$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa File: bfbeda47-5352-36b9-9050-ef69094c1c65.roa (raw, json) Hash identifier: FWuN4mG8CEOsc/WTcT4/SlWby0ERDIq2BDXaFYjcaWw= Subject key identifier: 47:01:EF:0B:99:A3:CD:C8:B6:C6:E9:1D:77:A6:A5:31:14:38:5F:0E Certificate issuer: /CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe Certificate serial: 010D0C9F4328584B477C77203D5F87044F595440 Authority key identifier: 4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 400387 IP address blocks: 64.25.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:77:20:3d:5f:87:04:4f:59:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=418b6a82-e3a3-4cea-a77d-952b44670b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:9c:2b:ca:7d:f8:cc:f5:a5:24:85:eb:9b: a2:2b:ed:1a:ea:43:80:cc:75:86:b0:c2:b6:ca:00: d5:c7:4f:e3:bb:fe:54:37:0e:d8:5f:af:29:0b:10: 75:56:d7:76:ce:7b:0a:99:63:ac:68:3f:7a:48:fb: d6:a3:d2:5a:ce:3f:19:eb:3f:c9:87:a3:7d:49:9e: 8b:01:b3:3c:57:0b:df:ea:31:bb:a9:fb:b9:67:de: 1f:d6:da:c7:9f:5b:e0:af:c0:fe:ed:94:fc:a8:93: 40:ab:73:84:e4:e4:90:a7:68:01:17:0d:21:f7:ef: 3c:cd:31:8e:00:28:51:40:77:bb:05:bd:4e:eb:bc: dd:08:22:79:3b:80:ad:4e:e9:1b:e3:59:2f:d0:43: 69:8b:c9:04:25:29:9d:40:66:88:1f:ea:f8:58:77: 7c:f7:22:87:a9:92:0f:95:43:fb:c0:c1:50:f5:90: 2e:76:b1:59:e4:3c:98:f2:2e:c0:28:d6:42:7c:c7: 2a:2a:19:4e:6a:0e:6d:f5:bb:f7:1c:48:59:63:ab: 53:c4:c7:72:ee:b2:2b:96:94:40:09:41:86:87:82: 29:ed:33:eb:f0:e3:02:13:fe:90:94:5d:06:19:93: f6:55:e3:0d:79:09:8c:83:b6:3b:d1:fb:84:05:ec: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:01:EF:0B:99:A3:CD:C8:B6:C6:E9:1D:77:A6:A5:31:14:38:5F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl X509v3 Authority Key Identifier: keyid:4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer sbgp-ipAddrBlock: critical IPv4: 64.25.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2b:86:79:12:8c:a3:e3:ec:50:75:f1:9c:cd:15:1a:e5:02: 24:98:31:35:10:b5:76:2c:7c:f4:19:c5:4a:be:b8:32:56:13: fe:fa:d3:7a:02:2e:74:c8:a6:df:89:1d:41:ee:cd:49:74:92: d6:9f:fe:ae:4d:e2:e6:eb:08:93:aa:e5:7b:0d:6b:ec:e3:fe: 44:26:bb:7a:50:af:0c:cf:87:03:03:07:2f:22:11:8b:2c:77: e1:2b:71:e3:8c:6c:b6:d7:93:10:d9:9a:0a:d6:ab:e2:36:da: 99:31:06:0a:da:ac:9a:a1:fa:ab:2a:74:0f:7c:c1:ea:25:84: e2:15:e7:da:df:c7:99:d0:5d:ee:51:7c:c8:41:61:ad:72:ee: fa:04:33:7a:33:f4:89:2c:fc:7d:65:90:da:be:49:e2:76:cc: c2:57:b8:12:8e:dd:e5:65:1e:be:ee:c7:73:a9:31:0d:86:46: 97:03:4b:10:bb:cf:d6:2d:54:fe:b0:6b:b5:90:30:59:15:3c: ae:30:85:8a:5a:48:d1:ad:64:f4:cf:53:7f:1d:f4:c1:df:03: 83:d6:78:25:1c:95:88:11:59:18:7e:7a:74:25:62:09:41:3e: 12:b4:f5:ae:0f:74:26:4d:82:57:49:d2:ae:a1:75:c2:6f:c8: ea:fc:71:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHcgPV+HBE9ZVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2YjJkYmItZTdkYi00YjYwLWIxZDktOTQ5ZDJlZGJh NmZlMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NDE4YjZhODItZTNhMy00Y2VhLWE3N2QtOTUyYjQ0NjcwYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNOcK8p9+Mz1pSSF65uiK+0a6kOAzHWGsMK2 ygDVx0/ju/5UNw7YX68pCxB1Vtd2znsKmWOsaD96SPvWo9Jazj8Z6z/Jh6N9SZ6L AbM8Vwvf6jG7qfu5Z94f1trHn1vgr8D+7ZT8qJNAq3OE5OSQp2gBFw0h9+88zTGO AChRQHe7Bb1O67zdCCJ5O4CtTukb41kv0ENpi8kEJSmdQGaIH+r4WHd89yKHqZIP lUP7wMFQ9ZAudrFZ5DyY8i7AKNZCfMcqKhlOag5t9bv3HEhZY6tTxMdy7rIrlpRA CUGGh4Ip7TPr8OMCE/6QlF0GGZP2VeMNeQmMg7Y70fuEBexMOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcB7wuZo83ItsbpHXempTEUOF8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZi MmRiYi1lN2RiLTRiNjAtYjFkOS05NDlkMmVkYmE2ZmUvYmZiZWRhNDctNTM1Mi0z NmI5LTkwNTAtZWY2OTA5NGMxYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDM2YjJkYmItZTdkYi00YjYwLWIx ZDktOTQ5ZDJlZGJhNmZlLzAzNmIyZGJiLWU3ZGItNGI2MC1iMWQ5LTk0OWQyZWRi YTZmZS5jcmwwHwYDVR0jBBgwFoAUTxBMP5Rf2+ujYdsZ237a7ZZpkekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZiMmRiYi1lN2RiLTRiNjAtYjFkOS05NDlk MmVkYmE2ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMrhnkSjKPj7FB18ZzNFRrlAiSYMTUQtXYsfPQZxUq+uDJWE/7603oC LnTIpt+JHUHuzUl0ktaf/q5N4ubrCJOq5XsNa+zj/kQmu3pQrwzPhwMDBy8iEYss d+ErceOMbLbXkxDZmgrWq+I22pkxBgrarJqh+qsqdA98weolhOIV59rfx5nQXe5R fMhBYa1y7voEM3oz9Iks/H1lkNq+SeJ2zMJXuBKO3eVlHr7ux3OpMQ2GRpcDSxC7 z9YtVP6wa7WQMFkVPK4whYpaSNGtZPTPU38d9MHfA4PWeCUclYgRWRh+enQlYglB PhK09a4PdCZNgldJ0q6hdcJvyOr8cd8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:33 2025 by rpki-client