$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/f9ae17a7-2da8-3fda-a539-636a8910d1f2.roa File: f9ae17a7-2da8-3fda-a539-636a8910d1f2.roa (raw, json) Hash identifier: GycbJMVeVUphA+ytC0SxpFVeuzHVh3oQhnJoIlsv1Mo= Subject key identifier: C7:EA:5F:79:2B:9E:27:A3:09:D5:4D:B1:2B:10:BD:EF:D0:E4:27:2A Certificate issuer: /CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Certificate serial: 010D0C9F4328584AFC1BFEAE5712111A7EA1DA20 Authority key identifier: 31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/f9ae17a7-2da8-3fda-a539-636a8910d1f2.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 29789 IP address blocks: 64.88.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fe:ae:57:12:11:1a:7e:a1:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=688a2510-4fe1-4b4e-ae7d-c393c72bbe74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d7:e3:e8:71:b0:8e:5c:89:4c:e3:c5:41:3a: 76:96:2f:be:6f:b5:a7:80:81:8f:6b:d0:b5:90:a8: c8:00:eb:b0:d6:dc:e6:00:2f:10:10:03:b9:95:05: 78:94:e6:f1:50:2d:40:dc:5b:30:2a:1c:07:ca:89: 92:28:de:76:18:45:4f:5d:d1:d9:c0:f2:ac:01:47: 94:9d:73:25:90:a2:c1:8d:65:8b:49:36:75:dd:59: 6e:fe:de:61:48:8d:f4:40:b5:38:94:e4:cb:7b:69: 34:70:0f:10:bb:f9:f1:d1:32:9d:6f:1f:63:1f:a3: 92:79:a5:27:51:29:e6:b6:86:3a:c5:37:0f:cd:ad: d9:9c:87:51:f3:55:f5:79:2a:17:9e:22:81:61:2e: 52:f7:c4:43:c2:1f:31:42:b6:ea:bb:28:8b:6c:2c: 8c:8c:61:e5:aa:56:8d:d0:cc:cf:71:e7:b6:81:8b: ab:02:b0:52:38:a7:4b:81:da:93:74:99:2c:e5:51: 6e:0a:c4:93:b7:93:b5:9b:75:3d:af:24:37:0f:6f: bf:2e:30:c3:34:44:a8:46:4e:db:ee:e6:31:b9:ee: 19:ec:72:69:80:a5:c4:9f:44:26:de:dd:ca:8a:8c: aa:63:aa:90:38:e3:c8:3b:d5:1f:3a:90:52:89:e4: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:5F:79:2B:9E:27:A3:09:D5:4D:B1:2B:10:BD:EF:D0:E4:27:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/f9ae17a7-2da8-3fda-a539-636a8910d1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl X509v3 Authority Key Identifier: keyid:31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer sbgp-ipAddrBlock: critical IPv4: 64.88.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b9:cf:a9:31:e9:11:3a:22:b7:c1:c2:f8:3a:6b:6f:3b:66: ff:fd:dc:29:09:d8:36:ec:15:97:7d:49:72:6d:cc:0b:3a:6c: ce:a9:e9:85:1d:af:24:d2:01:4e:06:aa:53:fa:99:f2:70:dd: 06:67:70:8f:8a:e3:8e:ca:b8:0a:3b:f9:72:bd:97:57:93:c3: b6:73:4a:13:43:55:f6:3d:9b:81:9f:54:8d:60:bd:a8:04:8f: 5f:18:f9:66:ee:69:fc:fa:92:e4:08:a8:71:9a:9e:75:46:73: 93:c0:2f:b9:f1:4d:75:55:89:a7:cd:8f:99:03:6e:fd:0d:bf: e2:e1:d5:11:84:a7:1b:ca:46:f4:c1:17:40:44:d5:fb:37:e0: 45:14:1b:ed:f6:8e:84:54:15:36:bd:08:8f:81:6f:6a:c2:1c: cd:f6:55:88:fb:bd:00:08:a7:e1:d2:fe:69:f1:2e:5d:bd:a8: 00:ab:55:07:ae:6c:cb:6b:23:26:1a:b1:03:5f:78:58:b2:9d: 6f:e5:b0:6d:3a:6f:83:ba:d0:b2:3c:10:cc:ba:08:b4:cf:0b: 9a:9b:b8:f1:75:4e:c1:fe:15:97:27:d4:c0:ea:78:c9:58:96: af:7d:54:a9:48:62:87:96:5d:99:b1:a9:02:d1:60:93:7c:9a: f4:f0:52:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/6uVxIRGn6h2iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwYWQyYzUtNmY3MC00Y2QwLThlMDQtZmZhOWQ5Y2Rl ZmYxMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk Njg4YTI1MTAtNGZlMS00YjRlLWFlN2QtYzM5M2M3MmJiZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nfj6HGwjlyJTOPFQTp2li++b7WngIGPa9C1 kKjIAOuw1tzmAC8QEAO5lQV4lObxUC1A3FswKhwHyomSKN52GEVPXdHZwPKsAUeU nXMlkKLBjWWLSTZ13Vlu/t5hSI30QLU4lOTLe2k0cA8Qu/nx0TKdbx9jH6OSeaUn USnmtoY6xTcPza3ZnIdR81X1eSoXniKBYS5S98RDwh8xQrbquyiLbCyMjGHlqlaN 0MzPcee2gYurArBSOKdLgdqTdJks5VFuCsSTt5O1m3U9ryQ3D2+/LjDDNESoRk7b 7uYxue4Z7HJpgKXEn0Qm3t3KioyqY6qQOOPIO9UfOpBSieQLrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfqX3krniejCdVNsSsQve/Q5CcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83YTBh ZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5ZDljZGVmZjEvZjlhZTE3YTctMmRhOC0z ZmRhLWE1MzktNjM2YTg5MTBkMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2EwYWQyYzUtNmY3MC00Y2QwLThl MDQtZmZhOWQ5Y2RlZmYxLzdhMGFkMmM1LTZmNzAtNGNkMC04ZTA0LWZmYTlkOWNk ZWZmMS5jcmwwHwYDVR0jBBgwFoAUMVUfGzPm5berrA02tn3d6rRg4yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83YTBhZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5 ZDljZGVmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG5z6kx6RE6IrfBwvg6a287Zv/93CkJ2DbsFZd9SXJtzAs6bM6p6YUd ryTSAU4GqlP6mfJw3QZncI+K447KuAo7+XK9l1eTw7ZzShNDVfY9m4GfVI1gvagE j18Y+Wbuafz6kuQIqHGannVGc5PAL7nxTXVViafNj5kDbv0Nv+Lh1RGEpxvKRvTB F0BE1fs34EUUG+32joRUFTa9CI+Bb2rCHM32VYj7vQAIp+HS/mnxLl29qACrVQeu bMtrIyYasQNfeFiynW/lsG06b4O60LI8EMy6CLTPC5qbuPF1TsH+FZcn1MDqeMlY lq99VKlIYoeWXZmxqQLRYJN8mvTwUsM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:46 2025 by rpki-client