$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cde34126-4f5e-387b-8a44-593a402d13d1.roa File: cde34126-4f5e-387b-8a44-593a402d13d1.roa (raw, json) Hash identifier: cMEe8XJ8B4KWF1lANLyij9i8ugHBBy+fbYxoCi6bf4k= Subject key identifier: 66:F1:00:36:56:0C:C9:C0:67:FF:E5:AB:30:FD:E4:E4:BC:E8:3A:B7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B33A484968DF053192869EF70 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cde34126-4f5e-387b-8a44-593a402d13d1.roa Signing time: Mon 15 Sep 2025 10:25:25 +0000 ROA not before: Mon 15 Sep 2025 10:25:25 +0000 ROA not after: Sun 14 Dec 2025 11:25:25 +0000 asID: 5065 IP address blocks: 64.144.28.0/24 maxlen: 24 64.144.29.0/24 maxlen: 24 64.144.30.0/24 maxlen: 24 64.144.31.0/24 maxlen: 24 64.144.226.0/24 maxlen: 24 64.144.232.0/24 maxlen: 24 64.144.233.0/24 maxlen: 24 64.144.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:a4:84:96:8d:f0:53:19:28:69:ef:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 10:25:25 2025 GMT Not After : Dec 14 11:25:25 2025 GMT Subject: CN=897aba0b-248b-4fa8-b993-dd37ed074378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:02:71:0a:bf:f4:47:81:9f:d7:41:ad:16: d9:37:7c:a0:4a:d3:f5:e0:24:9b:65:34:5a:7d:2e: 75:7a:c3:c3:5f:2f:0b:ad:8d:4d:ef:78:cd:db:a0: 6a:91:4b:36:a8:6d:a7:e5:72:b2:2d:b6:82:4a:f7: 4d:4c:9c:b9:21:a5:d1:e1:d2:45:ff:54:04:64:41: f2:a0:2f:77:02:aa:a2:e2:d5:4e:41:07:17:0d:34: a2:41:33:27:1a:62:2f:98:0e:01:42:47:7a:74:3b: 5e:87:00:84:fb:a7:3f:d9:21:b6:73:fe:4f:6a:d6: 0f:d4:57:eb:9e:94:0d:de:29:51:dc:b7:9b:7f:d0: 16:d8:6f:ee:d3:0e:4b:d4:8e:b8:a7:eb:eb:25:32: 22:21:5c:d1:eb:70:99:84:2e:8a:e6:75:8c:5b:e0: ef:aa:54:f9:16:d3:ce:30:4d:71:28:3a:b9:99:e9: b3:72:8e:81:d2:7d:4d:7c:6c:79:01:a7:dd:d2:80: ba:b5:cd:03:e0:43:0a:e4:48:63:46:ec:de:4c:a9: c9:75:5d:62:db:fc:05:84:c4:35:18:ae:7b:0f:4a: 4d:21:c7:b2:93:57:1a:3f:2c:e0:74:fd:77:a3:76: de:ce:01:75:a8:79:35:70:cf:15:48:17:a8:9e:fa: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F1:00:36:56:0C:C9:C0:67:FF:E5:AB:30:FD:E4:E4:BC:E8:3A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cde34126-4f5e-387b-8a44-593a402d13d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.144.28.0/22 64.144.226.0/24 64.144.232.0-64.144.234.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2b:b1:3f:65:22:d3:a4:4d:d9:f2:ba:5a:17:d9:f5:27:0d: a1:58:23:b2:be:b4:b7:55:1d:1a:66:87:0d:18:64:a7:63:fb: 8f:46:ae:be:b8:12:f2:93:85:05:02:ee:8e:11:6d:15:00:33: a1:7f:c6:60:70:fe:79:80:64:ce:64:f4:7e:d6:71:1d:ff:20: ea:20:27:10:87:fd:04:4a:b3:1a:aa:4e:da:ad:37:29:6d:01: 8c:a6:34:ea:60:e8:33:06:5e:f6:55:bf:d6:d0:3a:3b:14:f4: 30:27:90:f0:a4:0f:24:f3:dc:52:7b:48:54:b3:79:77:e6:c4: 0a:97:1f:cd:b9:a5:59:0f:a6:df:45:9e:ae:47:08:6c:52:43: 71:a2:0f:ac:12:ca:67:8a:81:e7:5a:9b:b7:0e:4f:69:bd:34: 82:00:5f:ba:dc:dd:7c:86:2c:15:93:7c:5a:f3:80:2d:92:2b: 56:a6:79:ce:5a:49:4c:1d:e0:0f:d4:2f:8f:d0:46:cc:7c:16: 69:dc:51:77:e7:42:5d:89:00:42:61:26:58:d2:0b:14:7c:dd: ea:17:d3:85:b3:02:c8:31:ba:69:81:db:cd:b9:1a:bf:7b:b3: 90:a0:2f:e3:68:d9:33:52:35:8e:fc:bf:f2:0a:b9:f0:44:2f: e7:f7:61:d5 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEszpISWjfBTGShp73AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNTEwMjUyNVoXDTI1MTIxNDExMjUyNVowLzEtMCsGA1UEAxMk ODk3YWJhMGItMjQ4Yi00ZmE4LWI5OTMtZGQzN2VkMDc0Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP0CcQq/9EeBn9dBrRbZN3ygStP14CSbZTRa fS51esPDXy8LrY1N73jN26BqkUs2qG2n5XKyLbaCSvdNTJy5IaXR4dJF/1QEZEHy oC93Aqqi4tVOQQcXDTSiQTMnGmIvmA4BQkd6dDtehwCE+6c/2SG2c/5PatYP1Ffr npQN3ilR3Lebf9AW2G/u0w5L1I64p+vrJTIiIVzR63CZhC6K5nWMW+DvqlT5FtPO ME1xKDq5memzco6B0n1NfGx5Aafd0oC6tc0D4EMK5EhjRuzeTKnJdV1i2/wFhMQ1 GK57D0pNIceyk1caPyzgdP13o3bezgF1qHk1cM8VSBeonvqCbwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFGbxADZWDMnAZ//lqzD95OS86Dq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RlMzQxMjYtNGY1ZS0z ODdiLThhNDQtNTkzYTQwMmQxM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCQJAcAwQA QJDiMAwDBANAkOgDBABAkOowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKSuxP2Ui06RN2fK6WhfZ9ScNoVgj sr60t1UdGmaHDRhkp2P7j0auvrgS8pOFBQLujhFtFQAzoX/GYHD+eYBkzmT0ftZx Hf8g6iAnEIf9BEqzGqpO2q03KW0BjKY06mDoMwZe9lW/1tA6OxT0MCeQ8KQPJPPc UntIVLN5d+bECpcfzbmlWQ+m30WerkcIbFJDcaIPrBLKZ4qB51qbtw5Pab00ggBf utzdfIYsFZN8WvOALZIrVqZ5zlpJTB3gD9Qvj9BGzHwWadxRd+dCXYkAQmEmWNIL FHzd6hfThbMCyDG6aYHbzbkav3uzkKAv42jZM1I1jvy/8gq58EQv5/dh1Q== -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:12 2025 by rpki-client