$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/7117b980-fe5a-3fdc-8f72-078d4660d968.roa File: 7117b980-fe5a-3fdc-8f72-078d4660d968.roa (raw, json) Hash identifier: GZ2ZQ8HheV5ZuTwo7e0r8aDBJkj2Zgf1fBTFN8H2omM= Subject key identifier: 4C:B0:A2:66:A5:D1:65:F6:3B:83:91:40:8F:5E:65:E0:64:9F:CA:17 Certificate issuer: /CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec Certificate serial: 010D0C9F4328584B89177EC277606055CF7BA940 Authority key identifier: 12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/7117b980-fe5a-3fdc-8f72-078d4660d968.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 46641 IP address blocks: 216.40.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7e:c2:77:60:60:55:cf:7b:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cf68cbac-340d-464d-9e46-4d8d28a109d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:9e:de:7b:83:49:ba:26:66:38:b7:ae:78: 16:d9:d8:16:ce:94:2f:4e:e3:ef:a3:9b:b0:15:42: 64:2b:00:4c:b2:0b:97:b8:d8:f3:b4:23:eb:84:ac: ca:ea:fd:2f:70:9a:58:aa:d8:4a:27:87:3b:9b:88: 32:c4:9c:a1:af:e8:8d:19:3d:57:2a:f3:f5:5a:a8: 3a:6d:18:8c:a2:31:1a:9e:7a:47:67:ed:5f:b4:62: 5b:ec:3f:c6:17:e3:7f:ee:f2:ba:6f:85:df:35:76: e5:91:4f:11:b1:c4:38:26:5e:3a:f5:e1:02:51:41: 9a:95:c5:36:09:de:8b:3a:79:d9:b7:12:a3:11:d0: 9a:04:8e:3b:d2:b4:f6:0d:46:8b:66:03:8d:c0:bc: 1a:52:f9:1b:c9:43:b5:1c:40:30:5a:2f:a1:2a:bc: c5:c4:4c:35:5a:de:42:8e:64:38:ee:8d:d5:a6:15: fd:9a:c2:08:d4:b1:a4:54:9d:1a:df:58:78:c3:53: b2:43:63:87:29:b9:5e:0e:18:fe:4c:fe:67:09:a1: 53:88:ad:89:3b:27:e8:5a:fd:6c:42:6e:54:8d:6f: b1:af:4c:cd:4e:15:c6:56:6b:f0:b2:b5:17:9e:1d: 68:77:7f:45:b8:cc:94:7d:54:ff:0a:ff:e6:a3:72: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:A2:66:A5:D1:65:F6:3B:83:91:40:8F:5E:65:E0:64:9F:CA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/7117b980-fe5a-3fdc-8f72-078d4660d968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl X509v3 Authority Key Identifier: keyid:12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer sbgp-ipAddrBlock: critical IPv4: 216.40.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7e:46:5a:1c:fd:58:09:c6:55:a7:bb:e1:4d:11:da:8e:a6: 0d:06:db:7a:f5:4f:15:13:84:72:77:df:1d:a3:95:49:d1:c8: 18:9a:59:ee:b5:23:e1:d1:c4:39:4a:73:98:0b:57:a9:7f:f0: f8:e4:27:1d:99:b4:c1:af:bb:2e:ff:2e:d7:47:02:5c:43:ea: 0b:1e:09:ab:ac:63:0b:b3:e2:10:0b:98:9a:cc:84:32:e8:c7: 6c:37:1d:64:5f:92:f1:54:15:09:a9:0e:9c:10:bd:de:47:c0: 6a:47:88:68:5f:35:36:c4:4e:10:e1:27:9e:c5:9a:59:45:27: fd:04:7a:b6:0e:51:a4:46:12:22:3a:c1:27:dd:8a:86:53:f2: cc:70:a3:b2:ae:11:3f:3e:63:94:7a:7a:5d:3c:e9:ac:f6:a1: 9b:61:98:83:4c:74:d4:7f:f4:cf:71:ad:d2:92:c9:fd:b4:97: 62:19:54:7f:bc:44:0a:6c:f9:68:20:6e:3b:89:93:78:b6:ec: 20:b8:bb:80:7b:fb:5d:44:7b:89:b0:5b:f1:bc:42:6c:b4:4e: a4:f3:cd:3d:a6:74:4c:67:88:9d:d2:05:0a:d0:95:2f:5d:88: 41:94:82:7a:17:8e:d6:8f:90:b3:26:73:88:8b:48:f7:66:42: 55:e5:9b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF37Cd2BgVc97qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVmMDRmYmItNDRkOC00ZDQ4LThkMjMtZTRiMjA4MzFh MGVjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2Y2OGNiYWMtMzQwZC00NjRkLTllNDYtNGQ4ZDI4YTEwOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhue3nuDSbomZji3rngW2dgWzpQvTuPvo5uw FUJkKwBMsguXuNjztCPrhKzK6v0vcJpYqthKJ4c7m4gyxJyhr+iNGT1XKvP1Wqg6 bRiMojEannpHZ+1ftGJb7D/GF+N/7vK6b4XfNXblkU8RscQ4Jl469eECUUGalcU2 Cd6LOnnZtxKjEdCaBI470rT2DUaLZgONwLwaUvkbyUO1HEAwWi+hKrzFxEw1Wt5C jmQ47o3VphX9msII1LGkVJ0a31h4w1OyQ2OHKbleDhj+TP5nCaFTiK2JOyfoWv1s Qm5UjW+xr0zNThXGVmvwsrUXnh1od39FuMyUfVT/Cv/mo3Ls8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEywomal0WX2O4ORQI9eZeBkn8oXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWYw NGZiYi00NGQ4LTRkNDgtOGQyMy1lNGIyMDgzMWEwZWMvNzExN2I5ODAtZmU1YS0z ZmRjLThmNzItMDc4ZDQ2NjBkOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVmMDRmYmItNDRkOC00ZDQ4LThk MjMtZTRiMjA4MzFhMGVjLzRlZjA0ZmJiLTQ0ZDgtNGQ0OC04ZDIzLWU0YjIwODMx YTBlYy5jcmwwHwYDVR0jBBgwFoAUEi1E0ZJngVirE2Tins/kdrtSHJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWYwNGZiYi00NGQ4LTRkNDgtOGQyMy1lNGIy MDgzMWEwZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ChAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd+Rloc/VgJxlWnu+FNEdqOpg0G23r1TxUThHJ33x2jlUnRyBiaWe61 I+HRxDlKc5gLV6l/8PjkJx2ZtMGvuy7/LtdHAlxD6gseCausYwuz4hALmJrMhDLo x2w3HWRfkvFUFQmpDpwQvd5HwGpHiGhfNTbEThDhJ57FmllFJ/0EerYOUaRGEiI6 wSfdioZT8sxwo7KuET8+Y5R6el086az2oZthmINMdNR/9M9xrdKSyf20l2IZVH+8 RAps+WggbjuJk3i27CC4u4B7+11Ee4mwW/G8Qmy0TqTzzT2mdExniJ3SBQrQlS9d iEGUgnoXjtaPkLMmc4iLSPdmQlXlm/g= -----END CERTIFICATE-----Generated at Tue Oct 21 05:52:59 2025 by rpki-client