$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/34c11998-ca90-3ced-8946-ee40e3de932d.roa File: 34c11998-ca90-3ced-8946-ee40e3de932d.roa (raw, json) Hash identifier: pJwVfLRH0uF2GGvXciRzZCk2gnw2SVgo6jlCywc0OtM= Subject key identifier: 4A:89:EB:95:76:30:8F:D0:D9:DD:D0:F9:2A:8A:7D:57:71:A4:67:09 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584B84E7654A8C3F7DD622029700 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/34c11998-ca90-3ced-8946-ee40e3de932d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 64.40.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:65:4a:8c:3f:7d:d6:22:02:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=23944ced-40bf-4192-bef7-bce5d654a810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:26:1c:38:72:0e:b6:65:30:be:4b:8d:9b: 1a:62:7d:b0:a3:e0:68:70:da:f2:32:6c:96:9f:07: 49:e9:73:ec:fa:3d:00:62:93:0b:4b:84:cd:fd:ca: 37:ed:ce:f5:bf:be:46:9d:13:53:c2:cd:76:f2:7b: 9f:e5:8c:4a:38:73:fd:88:be:ec:bb:7a:b1:cb:fa: 37:47:81:07:fb:be:55:91:ad:b3:d2:a7:1f:34:b8: 2d:09:94:1c:5f:b6:e0:6e:e5:b8:e5:db:6c:40:d0: fd:dd:fc:84:9c:6b:f8:95:ce:42:b3:27:54:fd:9e: 2f:85:6a:9e:a1:46:0e:8e:6f:2f:a3:4e:8e:35:4d: ce:9b:5d:9c:3c:5f:0e:84:d9:92:09:55:26:4b:47: 27:1d:58:16:b7:ff:b8:a9:ee:8f:fa:e6:44:09:c5: f1:94:79:2d:6c:34:85:9b:43:5a:23:d7:66:b7:62: f0:11:a5:55:42:4c:4d:b0:2c:11:22:51:1f:a3:2d: 68:93:d0:f6:ce:c8:70:d6:ee:cc:5c:13:71:9f:e6: 01:d3:aa:9f:56:13:f3:cf:cc:6d:05:1a:b4:a0:da: 79:e6:db:4d:79:26:5a:7a:30:c2:a4:53:6f:08:d2: 74:3d:64:71:c8:60:0e:84:50:57:e7:77:59:f1:5f: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:89:EB:95:76:30:8F:D0:D9:DD:D0:F9:2A:8A:7D:57:71:A4:67:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/34c11998-ca90-3ced-8946-ee40e3de932d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:19:5d:6e:ed:be:e2:74:d3:b7:2f:30:62:1f:f1:e8:8f:20: 35:5d:02:a5:26:a7:22:b9:92:1d:ee:9c:a7:79:23:0a:29:c0: e4:a8:4e:b1:f8:4a:33:4d:21:cf:98:e9:26:e2:1b:b3:9a:88: 48:25:f3:1b:28:41:74:d2:e0:d5:9e:b6:b0:27:40:17:75:e4: cc:7e:b9:9b:a1:c2:9f:60:09:54:8f:f1:21:c1:49:01:43:c8: 67:f9:5b:be:10:74:8c:e6:dc:bf:4a:ac:ae:e4:f2:82:d0:90: a6:bc:98:a3:b9:81:e1:52:d5:6c:14:f2:3e:7e:c3:4c:fc:d0: cd:89:ca:de:de:3a:53:26:6c:d2:32:e6:b2:47:f0:0b:2b:1b: c3:62:c1:43:68:4f:7a:36:d4:8d:6f:5a:8d:59:a7:78:6b:f5: c8:cc:3f:e5:38:c9:00:fd:98:a1:3f:0c:21:3f:85:19:bc:16: 34:78:91:16:49:79:ac:73:eb:be:1d:bb:a2:d6:34:ef:45:04: e0:00:11:75:af:14:31:d5:d2:e6:6a:53:cb:d2:af:03:ab:ac: ae:6b:8d:81:88:03:03:8e:9e:a9:b8:3f:f6:eb:ef:b3:b4:7d: d1:c8:24:ab:bb:a5:49:80:76:53:d0:6d:c3:24:ad:81:ab:24: 3b:22:22:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52VKjD991iIClwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjM5NDRjZWQtNDBiZi00MTkyLWJlZjctYmNlNWQ2NTRhODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktYmHDhyDrZlML5LjZsaYn2wo+BocNryMmyW nwdJ6XPs+j0AYpMLS4TN/co37c71v75GnRNTws128nuf5YxKOHP9iL7su3qxy/o3 R4EH+75Vka2z0qcfNLgtCZQcX7bgbuW45dtsQND93fyEnGv4lc5CsydU/Z4vhWqe oUYOjm8vo06ONU3Om12cPF8OhNmSCVUmS0cnHVgWt/+4qe6P+uZECcXxlHktbDSF m0NaI9dmt2LwEaVVQkxNsCwRIlEfoy1ok9D2zshw1u7MXBNxn+YB06qfVhPzz8xt BRq0oNp55ttNeSZaejDCpFNvCNJ0PWRxyGAOhFBX53dZ8V+7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqJ65V2MI/Q2d3Q+SqKfVdxpGcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMzRjMTE5OTgtY2E5MC0z Y2VkLTg5NDYtZWU0MGUzZGU5MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsZXW7tvuJ007cvMGIf8eiPIDVdAqUmpyK5kh3unKd5IwopwOSoTrH4 SjNNIc+Y6SbiG7OaiEgl8xsoQXTS4NWetrAnQBd15Mx+uZuhwp9gCVSP8SHBSQFD yGf5W74QdIzm3L9KrK7k8oLQkKa8mKO5geFS1WwU8j5+w0z80M2Jyt7eOlMmbNIy 5rJH8AsrG8NiwUNoT3o21I1vWo1Zp3hr9cjMP+U4yQD9mKE/DCE/hRm8FjR4kRZJ eaxz674du6LWNO9FBOAAEXWvFDHV0uZqU8vSrwOrrK5rjYGIAwOOnqm4P/br77O0 fdHIJKu7pUmAdlPQbcMkrYGrJDsiIpg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:10 2025 by rpki-client