$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9e24d1c-cf08-3673-b109-06329f8b28fb.roa File: c9e24d1c-cf08-3673-b109-06329f8b28fb.roa (raw, json) Hash identifier: kR4pPgtxFyekxVGmM1DPfa/NgCZulVgoQKzRM+dp8Pk= Subject key identifier: 08:82:7F:13:4C:40:51:8B:22:A8:B5:20:49:1E:22:A9:69:8C:6D:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B2B918E07BE1EDC9DF91754C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9e24d1c-cf08-3673-b109-06329f8b28fb.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 0 IP address blocks: 64.244.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:8e:07:be:1e:dc:9d:f9:17:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=045695ef-4fee-4954-a65a-49a8405cda3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:e6:9a:1c:2c:c8:0a:85:6b:fe:34:2e:f1: 4c:f4:4f:ee:06:1c:cc:d0:6e:de:fe:c3:fa:fd:64: f6:17:ce:8a:16:56:40:48:0a:c1:a2:32:0f:2c:b2: 23:3e:c4:55:4f:b8:09:05:13:3c:04:77:f0:2b:20: a3:b2:18:ee:2b:5f:92:77:72:72:8c:c4:60:fa:cb: 42:bd:11:c8:ae:e7:f0:a8:b1:15:ac:05:52:e0:63: a0:a2:6b:ea:b5:51:24:71:05:ff:e1:5c:35:89:a5: 4e:e8:ed:06:e6:ce:a9:39:f6:48:4e:39:51:aa:5b: 7f:87:3b:57:32:ac:d8:ca:cd:29:58:72:d4:b3:e3: 01:1c:9a:fa:19:ea:14:55:be:c8:27:a8:dc:39:e1: e2:e0:ff:ae:63:3f:9b:d9:b2:df:91:94:bf:4d:08: c7:a0:52:5a:45:84:96:d1:96:82:4f:6b:35:6b:02: 68:49:cc:cd:30:7d:80:9a:d5:d5:b4:a1:af:be:8e: 17:b9:a8:14:15:b0:31:7a:86:5f:ee:70:ea:dd:c8: 70:48:83:ad:25:6f:67:c7:4c:d0:10:5b:20:d6:02: 67:82:71:bd:a3:cc:f7:c0:89:7d:dd:1e:f5:56:da: c7:b6:c4:2b:c4:3a:b2:71:f3:52:8c:60:e0:70:06: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:7F:13:4C:40:51:8B:22:A8:B5:20:49:1E:22:A9:69:8C:6D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9e24d1c-cf08-3673-b109-06329f8b28fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 64.244.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:0a:9e:24:33:87:f9:e1:e9:88:c5:b7:fe:49:44:c5:ee:ed: 0e:25:f3:d6:c3:77:44:07:1b:9b:53:6a:b7:c1:c7:84:06:d6: 57:d7:a5:a5:04:e4:58:4c:2f:34:48:1e:0d:84:78:fe:a5:cc: f5:90:3d:be:3b:7a:27:bd:6e:a5:df:72:81:69:18:65:57:75: 3a:0b:d0:b6:7c:ef:85:a9:83:84:7b:4d:4e:e2:41:a6:ba:cb: ee:b3:d9:31:3e:59:05:6f:84:76:f7:f3:77:01:f2:96:f8:e2: 53:68:25:7b:b5:49:aa:31:3e:0e:66:44:ef:24:02:cf:db:9b: 59:cc:82:69:38:3f:5d:b9:ee:28:95:39:3a:ca:d0:d3:d4:81: 8d:3a:54:3f:4b:45:71:b0:36:c6:f7:67:8d:87:0d:19:99:c7: 48:5a:9d:81:8e:7c:03:a1:35:91:89:0a:af:9f:f9:5b:29:ba: 6f:ae:eb:64:5e:15:93:c0:76:c4:b3:b8:76:15:ec:5f:32:7a: e8:54:70:07:e6:ab:91:8d:de:c3:6c:22:de:e7:54:24:ab:5d: 34:b2:ec:4a:65:98:d4:85:c2:b6:81:fc:70:6b:23:79:58:8d: 87:d3:58:04:56:d1:56:bf:56:d9:46:be:ad:15:aa:24:cc:c2: ae:26:cc:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkY4Hvh7cnfkXVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MDQ1Njk1ZWYtNGZlZS00OTU0LWE2NWEtNDlhODQwNWNkYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IzmmhwsyAqFa/40LvFM9E/uBhzM0G7e/sP6 /WT2F86KFlZASArBojIPLLIjPsRVT7gJBRM8BHfwKyCjshjuK1+Sd3JyjMRg+stC vRHIrufwqLEVrAVS4GOgomvqtVEkcQX/4Vw1iaVO6O0G5s6pOfZITjlRqlt/hztX MqzYys0pWHLUs+MBHJr6GeoUVb7IJ6jcOeHi4P+uYz+b2bLfkZS/TQjHoFJaRYSW 0ZaCT2s1awJoSczNMH2AmtXVtKGvvo4XuagUFbAxeoZf7nDq3chwSIOtJW9nx0zQ EFsg1gJngnG9o8z3wIl93R71VtrHtsQrxDqycfNSjGDgcAZz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiCfxNMQFGLIqi1IEkeIqlpjG2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzllMjRkMWMtY2YwOC0z NjczLWIxMDktMDYzMjlmOGIyOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQPQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsKniQzh/nh6YjFt/5JRMXu7Q4l89bDd0QHG5tTarfBx4QG1lfXpaUE 5FhMLzRIHg2EeP6lzPWQPb47eie9bqXfcoFpGGVXdToL0LZ874Wpg4R7TU7iQaa6 y+6z2TE+WQVvhHb383cB8pb44lNoJXu1SaoxPg5mRO8kAs/bm1nMgmk4P1257iiV OTrK0NPUgY06VD9LRXGwNsb3Z42HDRmZx0hanYGOfAOhNZGJCq+f+Vspum+u62Re FZPAdsSzuHYV7F8yeuhUcAfmq5GN3sNsIt7nVCSrXTSy7EplmNSFwraB/HBrI3lY jYfTWARW0Va/VtlGvq0VqiTMwq4mzDg= -----END CERTIFICATE-----Generated at Fri Oct 10 23:58:34 2025 by rpki-client