$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa File: 95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa (raw, json) Hash identifier: XcRQBo56Sr1cGZGQA0MTBQpysBPI2HcGDEHN71rYzZ4= Subject key identifier: 7D:DF:DA:8C:CB:D7:D2:EC:2C:0C:87:83:01:49:38:97:AD:A7:87:70 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B33A4E70CAC4BAA9C01B17980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa Signing time: Mon 15 Sep 2025 10:26:11 +0000 ROA not before: Mon 15 Sep 2025 10:26:11 +0000 ROA not after: Sun 14 Dec 2025 11:26:11 +0000 asID: 5065 IP address blocks: 64.144.235.0/24 maxlen: 24 64.144.236.0/24 maxlen: 24 64.144.237.0/24 maxlen: 24 64.144.238.0/24 maxlen: 24 64.144.239.0/24 maxlen: 24 209.101.16.0/24 maxlen: 24 209.101.17.0/24 maxlen: 24 209.101.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:a4:e7:0c:ac:4b:aa:9c:01:b1:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 10:26:11 2025 GMT Not After : Dec 14 11:26:11 2025 GMT Subject: CN=437a4707-e62d-4a2e-9c57-ae7a5679f71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:5f:91:78:44:69:8e:00:6a:45:de:ee:8a: 6b:53:2c:46:35:a1:92:38:1b:ad:b9:51:c5:55:a4: 49:ed:4b:3a:a3:bc:50:d1:84:0e:b6:c2:33:9b:41: 49:2d:a4:8d:2b:5d:13:d0:14:06:cc:5d:a5:11:1c: ce:a5:f6:51:42:1f:0d:fe:1d:ff:1d:71:b8:38:25: 08:f2:b4:b2:d7:29:bd:1b:3d:91:5a:46:44:45:5a: 6e:6c:d6:b6:00:5c:ce:42:bd:f7:3a:e1:dd:9c:a3: f4:4d:15:fa:f9:e5:ea:5e:0d:24:08:e4:1c:4d:9c: 40:9d:bf:d3:b5:50:5f:ca:99:7d:96:6d:d7:a1:72: a7:35:8d:eb:11:b3:b1:73:04:38:b4:aa:10:56:7c: b4:1d:d7:76:da:32:6e:83:74:01:7c:e8:c0:fd:fc: 27:d2:3d:2e:8d:2c:93:1c:75:9a:e5:52:17:28:b2: 55:96:db:d3:53:71:17:e2:a8:dc:fd:82:16:ea:27: 3b:dc:b3:f9:a7:8c:a9:90:3a:0a:5a:0f:31:43:e0: bc:15:da:1c:ca:ea:90:75:57:5a:9b:42:a9:77:f1: 14:77:87:09:21:6c:23:16:82:0b:05:b3:21:00:0d: a5:ed:4f:3c:dd:ef:6e:bc:e8:47:76:17:b2:ca:23: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:DA:8C:CB:D7:D2:EC:2C:0C:87:83:01:49:38:97:AD:A7:87:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.144.235.0-64.144.239.255 209.101.16.0-209.101.18.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:86:7e:50:92:b9:6b:d7:b2:d7:b6:1c:5e:c8:ad:c7:01:30: 6f:6e:b4:a2:7c:d9:18:78:b8:ad:bf:3d:b8:ce:e1:56:e1:08: e5:60:0f:b3:51:99:d4:f0:a3:0b:63:82:9c:7a:0a:68:6d:d3: 1e:fb:52:16:75:86:d7:29:14:8e:cb:c9:b5:02:0d:bf:21:cd: b8:83:e7:74:24:81:20:65:71:55:a6:83:ab:c0:d2:87:26:10: 27:d2:7e:51:2f:4d:95:4d:b5:ab:d8:47:ba:59:68:f8:ff:90: 0c:ea:c1:90:a8:03:f5:a8:3c:3c:a7:7a:fa:c9:1b:e0:fa:ef: 63:85:05:13:50:af:bb:ce:b0:58:de:58:87:ab:77:49:ec:75: 0b:af:07:ae:9a:3e:a7:a7:a5:9e:a7:c6:70:fc:2e:76:cb:90: da:42:a5:e9:c7:f7:7e:9c:e8:d9:01:f6:25:d5:ab:52:0c:2f: f1:c9:56:3f:be:6f:94:c6:e3:71:bc:e4:c5:45:93:a2:52:71: fd:92:d1:58:85:b0:be:01:3c:d3:5c:f6:13:71:14:1b:15:25: 55:a9:25:40:ab:12:e2:81:90:7c:02:dc:5b:48:65:4d:b6:30: 2d:5d:e2:1d:26:50:b8:30:9c:e5:07:d6:5c:c8:7d:0c:39:c2: fd:4e:8b:a1 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEszpOcMrEuqnAGxeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNTEwMjYxMVoXDTI1MTIxNDExMjYxMVowLzEtMCsGA1UEAxMk NDM3YTQ3MDctZTYyZC00YTJlLTljNTctYWU3YTU2NzlmNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfJfkXhEaY4AakXe7oprUyxGNaGSOButuVHF VaRJ7Us6o7xQ0YQOtsIzm0FJLaSNK10T0BQGzF2lERzOpfZRQh8N/h3/HXG4OCUI 8rSy1ym9Gz2RWkZERVpubNa2AFzOQr33OuHdnKP0TRX6+eXqXg0kCOQcTZxAnb/T tVBfypl9lm3XoXKnNY3rEbOxcwQ4tKoQVny0Hdd22jJug3QBfOjA/fwn0j0ujSyT HHWa5VIXKLJVltvTU3EX4qjc/YIW6ic73LP5p4ypkDoKWg8xQ+C8FdocyuqQdVda m0Kpd/EUd4cJIWwjFoILBbMhAA2l7U883e9uvOhHdheyyiPgkwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFH3f2ozL19LsLAyHgwFJOJetp4dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTVkOGI4NmQtZjNlZS0z YWFiLTk0NjQtY2ZkYzdiZjMxMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABAkOsD BARAkOAwDAMEBNFlEAMEANFlEjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHhn5Qkrlr17LXthxeyK3HATBv brSifNkYeLitvz24zuFW4QjlYA+zUZnU8KMLY4KcegpobdMe+1IWdYbXKRSOy8m1 Ag2/Ic24g+d0JIEgZXFVpoOrwNKHJhAn0n5RL02VTbWr2Ee6WWj4/5AM6sGQqAP1 qDw8p3r6yRvg+u9jhQUTUK+7zrBY3liHq3dJ7HULrweumj6np6Wep8Zw/C52y5Da QqXpx/d+nOjZAfYl1atSDC/xyVY/vm+UxuNxvOTFRZOiUnH9ktFYhbC+ATzTXPYT cRQbFSVVqSVAqxLigZB8AtxbSGVNtjAtXeIdJlC4MJzlB9ZcyH0MOcL9Touh -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:45 2025 by rpki-client