$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa File: 4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa (raw, json) Hash identifier: OFUOAYyrUpmWdxo6Cqg/j2UCQl2zfpgaBDPKMyqvGK4= Subject key identifier: 4F:68:B0:1F:E9:63:7B:D4:B9:F6:7A:64:16:CB:4F:1A:7A:59:21:FD Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584AFC1C0B67D8E6AB5D848DC080 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 3209 IP address blocks: 47.64.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0b:67:d8:e6:ab:5d:84:8d:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3d7b27f1-ed50-44c4-9217-7a25bc0623db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:1c:51:dc:50:a4:8b:9b:a3:ce:29:e4:94: 0a:e1:fa:20:c4:c0:d7:f1:d1:52:c7:95:55:dc:3f: 38:87:2c:0c:4e:6b:c4:18:4b:ee:95:c7:f4:dc:49: 72:54:2a:1c:b5:0a:5f:f1:d4:6c:4a:57:88:af:23: c6:1b:39:a4:62:71:8f:55:86:5e:af:8e:82:6c:f7: a1:6a:21:d6:85:dd:89:08:f6:a5:b3:dd:b9:ac:2e: 3d:a0:36:35:1b:5e:f9:f0:68:5b:0f:8a:52:a9:f2: a6:65:8a:2e:4a:2d:ff:0f:48:aa:4e:34:b1:d6:67: c6:13:d9:69:d7:95:c2:19:22:13:78:dd:f2:80:ac: 81:bd:20:16:09:bb:1f:b9:c5:0e:0c:b9:7c:d9:9c: da:f3:f7:66:b0:0d:b9:dd:dc:de:8d:26:31:f3:51: 43:34:fd:c5:99:8d:c7:42:6c:13:c0:eb:cc:07:0e: 31:9f:ee:9f:a7:25:90:10:15:2f:93:90:dd:f8:88: af:24:97:1a:bd:f9:5f:d9:a8:e9:cf:a4:d1:a8:19: 2d:12:8b:52:ce:6f:79:7e:b2:0c:2d:42:c7:c2:ac: 09:d0:cd:e8:f7:18:7a:6a:2b:71:8d:c0:c4:0b:f7: e6:0f:97:18:bf:2a:bf:0b:be:22:78:9f:83:ca:c4: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:68:B0:1F:E9:63:7B:D4:B9:F6:7A:64:16:CB:4F:1A:7A:59:21:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.64.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:5f:52:0d:ef:a1:4e:f4:3c:c3:c2:10:a9:2f:ae:9e:d3:02: f6:d8:82:4a:69:70:ca:a7:a4:60:b3:4e:d3:cd:1d:78:e9:86: 31:e4:95:95:30:c3:02:8d:e5:3e:cf:85:11:51:b0:6c:62:98: 8a:46:a9:6d:c4:40:03:84:3e:eb:61:ee:2e:c0:0e:de:c1:df: 8d:2f:be:56:21:a0:da:59:1c:d6:7f:00:32:80:c0:fa:39:35: 1c:1c:c9:f6:83:d2:4a:c9:c1:cf:06:ad:03:68:fa:49:54:a2: 22:99:be:88:ad:22:ce:85:5e:45:ba:4c:10:fe:75:7f:65:ca: 86:ca:b3:07:c8:12:64:a1:bb:cf:e6:77:57:3f:ae:a9:2a:e0: 95:6d:1b:3a:58:2e:cf:ce:e3:c6:03:54:49:6b:5b:76:e9:fd: b8:d1:69:1a:44:bd:06:c3:ae:24:68:db:91:6c:52:48:4c:25: 50:b7:62:76:e6:a1:ba:ff:5d:a6:ea:6c:58:17:87:41:d3:ff: 98:e9:6b:db:10:4c:b5:a5:6b:6b:a1:23:18:34:b5:15:06:5f: 73:3f:04:d6:30:56:59:52:c3:b2:81:c3:15:c1:af:46:88:41: 75:b9:2e:57:94:82:3b:a5:ab:e9:29:58:aa:d5:14:c9:36:d3: ba:a5:fa:07 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr8HAtn2OarXYSNwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2Q3YjI3ZjEtZWQ1MC00NGM0LTkyMTctN2EyNWJjMDYyM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWccUdxQpIubo84p5JQK4fogxMDX8dFSx5VV 3D84hywMTmvEGEvulcf03ElyVCoctQpf8dRsSleIryPGGzmkYnGPVYZer46CbPeh aiHWhd2JCPals925rC49oDY1G1758GhbD4pSqfKmZYouSi3/D0iqTjSx1mfGE9lp 15XCGSITeN3ygKyBvSAWCbsfucUODLl82Zza8/dmsA253dzejSYx81FDNP3FmY3H QmwTwOvMBw4xn+6fpyWQEBUvk5Dd+IivJJcavflf2ajpz6TRqBktEotSzm95frIM LULHwqwJ0M3o9xh6aitxjcDEC/fmD5cYvyq/C74ieJ+DysSPJQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE9osB/pY3vUufZ6ZBbLTxp6WSH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvNGI4YmEyNTAtNTViOS0z MzJkLTk5ZTAtNmU3YmIwYmI0N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDL0AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAuV9SDe+hTvQ8w8IQqS+untMC9tiCSmlwyqekYLNO080deOmGMeSVlTDD Ao3lPs+FEVGwbGKYikapbcRAA4Q+62HuLsAO3sHfjS++ViGg2lkc1n8AMoDA+jk1 HBzJ9oPSSsnBzwatA2j6SVSiIpm+iK0izoVeRbpMEP51f2XKhsqzB8gSZKG7z+Z3 Vz+uqSrglW0bOlguz87jxgNUSWtbdun9uNFpGkS9BsOuJGjbkWxSSEwlULdiduah uv9dpupsWBeHQdP/mOlr2xBMtaVra6EjGDS1FQZfcz8E1jBWWVLDsoHDFcGvRohB dbkuV5SCO6Wr6SlYqtUUyTbTuqX6Bw== -----END CERTIFICATE-----Generated at Tue Sep 9 19:08:15 2025 by rpki-client