$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa File: f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (raw, json) Hash identifier: L0fhzHH6bhiP57Rpc9maUWkLKnGiL38BLRASVjCOmNQ= Subject key identifier: 1F:55:D2:E4:56:E5:DC:D1:F5:12:AB:8F:89:DB:FA:60:31:59:44:C4 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584B99D79251A823852C72F2F400 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395035 IP address blocks: 64.239.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:92:51:a8:23:85:2c:72:f2:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=16b3ed31-62fb-4598-aed4-8c271673eea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:93:08:7e:db:11:6a:2c:07:a4:8b:da:20: 1b:33:ba:12:75:57:69:72:2f:18:b6:a4:3b:57:b7: 2e:ce:3e:b7:ba:6a:82:af:94:37:20:bb:73:1a:5f: 78:ec:6e:52:cd:d2:08:52:52:8f:9a:9d:db:06:85: d3:2f:c9:f4:d1:5e:f2:5d:36:56:3a:08:a8:b5:4f: 7f:4d:16:f6:43:8a:fb:fc:80:26:c6:09:02:5a:a7: 2a:d9:ce:05:d0:ea:57:76:44:41:9b:5e:de:6e:c7: 7e:91:18:67:df:c8:8c:a8:fe:1e:de:10:cf:b5:12: b5:5b:4e:fa:6b:1a:bc:e9:11:17:f0:d0:8b:8c:8b: 05:3e:8b:66:b5:65:e3:f0:1c:b0:f0:c8:1b:ce:69: 8e:98:a0:11:4d:9d:3d:66:73:c5:d2:d4:2e:d1:56: 56:d0:30:7a:be:b2:fd:32:2c:94:f7:aa:df:0d:5f: 48:4d:3f:07:33:44:a9:07:8a:82:61:eb:69:b8:ba: 6a:0e:50:94:bd:3a:f4:cb:db:49:32:89:ee:d1:09: 16:78:ea:82:8c:95:61:29:39:df:d9:24:25:26:61: f3:40:8c:31:ca:7c:46:53:ef:22:5d:d1:c8:18:b1: 74:4d:f3:88:76:48:f8:4d:d5:e3:5c:a0:86:33:b7: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:D2:E4:56:E5:DC:D1:F5:12:AB:8F:89:DB:FA:60:31:59:44:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:56:95:b2:a8:6c:1d:fe:b6:02:e2:28:d4:99:84:4b:51:2f: 28:9c:a6:b2:e7:fd:a3:5e:9c:2f:39:1d:cb:2d:b9:95:e5:fa: 23:d8:b1:cf:66:35:72:79:8a:3b:29:be:33:8a:8c:3d:bf:40: 0f:f2:7f:91:2d:16:6c:03:e8:a7:1f:e7:95:a9:29:cd:be:ae: b9:32:87:47:e7:eb:85:cb:6f:ae:d6:9c:cc:06:3a:05:50:1c: 64:f0:3b:48:18:e3:e3:30:56:93:be:44:9b:61:07:b7:6a:04: e1:29:19:b7:0c:20:ae:fe:5e:86:eb:fc:ce:78:03:24:f6:2f: 1c:bf:c9:ce:2e:5c:f6:3b:a9:2d:06:ad:69:2a:d8:c7:a4:8e: d4:9f:4a:ee:28:26:f4:9d:8b:9e:11:f4:d4:9a:e1:60:8e:4b: 34:40:ad:23:e1:fa:ae:b5:52:6f:5c:7a:41:a7:7e:82:1b:f0: d9:77:f9:62:fc:36:83:3e:87:32:f3:5c:b9:a6:cb:81:d7:ab: 50:ee:8f:69:fa:0b:f5:d1:53:cc:bc:db:22:24:02:53:73:c2: b2:56:c1:74:80:f2:9a:0f:a4:58:f5:4b:21:1d:f3:1c:60:90: 92:e2:3d:3e:7f:c3:b5:c7:91:c1:c5:af:d8:8b:87:ac:79:bd: 83:62:ed:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15JRqCOFLHLy9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTZiM2VkMzEtNjJmYi00NTk4LWFlZDQtOGMyNzE2NzNlZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+mTCH7bEWosB6SL2iAbM7oSdVdpci8YtqQ7 V7cuzj63umqCr5Q3ILtzGl947G5SzdIIUlKPmp3bBoXTL8n00V7yXTZWOgiotU9/ TRb2Q4r7/IAmxgkCWqcq2c4F0OpXdkRBm17ebsd+kRhn38iMqP4e3hDPtRK1W076 axq86REX8NCLjIsFPotmtWXj8Byw8MgbzmmOmKARTZ09ZnPF0tQu0VZW0DB6vrL9 MiyU96rfDV9ITT8HM0SpB4qCYetpuLpqDlCUvTr0y9tJMonu0QkWeOqCjJVhKTnf 2SQlJmHzQIwxynxGU+8iXdHIGLF0TfOIdkj4TdXjXKCGM7c1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9V0uRW5dzR9RKrj4nb+mAxWUTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZjc5NDA1N2EtNmFjYi0z ZTBjLWFmYWMtYWIyM2I0ZDJhMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNWlbKobB3+tgLiKNSZhEtRLyicprLn/aNenC85HcstuZXl+iPYsc9m NXJ5ijspvjOKjD2/QA/yf5EtFmwD6Kcf55WpKc2+rrkyh0fn64XLb67WnMwGOgVQ HGTwO0gY4+MwVpO+RJthB7dqBOEpGbcMIK7+Xobr/M54AyT2Lxy/yc4uXPY7qS0G rWkq2MekjtSfSu4oJvSdi54R9NSa4WCOSzRArSPh+q61Um9cekGnfoIb8Nl3+WL8 NoM+hzLzXLmmy4HXq1Duj2n6C/XRU8y82yIkAlNzwrJWwXSA8poPpFj1SyEd8xxg kJLiPT5/w7XHkcHFr9iLh6x5vYNi7WY= -----END CERTIFICATE-----Generated at Fri Oct 24 08:28:27 2025 by rpki-client