$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/f12da5d4-e3ff-3692-ac55-e77952805d6b.roa File: f12da5d4-e3ff-3692-ac55-e77952805d6b.roa (raw, json) Hash identifier: xgHwvAGLtLS7UwIj0N8TIiPzEhinenMysBah8YOqNg0= Subject key identifier: A8:70:12:D1:40:2D:14:37:B2:32:17:93:6E:91:89:95:95:E9:4E:27 Certificate issuer: /CN=61076595-f39c-462e-b686-d3fcac2df32b Certificate serial: 010D0C9F4328584B663201219D020954F6DA5480 Authority key identifier: 34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/f12da5d4-e3ff-3692-ac55-e77952805d6b.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 36222 IP address blocks: 208.65.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:01:21:9d:02:09:54:f6:da:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61076595-f39c-462e-b686-d3fcac2df32b Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=0a5e64ae-364b-49e6-82bf-180340c3db94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:88:74:8d:79:46:6b:22:a5:3d:eb:a3:a7:8b: b2:8e:1f:d0:53:f1:59:0f:84:ac:40:47:15:4c:67: 05:68:71:7f:b3:6c:59:97:2a:56:19:ba:4d:c7:f8: 8e:ee:40:dc:cf:a6:ae:03:25:ed:24:12:81:8f:c5: 62:46:c9:dc:56:31:71:33:d7:b0:d1:86:f2:40:86: 88:f7:f8:ce:91:01:c7:89:9e:b9:46:eb:d2:a4:85: e4:fb:f3:19:87:bf:0e:91:5c:fa:b9:d7:a3:01:3f: 49:4d:33:71:55:f8:ca:60:cb:61:01:4c:d1:ea:5b: ed:cf:4f:a5:ec:0b:ca:7c:a4:cb:17:08:54:d2:d5: 2a:2c:19:95:35:1d:26:eb:64:cf:e0:b9:68:93:53: eb:e4:12:db:94:42:76:e3:05:35:e5:a5:45:b8:3b: 14:1a:51:c8:a6:52:df:8a:84:7c:2d:b6:9e:85:34: ac:d0:ae:3e:23:69:5b:01:b0:fd:7d:92:5c:ce:1b: 52:1d:49:cd:99:e6:08:d1:35:0d:d2:6c:41:4c:09: 16:f3:2a:ac:e2:6c:2b:3b:06:66:90:0a:c3:18:be: 95:2b:9b:5a:c2:41:8e:41:d9:ac:a2:e9:ca:8a:3e: 5d:03:53:5e:c0:d3:30:2e:97:58:d6:94:94:b7:15: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:70:12:D1:40:2D:14:37:B2:32:17:93:6E:91:89:95:95:E9:4E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/f12da5d4-e3ff-3692-ac55-e77952805d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl X509v3 Authority Key Identifier: keyid:34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer sbgp-ipAddrBlock: critical IPv4: 208.65.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9d:69:43:37:64:88:87:87:81:5a:1b:be:34:57:93:2d:71: 4b:ea:9d:9c:de:7c:e8:37:24:ed:ed:ac:0d:01:dd:fc:eb:99: e3:3b:34:9e:29:47:86:3f:44:93:cb:e1:6b:a2:7b:85:0b:25: 8d:0b:08:a5:85:8c:76:9c:6d:67:d0:64:d8:a0:24:0a:c9:c5: cd:6e:d5:b1:74:c3:59:61:6c:9e:d2:8f:4d:aa:0a:a3:bd:9f: 48:3d:43:17:77:69:8c:a1:b7:70:c5:50:a1:67:ae:c1:75:25: 54:07:90:72:92:33:c2:98:e9:64:f0:e3:f6:c1:5e:f5:7b:5c: 75:98:a3:d7:cd:12:bd:66:0f:78:b0:64:02:d0:30:98:18:05: e6:6a:6f:33:37:4b:2f:ed:4f:aa:0c:70:d0:65:97:2b:89:a8: 8c:3b:d4:38:bf:71:5b:d8:5d:52:8b:e8:f4:1c:1d:4b:26:f3: df:da:8f:6c:8b:44:75:f8:77:60:b7:3e:ff:c7:1e:d9:c2:2a: cb:42:ca:3a:d4:85:d8:5b:6b:43:2a:9e:f5:94:69:65:a0:18: 73:ff:98:6c:5f:d0:73:d0:1b:0f:c3:34:38:f5:a9:33:76:cf: c4:3f:14:93:f6:10:10:24:8a:3d:11:d4:f8:3e:ef:63:a8:4a: 2a:ca:13:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgEhnQIJVPbaVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzY1OTUtZjM5Yy00NjJlLWI2ODYtZDNmY2FjMmRm MzJiMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MGE1ZTY0YWUtMzY0Yi00OWU2LTgyYmYtMTgwMzQwYzNkYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ih0jXlGayKlPeujp4uyjh/QU/FZD4SsQEcV TGcFaHF/s2xZlypWGbpNx/iO7kDcz6auAyXtJBKBj8ViRsncVjFxM9ew0YbyQIaI 9/jOkQHHiZ65RuvSpIXk+/MZh78OkVz6udejAT9JTTNxVfjKYMthAUzR6lvtz0+l 7AvKfKTLFwhU0tUqLBmVNR0m62TP4Llok1Pr5BLblEJ24wU15aVFuDsUGlHIplLf ioR8LbaehTSs0K4+I2lbAbD9fZJczhtSHUnNmeYI0TUN0mxBTAkW8yqs4mwrOwZm kArDGL6VK5tawkGOQdmsounKij5dA1NewNMwLpdY1pSUtxXZfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhwEtFALRQ3sjIXk26RiZWV6U4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTA3 NjU5NS1mMzljLTQ2MmUtYjY4Ni1kM2ZjYWMyZGYzMmIvZjEyZGE1ZDQtZTNmZi0z NjkyLWFjNTUtZTc3OTUyODA1ZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEwNzY1OTUtZjM5Yy00NjJlLWI2 ODYtZDNmY2FjMmRmMzJiLzYxMDc2NTk1LWYzOWMtNDYyZS1iNjg2LWQzZmNhYzJk ZjMyYi5jcmwwHwYDVR0jBBgwFoAUNO0VcpY4bc2+EEbnjot1XImyFN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTA3NjU5NS1mMzljLTQ2MmUtYjY4Ni1kM2Zj YWMyZGYzMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCdaUM3ZIiHh4FaG740V5MtcUvqnZzefOg3JO3trA0B3fzrmeM7NJ4p R4Y/RJPL4Wuie4ULJY0LCKWFjHacbWfQZNigJArJxc1u1bF0w1lhbJ7Sj02qCqO9 n0g9Qxd3aYyht3DFUKFnrsF1JVQHkHKSM8KY6WTw4/bBXvV7XHWYo9fNEr1mD3iw ZALQMJgYBeZqbzM3Sy/tT6oMcNBllyuJqIw71Di/cVvYXVKL6PQcHUsm89/aj2yL RHX4d2C3Pv/HHtnCKstCyjrUhdhba0MqnvWUaWWgGHP/mGxf0HPQGw/DNDj1qTN2 z8Q/FJP2EBAkij0R1Pg+72OoSirKE1I= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:36 2025 by rpki-client