$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa File: 1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa (raw, json) Hash identifier: HPl5O5LeEFDi+ROA+KNNeCNl9OHSxmFL7sTqKDgoee8= Subject key identifier: 61:36:56:A9:49:44:10:E6:3C:64:8E:16:E0:F5:A7:BE:DF:C2:E3:BA Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584B2761833957BBF27F26EAF200 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 63414 IP address blocks: 64.21.228.0/22 maxlen: 24 64.255.144.0/21 maxlen: 24 66.163.144.0/21 maxlen: 24 66.163.152.0/24 maxlen: 24 66.163.155.0/24 maxlen: 24 66.163.156.0/22 maxlen: 24 69.178.192.0/22 maxlen: 24 69.178.196.0/23 maxlen: 24 69.178.200.0/22 maxlen: 24 76.10.124.0/22 maxlen: 24 209.243.0.0/21 maxlen: 24 209.243.8.0/22 maxlen: 24 209.243.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:83:39:57:bb:f2:7f:26:ea:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=a8c107e1-f503-426d-a70d-631faab26cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1c:55:59:6e:ff:29:a9:6f:20:ec:c5:4f:80: 28:1e:19:dd:41:02:49:e9:27:6e:5a:aa:86:4d:87: 17:8b:66:b9:65:ad:3b:ec:16:dd:19:42:f1:62:e5: db:ef:15:16:be:d6:f3:0a:4c:34:aa:31:f4:4f:de: 5f:c6:a7:9f:ab:71:8d:d8:07:5f:2c:a7:bb:52:3f: 94:8c:52:37:e2:eb:dc:f5:54:4f:87:7d:45:83:03: dc:99:1e:d8:36:db:5a:ba:6e:6b:48:4d:6c:bb:15: ca:05:7a:27:d5:80:76:5d:b6:40:a4:37:e3:79:57: 7c:33:a8:ed:8b:67:f3:86:60:42:15:65:47:fa:00: 3d:da:ec:e8:19:fb:f9:47:96:0c:10:22:c4:0d:73: b5:53:5d:d6:cb:39:91:30:87:7d:49:21:36:56:37: 80:be:c2:9b:61:cb:49:e3:c0:a3:ad:ef:b8:2e:b0: 97:93:34:33:1a:87:bf:2f:95:53:95:a8:ce:9e:d9: 01:b9:2b:0c:c3:a3:26:1f:70:32:46:f2:bc:23:8c: 8a:2a:c7:78:65:4d:7e:f2:5f:4d:42:6a:93:72:46: d0:b1:6e:1a:82:b6:cc:0d:42:c1:c6:fe:5d:85:56: 18:21:01:23:15:c3:a5:1e:5c:8d:fa:af:2b:5a:9e: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:56:A9:49:44:10:E6:3C:64:8E:16:E0:F5:A7:BE:DF:C2:E3:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.228.0/22 64.255.144.0/21 66.163.144.0-66.163.152.255 66.163.155.0-66.163.159.255 69.178.192.0-69.178.197.255 69.178.200.0/22 76.10.124.0/22 209.243.0.0-209.243.11.255 209.243.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:cb:ee:12:bf:3e:6b:a3:51:1a:fe:4e:de:10:0b:a0:e1:3e: 0d:35:21:79:a1:51:2a:af:b9:74:ec:df:10:f3:21:af:35:5f: 99:d4:de:11:a2:f5:af:36:52:96:2d:51:72:a2:3a:1e:1d:13: 0e:de:53:6a:d6:1f:28:8c:07:40:18:1c:64:a0:29:e3:72:78: 41:ff:ed:1d:07:c9:c1:56:02:44:8d:dd:5d:5a:df:7d:c8:a7: 88:09:95:54:00:97:47:14:9c:25:76:89:4c:71:d9:98:d6:eb: 3c:35:eb:71:b4:ee:3b:d3:84:f2:65:89:9e:aa:bd:fe:35:12: b4:e9:ff:5b:ab:d4:66:bc:d1:70:69:74:13:b9:f3:a8:e7:42: ec:50:03:c0:fb:ef:f0:a1:d9:18:8d:78:c2:ec:8f:e0:33:e4: b1:e1:14:c9:98:1c:98:f8:dc:0d:d6:3f:06:9d:0f:e8:db:86: be:14:a5:a0:94:53:09:ec:9e:67:60:65:a8:72:c1:e5:f9:f9: 19:06:ee:b3:03:e8:61:77:3d:f6:85:1f:68:06:fb:0c:40:92: 09:e8:ae:2b:85:ff:b4:36:fa:7a:07:dc:b6:2e:2f:70:af:31: 26:3b:15:06:9a:56:0d:0e:65:70:09:a5:a2:4a:be:33:e9:c5: 27:48:ea:d4 -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEsnYYM5V7vyfybq8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk YThjMTA3ZTEtZjUwMy00MjZkLWE3MGQtNjMxZmFhYjI2Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxxVWW7/KalvIOzFT4AoHhndQQJJ6SduWqqG TYcXi2a5Za077BbdGULxYuXb7xUWvtbzCkw0qjH0T95fxqefq3GN2AdfLKe7Uj+U jFI34uvc9VRPh31FgwPcmR7YNttaum5rSE1suxXKBXon1YB2XbZApDfjeVd8M6jt i2fzhmBCFWVH+gA92uzoGfv5R5YMECLEDXO1U13WyzmRMId9SSE2VjeAvsKbYctJ 48Cjre+4LrCXkzQzGoe/L5VTlajOntkBuSsMw6MmH3AyRvK8I4yKKsd4ZU1+8l9N QmqTckbQsW4agrbMDULBxv5dhVYYIQEjFcOlHlyN+q8rWp6DzwIDAQABo4IDpDCC A6AwHQYDVR0OBBYEFGE2VqlJRBDmPGSOFuD1p77fwuO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvMTI4M2ViM2EtMDRlMC0z MmYyLWI1NGItMWJmNWE5NjE4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQCQBXkAwQD QP+QMAwDBARCo5ADBABCo5gwDAMEAEKjmwMEBUKjgDAMAwQGRbLAAwQBRbLEAwQC RbLIAwQCTAp8MAsDAwDR8wMEAtHzCAMEA9HzEDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7y+4Svz5ro1Ea /k7eEAug4T4NNSF5oVEqr7l07N8Q8yGvNV+Z1N4RovWvNlKWLVFyojoeHRMO3lNq 1h8ojAdAGBxkoCnjcnhB/+0dB8nBVgJEjd1dWt99yKeICZVUAJdHFJwldolMcdmY 1us8NetxtO4704TyZYmeqr3+NRK06f9bq9RmvNFwaXQTufOo50LsUAPA++/wodkY jXjC7I/gM+Sx4RTJmByY+NwN1j8GnQ/o24a+FKWglFMJ7J5nYGWocsHl+fkZBu6z A+hhdz32hR9oBvsMQJIJ6K4rhf+0Nvp6B9y2Li9wrzEmOxUGmlYNDmVwCaWiSr4z 6cUnSOrU -----END CERTIFICATE-----Generated at Thu Sep 18 04:10:14 2025 by rpki-client