$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/3c951a5f-284f-3e6b-984a-d745042bdf57.roa File: 3c951a5f-284f-3e6b-984a-d745042bdf57.roa (raw, json) Hash identifier: mTmesIF7GNsriWlaN5rnuttcL7rJ1ByIdErJung9yGg= Subject key identifier: 15:08:38:DF:AD:67:E5:DC:F3:C7:55:01:D6:4E:05:48:70:79:49:7F Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584B75FF35CDD1ADEF5D56FB4B00 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/3c951a5f-284f-3e6b-984a-d745042bdf57.roa Signing time: Thu 09 Oct 2025 04:51:30 +0000 ROA not before: Thu 09 Oct 2025 04:51:30 +0000 ROA not after: Wed 07 Jan 2026 05:51:30 +0000 asID: 22079 IP address blocks: 64.186.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:ff:35:cd:d1:ad:ef:5d:56:fb:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 9 04:51:30 2025 GMT Not After : Jan 7 05:51:30 2026 GMT Subject: CN=dfffd444-a866-4ca2-bfd3-418a964fed8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:10:03:ed:a6:0a:29:02:a5:b9:9e:9d:18:58: 20:a4:88:28:c2:35:0d:39:8b:9f:a2:8e:ef:26:7f: 92:99:d5:b5:1b:5a:8b:6e:d3:bd:06:90:a8:b8:1b: 78:7d:fe:b7:ae:ab:37:81:d5:fa:56:4b:41:55:8b: d4:3d:b9:d0:b3:3a:17:f7:e5:4f:17:69:b8:41:c8: 57:43:86:f5:57:0d:86:aa:de:1e:ce:03:f7:b2:b9: ad:58:f0:5c:23:90:40:c3:41:37:5e:ae:40:f0:9b: ce:36:0a:a0:2e:03:ef:04:94:8c:34:a1:89:1d:4a: 5e:a7:2b:b6:d3:11:84:06:8c:5b:d5:62:01:e0:6e: 0a:38:7a:dc:65:94:63:51:f7:28:c3:8a:7d:90:8e: 59:3e:8e:0d:1c:26:26:05:93:cf:82:4b:59:8a:37: 23:68:2d:b0:70:c7:70:2a:57:d9:3c:9c:3c:f3:0a: bb:9c:66:61:3a:69:ea:e1:9e:ae:bf:07:2a:47:c6: 73:50:92:3e:e6:98:b5:7e:7e:a5:d1:60:bd:7f:c4: 79:71:a6:c0:29:3e:ad:a9:52:7f:9e:c4:21:9b:cd: ec:b8:bf:6c:ac:a7:f8:ec:93:9a:3d:f2:68:1e:2d: 9d:d5:dd:60:ad:96:c3:b9:6f:09:8e:3c:fc:a8:94: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:08:38:DF:AD:67:E5:DC:F3:C7:55:01:D6:4E:05:48:70:79:49:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/3c951a5f-284f-3e6b-984a-d745042bdf57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.186.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f1:cc:3d:47:d9:7c:a9:f4:53:71:2c:a9:b8:1b:31:cc:b7: ab:aa:06:48:63:44:f7:b3:eb:59:80:75:9f:34:c6:1c:21:ff: 91:ee:de:72:8b:cf:d5:84:cd:57:e6:21:f5:fe:8e:7a:9f:fa: 16:66:ba:54:a1:be:ce:77:37:9c:3c:dd:4c:20:3c:eb:52:1e: a7:f8:61:60:f4:81:27:0c:7f:09:35:35:47:81:95:0b:3d:bd: cd:c9:59:59:23:65:b9:6b:32:13:f0:65:7d:db:ed:7d:4d:56: c3:65:ff:d2:01:d2:6f:90:37:c7:62:bf:1d:2f:38:1c:5c:bc: e8:54:85:3e:10:db:98:87:31:3a:76:c8:e6:a8:b5:fe:dd:b9: 3c:b5:ba:d2:f4:a0:7c:cb:dd:4d:81:5a:a4:f0:20:c7:60:e8: 14:f2:3e:b1:0e:11:66:01:56:e0:52:1a:d2:ed:18:62:d3:74: 9d:7a:31:6e:f5:78:ac:ad:66:84:5a:6a:2e:68:bc:d5:28:8e: bf:f1:ab:09:1f:c0:51:58:0d:9d:00:5e:dd:fe:a6:54:90:be: 3d:5e:23:40:15:e3:78:b1:41:89:f1:02:a0:b7:f8:29:71:db: b3:00:a5:9f:fa:8a:cb:bb:03:01:75:af:9b:23:63:be:6f:30: 18:d0:bc:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1/zXN0a3vXVb7SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI1MTAwOTA0NTEzMFoXDTI2MDEwNzA1NTEzMFowLzEtMCsGA1UEAxMk ZGZmZmQ0NDQtYTg2Ni00Y2EyLWJmZDMtNDE4YTk2NGZlZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRAD7aYKKQKluZ6dGFggpIgowjUNOYufoo7v Jn+SmdW1G1qLbtO9BpCouBt4ff63rqs3gdX6VktBVYvUPbnQszoX9+VPF2m4QchX Q4b1Vw2Gqt4ezgP3srmtWPBcI5BAw0E3Xq5A8JvONgqgLgPvBJSMNKGJHUpepyu2 0xGEBoxb1WIB4G4KOHrcZZRjUfcow4p9kI5ZPo4NHCYmBZPPgktZijcjaC2wcMdw KlfZPJw88wq7nGZhOmnq4Z6uvwcqR8ZzUJI+5pi1fn6l0WC9f8R5cabAKT6tqVJ/ nsQhm83suL9srKf47JOaPfJoHi2d1d1grZbDuW8Jjjz8qJQeVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUION+tZ+Xc88dVAdZOBUhweUl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvM2M5NTFhNWYtMjg0Zi0z ZTZiLTk4NGEtZDc0NTA0MmJkZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDxzD1H2Xyp9FNxLKm4GzHMt6uqBkhjRPez61mAdZ80xhwh/5Hu3nKL z9WEzVfmIfX+jnqf+hZmulShvs53N5w83UwgPOtSHqf4YWD0gScMfwk1NUeBlQs9 vc3JWVkjZblrMhPwZX3b7X1NVsNl/9IB0m+QN8divx0vOBxcvOhUhT4Q25iHMTp2 yOaotf7duTy1utL0oHzL3U2BWqTwIMdg6BTyPrEOEWYBVuBSGtLtGGLTdJ16MW71 eKytZoRaai5ovNUojr/xqwkfwFFYDZ0AXt3+plSQvj1eI0AV43ixQYnxAqC3+Clx 27MApZ/6isu7AwF1r5sjY75vMBjQvHQ= -----END CERTIFICATE-----Generated at Mon Nov 3 14:49:20 2025 by rpki-client