$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/19a2f898-48a8-33af-81f5-c708521d881d.roa File: 19a2f898-48a8-33af-81f5-c708521d881d.roa (raw, json) Hash identifier: Y9yuOh5BYFr+tLgIh0z/ulkK2NCGRXrRglLb4YBwd5Y= Subject key identifier: 19:B8:18:56:5F:8B:8E:BD:99:95:41:CD:7F:A7:23:0D:EB:78:C8:09 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B3821A40BABC3D66539960280 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/19a2f898-48a8-33af-81f5-c708521d881d.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 397630 IP address blocks: 65.110.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a4:0b:ab:c3:d6:65:39:96:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=ae53f775-4122-40e8-a5d7-65fded8da4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:f5:21:eb:dc:56:62:92:45:cf:5e:65:70: 3d:1e:41:65:14:d4:17:03:55:63:5e:42:60:92:5a: 29:04:78:da:50:e1:1d:e8:54:7a:97:0b:c1:a9:62: 9e:9d:a5:4e:51:be:41:39:21:3a:80:e2:4d:f0:98: e5:41:47:c4:69:54:09:ed:6f:83:7d:30:17:18:5f: 0f:74:fd:05:68:36:0f:b7:d2:fb:d6:a3:77:9e:43: d6:b1:9a:ac:55:04:72:ff:19:f0:45:bd:b8:c7:43: 23:a1:45:4e:78:4e:f6:cc:63:bb:17:93:fa:af:f7: ac:24:b0:18:71:84:11:fe:01:c8:75:34:f4:aa:b4: a9:2d:b7:bd:90:6a:c5:44:41:25:c6:5f:cc:75:39: 8e:ec:aa:a0:03:bd:6c:9b:cf:8a:45:12:74:04:77: 82:8c:55:69:3b:77:a2:4c:6b:de:b7:39:d2:31:5b: b7:39:b5:08:cc:ca:5e:d6:63:cd:f9:a6:7b:de:f4: 26:45:15:f1:5f:6a:c5:65:4f:91:0f:05:99:8c:57: f7:56:60:bc:79:c1:50:ba:f1:7f:26:7d:37:65:ec: 82:c1:a2:ad:a1:34:e3:3c:57:12:0e:82:25:51:17: 4e:90:62:7f:eb:8b:40:f9:c8:6a:40:22:f0:be:f9: 33:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B8:18:56:5F:8B:8E:BD:99:95:41:CD:7F:A7:23:0D:EB:78:C8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/19a2f898-48a8-33af-81f5-c708521d881d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a0:ba:d7:dd:c5:86:46:22:ac:cc:d8:f8:82:75:bf:c3:d2: 70:79:ef:0b:7b:52:0a:4e:9e:52:9f:7c:63:e1:b7:2d:84:b0: cc:fb:d5:75:49:05:86:f8:48:77:37:87:c0:aa:4e:ee:5a:5f: d5:50:7d:29:00:9d:8f:3a:c7:2c:4b:37:9a:13:07:43:07:c5: c1:30:67:fb:89:16:e2:3f:de:b7:1d:bf:d2:6c:3b:e0:f4:5b: 46:d9:4e:23:9b:f3:ef:bc:a3:1d:42:ef:09:fc:e5:e9:5f:b6: c6:dc:d2:07:8c:d0:c6:c6:ab:a6:d3:36:f0:fe:03:4a:0a:f3: f7:fe:e6:54:bf:c2:75:1d:cf:f2:19:5c:58:e2:51:d6:c9:53: e7:33:04:a0:6e:59:0b:c1:d6:5c:fe:5d:e0:53:c6:75:39:8b: 14:79:81:84:9f:e0:46:a3:cf:58:ce:4a:a4:cc:b8:05:2d:50: 3e:16:87:28:f7:53:cb:69:2f:03:fa:5e:8d:64:fb:f2:f6:fc: 32:57:ed:8a:0e:96:ce:77:24:c4:83:2a:80:da:ae:48:c2:fd: 0e:e7:13:20:2d:81:89:b8:38:3c:35:19:68:6f:17:ae:8d:46: 6d:07:a0:c8:3b:85:b7:c2:23:f5:64:21:05:d1:f9:66:cc:f1: 0f:ed:e5:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaQLq8PWZTmWAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YWU1M2Y3NzUtNDEyMi00MGU4LWE1ZDctNjVmZGVkOGRhNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMr1IevcVmKSRc9eZXA9HkFlFNQXA1VjXkJg klopBHjaUOEd6FR6lwvBqWKenaVOUb5BOSE6gOJN8JjlQUfEaVQJ7W+DfTAXGF8P dP0FaDYPt9L71qN3nkPWsZqsVQRy/xnwRb24x0MjoUVOeE72zGO7F5P6r/esJLAY cYQR/gHIdTT0qrSpLbe9kGrFREElxl/MdTmO7KqgA71sm8+KRRJ0BHeCjFVpO3ei TGvetznSMVu3ObUIzMpe1mPN+aZ73vQmRRXxX2rFZU+RDwWZjFf3VmC8ecFQuvF/ Jn03ZeyCwaKtoTTjPFcSDoIlURdOkGJ/64tA+chqQCLwvvkzHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm4GFZfi469mZVBzX+nIw3reMgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMTlhMmY4OTgtNDhhOC0z M2FmLTgxZjUtYzcwODUyMWQ4ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmgutfdxYZGIqzM2PiCdb/D0nB57wt7UgpOnlKffGPhty2EsMz71XVJ BYb4SHc3h8CqTu5aX9VQfSkAnY86xyxLN5oTB0MHxcEwZ/uJFuI/3rcdv9JsO+D0 W0bZTiOb8++8ox1C7wn85elftsbc0geM0MbGq6bTNvD+A0oK8/f+5lS/wnUdz/IZ XFjiUdbJU+czBKBuWQvB1lz+XeBTxnU5ixR5gYSf4Eajz1jOSqTMuAUtUD4Whyj3 U8tpLwP6Xo1k+/L2/DJX7YoOls53JMSDKoDarkjC/Q7nEyAtgYm4ODw1GWhvF66N Rm0HoMg7hbfCI/VkIQXR+WbM8Q/t5ck= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:49 2025 by rpki-client