$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa File: 8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json) Hash identifier: WB1mKHdy+/NTxZftv5ByIk/Q+ifIxgMVGCgPZYet08g= Subject key identifier: 2A:26:32:D6:D7:09:DC:65:D8:2E:8F:5A:90:B4:41:FF:B4:AA:AE:BD Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Certificate serial: 010D0C9F4328584B80B75652F0426FEC38343100 Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 17012 IP address blocks: 64.4.240.0/21 maxlen: 24 64.4.248.0/22 maxlen: 24 66.211.168.0/22 maxlen: 24 173.0.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:56:52:f0:42:6f:ec:38:34:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=6a1739b4-ef98-4894-9cfe-5309f86da699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:b1:02:b7:18:a0:14:1f:a2:bf:40:ff:cf: de:f3:74:4b:c4:40:1c:cd:9b:f5:17:b4:5b:b1:00: 77:b7:d1:fd:3d:8c:56:93:57:11:c5:b9:04:dc:7a: 6b:a8:c3:13:54:99:2a:e0:38:37:71:4c:65:1b:12: 85:29:cf:47:61:d8:5c:e0:bf:dc:58:d0:9d:58:62: d8:b0:e2:fd:f3:d5:90:57:41:cb:58:b7:be:69:8f: f3:e8:03:b6:ae:a0:20:b0:12:fa:dc:12:72:8a:4f: 0e:05:f0:02:7e:93:01:d7:91:4b:4c:a5:bf:d3:9b: 26:e9:56:8a:cd:db:b4:1d:cb:93:07:a9:95:26:5e: d5:49:4b:04:e5:e7:91:1c:9e:83:c9:62:08:ab:ab: 5a:ee:b9:e8:91:f0:b4:84:9d:d9:96:a8:0b:82:56: 0d:b2:b0:cc:83:ab:a3:b9:c4:7d:5c:b1:b6:51:eb: bb:cc:37:50:a4:f4:b1:6a:43:23:e7:e3:10:f9:c5: a9:6b:03:4a:bb:2a:40:96:77:50:2d:56:a6:d1:81: c5:a5:17:46:ee:e7:62:3d:be:93:1d:ee:d8:10:be: 25:39:4e:7c:7c:a3:e6:05:d0:1b:0e:68:7d:8c:53: fb:01:84:de:c7:b3:fd:66:8f:3d:e3:13:fc:93:fc: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:26:32:D6:D7:09:DC:65:D8:2E:8F:5A:90:B4:41:FF:B4:AA:AE:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl X509v3 Authority Key Identifier: keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer sbgp-ipAddrBlock: critical IPv4: 64.4.240.0-64.4.251.255 66.211.168.0/22 173.0.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6b:fd:30:c2:52:af:37:a1:04:e5:00:7b:bb:32:90:0b:8c: cb:6f:f4:57:59:b0:1e:d0:3d:aa:de:65:1d:61:8d:b5:44:88: f5:2c:fb:19:70:43:da:1e:6c:83:9a:b1:37:6f:63:4b:f2:a6: 70:f5:aa:ec:03:c2:2a:34:35:7c:9e:69:0e:ce:27:4b:d2:a7: a4:47:2c:1d:16:da:92:62:e9:0f:0b:17:f8:f6:5f:7a:a0:ce: 5d:d1:5b:20:49:37:06:50:d0:d9:59:a5:9c:cd:42:11:4d:a7: f1:d2:02:cd:9c:b7:2b:82:63:44:a2:e2:96:29:ed:8d:c3:15: 73:e7:55:d5:9c:7b:fc:25:7a:45:af:e7:88:46:69:6f:52:c0: 4c:df:e8:40:a7:f1:c0:dd:55:3f:a4:bf:c8:f3:10:89:1f:16: c2:47:5c:a5:4b:24:be:86:23:ee:53:1d:96:34:a5:03:4e:a9: 6a:c3:52:36:5e:5a:86:d0:86:b7:5d:de:80:6e:de:fc:7f:44: cf:e1:40:de:4b:47:45:67:2d:1a:81:89:a9:4c:1c:3c:22:69: 37:ad:1a:6f:89:54:81:63:71:51:c8:9c:69:43:f4:17:b5:2f: 06:65:75:08:a7:95:51:59:8d:90:96:59:a2:1e:22:7c:d1:90: d8:80:3a:98 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEuAt1ZS8EJv7Dg0MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk ZGI1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NmExNzM5YjQtZWY5OC00ODk0LTljZmUtNTMwOWY4NmRhNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0uxArcYoBQfor9A/8/e83RLxEAczZv1F7Rb sQB3t9H9PYxWk1cRxbkE3HprqMMTVJkq4Dg3cUxlGxKFKc9HYdhc4L/cWNCdWGLY sOL989WQV0HLWLe+aY/z6AO2rqAgsBL63BJyik8OBfACfpMB15FLTKW/05sm6VaK zdu0HcuTB6mVJl7VSUsE5eeRHJ6DyWIIq6ta7rnokfC0hJ3ZlqgLglYNsrDMg6uj ucR9XLG2Ueu7zDdQpPSxakMj5+MQ+cWpawNKuypAlndQLVam0YHFpRdG7udiPb6T He7YEL4lOU58fKPmBdAbDmh9jFP7AYTex7P9Zo894xP8k/yg6QIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFComMtbXCdxl2C6PWpC0Qf+0qq69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvOGZiZWUwMDQtZDc3Yy0z NDA2LWExNWMtNTE1NDhiOWViNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1 YWRkZWRkYjUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARABPAD BAJABPgDBAJC06gDBAStAFAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADGv9MMJSrzehBOUAe7sykAuMy2/0 V1mwHtA9qt5lHWGNtUSI9Sz7GXBD2h5sg5qxN29jS/KmcPWq7APCKjQ1fJ5pDs4n S9KnpEcsHRbakmLpDwsX+PZfeqDOXdFbIEk3BlDQ2VmlnM1CEU2n8dICzZy3K4Jj RKLilintjcMVc+dV1Zx7/CV6Ra/niEZpb1LATN/oQKfxwN1VP6S/yPMQiR8Wwkdc pUskvoYj7lMdljSlA06pasNSNl5ahtCGt13egG7e/H9Ez+FA3ktHRWctGoGJqUwc PCJpN60ab4lUgWNxUcicaUP0F7UvBmV1CKeVUVmNkJZZoh4ifNGQ2IA6mA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:53 2025 by rpki-client