYT4/7FlBqpBGghySPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPnFth5G/hMKrzN5WY1PnQEgVtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvODYxOGUzMmYtYWFhZC0z MjZkLWJjMjgtOWY1YTNkZmEwOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2b0zZkrx1f1SOWwSh2NSfAAirsh3nHyXCJdJS62l+/USeythOEJmHe ScgpoC5CUNFbNvxTl9KiDye8+UnqCDbt9J89764WST1Mga3VeTSa5lko7vBFsFWD BvEa9XC9sCbYrWRcv3b1+NA4TSLMC5XvTvgjo2SU8lVB0d6p0hiBNblYpvv8mSCp iBpggamG2BYU5Ht+2kyztKu8p/b+gvcVF05xRYbP1Tn3I91H2O4nOa5ZT0l9t56t uSTMgp+gs5tgU4mVebFvWADE8hpu7MGlbgM8a52JJpdVhhv93Bpmbi6ldRH+YylY Wof9HalGaVfJivdlyQNKzswg5uITvPI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:34:59 2025 by rpki-client