$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa File: cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa (raw, json) Hash identifier: KPNIp/nAl4M/G0S58E9XIda+FISBhhKg3fpMfYBfP8s= Subject key identifier: 07:32:BA:BB:D9:62:D2:CD:2B:CA:9A:5C:30:3A:DE:68:3A:59:CD:75 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC7529E70199ED450161980 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:52:9e:70:19:9e:d4:50:16:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=84704b95-5837-4d44-a850-671840422f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:57:98:dd:92:18:2c:a2:fd:d8:6a:e4:f5: 96:87:61:99:f7:06:cc:9c:5d:d7:b2:41:5d:55:86: 5b:53:11:c7:f1:1f:71:ac:d8:75:64:79:41:97:f6: e5:10:f1:5f:ca:47:81:30:80:25:6c:39:8a:f9:f9: 71:23:9e:e3:f7:04:c4:d4:eb:9f:f1:87:22:d6:3b: f1:1a:2e:eb:96:58:be:6e:9f:5a:a3:d9:4f:41:29: 90:59:14:fc:09:07:68:26:c7:c0:e9:e1:b5:55:f0: 92:61:a4:af:a9:29:fe:bc:b3:97:47:41:22:1b:f6: 46:9b:8e:29:fb:95:a2:cb:8e:97:95:55:6c:3d:a2: f6:3c:2e:a9:58:6b:ad:af:54:cf:59:91:e5:36:76: cd:42:ad:30:dc:30:70:b1:83:6f:18:d8:15:23:a5: da:36:e5:f5:00:58:a6:71:b6:72:a9:01:af:cd:e0: a3:59:20:e1:5c:70:dc:30:60:cb:9c:b2:5b:3b:a4: 49:c3:8a:21:b7:31:88:ff:f6:e9:ad:ac:f9:6c:a5: d0:14:c5:f2:b8:98:e0:e0:4a:b5:55:f0:42:f9:c8: 63:ee:28:09:ac:f2:cd:db:48:13:cf:db:3c:0f:eb: c0:dd:69:97:98:36:18:57:38:a1:52:c6:ca:51:da: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:32:BA:BB:D9:62:D2:CD:2B:CA:9A:5C:30:3A:DE:68:3A:59:CD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d0:a5:c7:99:bb:ff:09:61:7b:d6:b5:69:fb:1d:48:fb:4a: 59:da:e9:bd:f0:fc:f2:77:18:2a:52:0e:d3:29:42:af:c9:4d: 17:b5:89:57:e1:a6:ec:16:25:c0:44:a7:09:ca:a8:b2:49:cb: 17:72:a6:f9:21:1b:0c:09:9c:83:2f:22:b6:2b:da:e4:3d:a0: 65:ad:08:01:6a:b8:f8:58:4d:e5:e1:ba:4c:94:b0:1b:38:6c: 24:7d:21:d8:d6:78:f6:df:30:91:b5:e5:ec:35:10:b1:5c:b5: b2:2f:52:26:cd:6f:2a:a5:fb:d4:cb:b2:e6:00:f0:57:45:90: 4f:3d:46:7f:a0:de:64:b5:d7:97:39:a0:77:ad:54:72:54:6d: 46:62:b4:1d:ca:d2:ab:13:0b:f7:9f:8a:61:28:2f:c7:1e:6f: 3a:11:df:c1:78:55:c7:55:c6:5d:eb:c1:df:4d:cf:4d:90:25: af:a5:fa:a9:53:b2:8e:8c:b6:c5:75:6a:c7:46:46:80:37:78: af:32:4a:4b:95:15:1b:36:ee:6e:e2:3c:75:6e:d8:d9:0f:4c: 59:30:e2:27:4a:65:aa:08:b0:f0:77:fe:4f:f1:6a:58:87:9d: 6f:af:f0:f8:c5:d4:bd:69:8f:d6:ed:59:78:c1:92:2b:48:29: be:51:53:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1KecBme1FAWGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ODQ3MDRiOTUtNTgzNy00ZDQ0LWE4NTAtNjcxODQwNDIyZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntJXmN2SGCyi/dhq5PWWh2GZ9wbMnF3XskFd VYZbUxHH8R9xrNh1ZHlBl/blEPFfykeBMIAlbDmK+flxI57j9wTE1Ouf8Yci1jvx Gi7rlli+bp9ao9lPQSmQWRT8CQdoJsfA6eG1VfCSYaSvqSn+vLOXR0EiG/ZGm44p +5Wiy46XlVVsPaL2PC6pWGutr1TPWZHlNnbNQq0w3DBwsYNvGNgVI6XaNuX1AFim cbZyqQGvzeCjWSDhXHDcMGDLnLJbO6RJw4ohtzGI//bpraz5bKXQFMXyuJjg4Eq1 VfBC+chj7igJrPLN20gTz9s8D+vA3WmXmDYYVzihUsbKUdoexwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcyurvZYtLNK8qaXDA63mg6Wc11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvY2I3MzA4ZjktNzA1MS0z M2JjLWFkOWYtOWZmNzliODhiODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjQpceZu/8JYXvWtWn7HUj7Slna6b3w/PJ3GCpSDtMpQq/JTRe1iVfh puwWJcBEpwnKqLJJyxdypvkhGwwJnIMvIrYr2uQ9oGWtCAFquPhYTeXhukyUsBs4 bCR9IdjWePbfMJG15ew1ELFctbIvUibNbyql+9TLsuYA8FdFkE89Rn+g3mS115c5 oHetVHJUbUZitB3K0qsTC/efimEoL8cebzoR38F4VcdVxl3rwd9Nz02QJa+l+qlT so6MtsV1asdGRoA3eK8ySkuVFRs27m7iPHVu2NkPTFkw4idKZaoIsPB3/k/xaliH nW+v8PjF1L1pj9btWXjBkitIKb5RU/4= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:41 2025 by rpki-client