$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa File: d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa (raw, json) Hash identifier: r7mphl53RZFyjFlFsR4oc+ZYe1mK9ybq7RFUrL58kW8= Subject key identifier: 83:EC:57:A1:98:46:B2:43:83:75:64:8D:2A:63:43:E5:E6:22:76:17 Certificate issuer: /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Certificate serial: 010D0C9F4328584B52A750784450E51980521E00 Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 21790 IP address blocks: 64.190.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:50:78:44:50:e5:19:80:52:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=614c7c06-390a-40c9-985f-d95fd5eeeac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:03:21:65:8f:6a:0c:c5:ca:db:c9:d7:3f: 1c:30:da:93:cb:a7:50:c7:a1:3b:57:78:85:68:80: 05:e2:90:3b:ef:f0:07:d4:8b:d7:16:6a:f9:7f:7b: 94:b5:7a:a4:25:22:08:07:74:a7:fa:a0:3a:37:61: 3c:62:9c:95:d9:de:34:cf:95:1d:69:72:2f:51:f3: 71:9f:d6:f2:03:8f:24:65:dd:c5:50:f2:fd:b2:c9: e2:30:97:14:4d:42:f4:01:de:c9:0f:de:9a:1a:28: 0d:b9:7d:c0:0e:23:0a:9f:76:1d:6c:3e:2f:da:c9: 9a:29:19:2e:23:2f:fb:72:f5:c7:36:67:7e:fd:3f: c3:cb:a5:21:b1:dd:6f:39:37:54:a7:cb:f8:75:79: 3e:c6:83:28:36:a6:58:79:fa:f2:df:65:41:8a:87: 6f:eb:79:35:37:eb:f8:46:ae:d7:0a:35:72:9c:e3: 41:83:98:27:6f:29:aa:d2:94:54:07:9f:bf:4a:24: 24:87:af:4b:15:5f:0a:ec:a4:61:7e:e7:3f:1e:80: 27:22:ca:6f:f2:97:b8:d1:75:bf:60:65:38:aa:3e: 01:c5:3e:ec:42:57:20:c8:96:5c:9c:87:91:fd:ac: 8a:40:2e:31:ad:81:0b:7d:a8:7e:58:69:19:bd:3d: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EC:57:A1:98:46:B2:43:83:75:64:8D:2A:63:43:E5:E6:22:76:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl X509v3 Authority Key Identifier: keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer sbgp-ipAddrBlock: critical IPv4: 64.190.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:28:03:64:36:d1:4b:a1:4b:05:33:5e:c4:fd:e9:b2:1f:0f: d1:46:b5:37:e9:4d:03:fd:fa:cf:2e:eb:15:6a:fc:da:13:1b: db:f4:16:c4:f3:0b:81:3f:6c:7c:0d:6b:d2:ae:de:bf:b4:49: f9:3a:b4:ef:bb:69:68:41:13:dd:d6:4f:3b:ab:ec:aa:e0:ac: d6:d2:6f:20:ef:9e:1d:6a:7a:67:db:3a:0a:d1:23:e9:ae:c9: be:c0:ad:b0:73:2b:a5:a8:c9:d1:a0:b9:3d:84:d3:19:6a:da: 2a:7f:0f:cb:82:8d:1a:05:20:2b:07:e6:fd:a2:7a:81:af:aa: 43:4a:c8:d5:ef:19:d8:77:48:c2:aa:74:85:68:e2:b9:aa:61: 37:8f:88:a7:e8:b2:4f:67:4e:9a:4d:fc:e0:36:6a:49:4e:eb: 8a:24:9d:8a:25:4c:14:ea:13:88:8a:36:e3:65:15:75:55:90: 9a:e7:ec:cb:af:ba:31:0a:ef:bc:9a:61:46:dd:02:60:c9:bf: 2a:76:ac:c5:e4:35:b4:6d:0a:af:97:18:30:44:df:0c:41:74: c9:87:e7:e6:17:9d:f3:bd:d0:bf:0c:5b:0b:e5:d7:e3:32:c5: ae:7c:e9:a2:74:cb:e0:d0:db:c2:d5:a9:8c:8f:46:48:26:25: 0a:3b:21:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1B4RFDlGYBSHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmOGJjZTYtZTMzZS00MGU4LWJmYjMtYzRiNWIyMTU5 YTdlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NjE0YzdjMDYtMzkwYS00MGM5LTk4NWYtZDk1ZmQ1ZWVlYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWMDIWWPagzFytvJ1z8cMNqTy6dQx6E7V3iF aIAF4pA77/AH1IvXFmr5f3uUtXqkJSIIB3Sn+qA6N2E8YpyV2d40z5UdaXIvUfNx n9byA48kZd3FUPL9ssniMJcUTUL0Ad7JD96aGigNuX3ADiMKn3YdbD4v2smaKRku Iy/7cvXHNmd+/T/Dy6Uhsd1vOTdUp8v4dXk+xoMoNqZYefry32VBiodv63k1N+v4 Rq7XCjVynONBg5gnbymq0pRUB5+/SiQkh69LFV8K7KRhfuc/HoAnIspv8pe40XW/ YGU4qj4BxT7sQlcgyJZcnIeR/ayKQC4xrYELfah+WGkZvT0BbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPsV6GYRrJDg3VkjSpjQ+XmInYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4 YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1YjIxNTlhN2UvZDdhNWY4NWItNDU5OC0z MmQxLWI4Y2MtZDNmNDBkNTBmZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBmOGJjZTYtZTMzZS00MGU4LWJm YjMtYzRiNWIyMTU5YTdlLzIwZjhiY2U2LWUzM2UtNDBlOC1iZmIzLWM0YjViMjE1 OWE3ZS5jcmwwHwYDVR0jBBgwFoAUs53Dj4IeklhrrH5gM4UTNFGTo1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1 YjIxNTlhN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcoA2Q20UuhSwUzXsT96bIfD9FGtTfpTQP9+s8u6xVq/NoTG9v0FsTz C4E/bHwNa9Ku3r+0Sfk6tO+7aWhBE93WTzur7KrgrNbSbyDvnh1qemfbOgrRI+mu yb7ArbBzK6WoydGguT2E0xlq2ip/D8uCjRoFICsH5v2ieoGvqkNKyNXvGdh3SMKq dIVo4rmqYTePiKfosk9nTppN/OA2aklO64oknYolTBTqE4iKNuNlFXVVkJrn7Muv ujEK77yaYUbdAmDJvyp2rMXkNbRtCq+XGDBE3wxBdMmH5+YXnfO90L8MWwvl1+My xa586aJ0y+DQ28LVqYyPRkgmJQo7Id8= -----END CERTIFICATE-----Generated at Sat Oct 18 23:05:11 2025 by rpki-client