$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa File: b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa (raw, json) Hash identifier: FEsytk+BDkXWJXHaYfp6A0meaetenNntyXAndJhl/3M= Subject key identifier: 25:E9:14:BD:C7:14:3B:AB:69:C0:8B:D5:A0:79:F8:D0:06:A8:54:FA Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B0FA6B4FC656E6188012EE780 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 21947 IP address blocks: 64.25.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:b4:fc:65:6e:61:88:01:2e:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=6c1a151d-0238-4cc5-a473-bba6f93bbdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:d5:10:14:a6:5a:37:6d:66:37:4f:eb:36: 1d:47:07:16:41:f3:eb:29:16:65:5c:82:a0:70:92: 36:79:6b:03:06:38:6a:b9:eb:b5:c3:e1:8d:f4:8b: 28:ed:b2:b1:e7:37:6e:35:51:71:79:a2:24:d9:d4: e5:1a:8d:fe:87:88:53:85:0a:57:e3:9d:04:b8:fb: 1a:33:73:2d:1e:12:8d:4d:82:8e:30:b7:f8:e5:88: 36:7f:0c:6a:87:e1:df:e9:cd:c3:a9:05:08:8d:d6: 8f:ff:01:6b:92:0d:bc:7e:46:41:3c:d8:ff:e9:fd: f7:4a:c6:92:f6:11:12:91:1e:df:bf:06:87:12:dd: 5c:9e:d4:b9:7a:5a:d1:a9:bd:3f:92:44:34:62:21: 92:ff:e6:57:26:7a:e5:b1:25:2a:4f:33:bf:b3:66: 6a:df:3c:d0:75:96:ce:39:6c:2e:42:65:47:2c:73: 43:c9:17:9d:7d:54:31:8e:d8:f0:64:d7:db:f4:8c: 59:bd:d1:91:d5:c5:48:d3:84:36:82:b9:8e:46:a0: c6:87:a8:3e:f1:e4:38:19:ce:ac:2f:6a:89:ce:69: ab:be:7e:59:e7:3a:2e:0a:d0:e8:fa:54:c7:1c:2a: 3c:bd:20:8d:23:a2:8b:e9:99:a0:12:a6:12:7f:aa: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E9:14:BD:C7:14:3B:AB:69:C0:8B:D5:A0:79:F8:D0:06:A8:54:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 64.25.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1b:e0:20:43:75:f9:9b:28:a3:5c:ce:5d:61:ac:ad:01:61: 52:cc:10:f9:04:86:2e:fb:0b:d5:5d:07:cb:de:97:8d:b2:f9: 8c:1b:89:3b:fa:93:1c:a6:34:c3:e2:f3:6f:15:82:4c:d1:3b: de:f4:8b:45:d6:71:64:fa:31:18:a3:e5:01:97:91:83:c3:22: 0b:fa:4c:43:f6:fc:06:88:78:27:4e:9d:97:c7:54:a6:47:02: 0e:d2:3b:f1:e3:69:09:a1:9c:da:70:70:b7:9e:23:0c:01:aa: 63:8d:4f:67:d1:1a:56:a9:9e:7c:de:9f:14:d1:a8:ba:88:98: ba:47:ea:fd:76:65:5a:68:f5:e2:a7:8a:c2:a1:f3:87:32:8c: 54:a5:21:16:c1:d7:42:37:ff:12:6d:b6:0e:f7:20:1f:84:ee: 48:fc:32:e7:e5:92:a4:11:1a:ce:2e:6d:e3:0c:1e:73:4b:78: b4:21:45:76:7a:aa:ec:a3:4b:29:6c:1b:4f:c5:b8:78:a7:21: ac:b7:76:a7:c8:b3:a7:4f:c1:bd:64:c3:d2:13:e2:e2:55:f9: af:4b:a2:d4:a2:0a:80:12:5b:0e:fe:05:0a:7f:d8:c7:08:ab: 18:71:5a:08:2e:29:bc:0b:7c:a1:d9:3d:0e:79:90:11:01:58: 1d:6e:10:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPprT8ZW5hiAEu54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk NmMxYTE1MWQtMDIzOC00Y2M1LWE0NzMtYmJhNmY5M2JiZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqDVEBSmWjdtZjdP6zYdRwcWQfPrKRZlXIKg cJI2eWsDBjhqueu1w+GN9Iso7bKx5zduNVFxeaIk2dTlGo3+h4hThQpX450EuPsa M3MtHhKNTYKOMLf45Yg2fwxqh+Hf6c3DqQUIjdaP/wFrkg28fkZBPNj/6f33SsaS 9hESkR7fvwaHEt1cntS5elrRqb0/kkQ0YiGS/+ZXJnrlsSUqTzO/s2Zq3zzQdZbO OWwuQmVHLHNDyRedfVQxjtjwZNfb9IxZvdGR1cVI04Q2grmORqDGh6g+8eQ4Gc6s L2qJzmmrvn5Z5zouCtDo+lTHHCo8vSCNI6KL6ZmgEqYSf6r77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXpFL3HFDuracCL1aB5+NAGqFT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjUwYTNkMWItY2E1MC0z ZWExLWJkYjktMzc2OGE4NmFhODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQb4CBDdfmbKKNczl1hrK0BYVLMEPkEhi77C9VdB8vel42y+YwbiTv6 kxymNMPi828VgkzRO970i0XWcWT6MRij5QGXkYPDIgv6TEP2/AaIeCdOnZfHVKZH Ag7SO/HjaQmhnNpwcLeeIwwBqmONT2fRGlapnnzenxTRqLqImLpH6v12ZVpo9eKn isKh84cyjFSlIRbB10I3/xJttg73IB+E7kj8MuflkqQRGs4ubeMMHnNLeLQhRXZ6 quyjSylsG0/FuHinIay3dqfIs6dPwb1kw9IT4uJV+a9LotSiCoASWw7+BQp/2McI qxhxWgguKbwLfKHZPQ55kBEBWB1uEGY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:18 2025 by rpki-client