$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa File: 0cff3be4-0a87-36be-9260-19d9a164f049.roa (raw, json) Hash identifier: otGMpFfi3PWxRpXCNYZ8I7CobKEV85FVRCesEyNZP38= Subject key identifier: A9:36:74:1A:FF:3B:F5:DE:EF:16:BF:FA:67:30:6C:56:0C:86:0A:43 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584B75FF952C7354B90413439980 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa Signing time: Thu 09 Oct 2025 04:52:15 +0000 ROA not before: Thu 09 Oct 2025 04:52:15 +0000 ROA not after: Wed 07 Jan 2026 05:52:15 +0000 asID: 22079 IP address blocks: 64.186.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:ff:95:2c:73:54:b9:04:13:43:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 9 04:52:15 2025 GMT Not After : Jan 7 05:52:15 2026 GMT Subject: CN=771ead21-2f13-4d97-8993-b95fbad99e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2b:cc:60:53:c3:7c:46:0c:b9:74:eb:d7:a9: 21:de:1d:14:55:0e:f3:01:c6:93:fa:3a:3c:e7:45: b6:93:bf:d6:93:14:70:49:dd:e8:3f:01:93:13:8c: a1:86:4f:20:61:2b:39:01:b8:ff:c9:51:ec:3c:da: e4:43:c1:7f:9d:2b:76:14:1e:51:10:7e:bc:93:c3: 07:bd:9f:33:38:b1:99:94:74:cf:f9:53:ed:ac:dd: 6b:2a:4c:96:e7:6a:c3:a0:1a:b6:78:f8:e6:0f:c0: e3:d7:53:0e:f4:d5:e8:f6:0b:79:fb:3d:45:9f:3c: 02:12:29:ea:80:84:e3:d7:ba:d4:24:33:54:f5:f4: 71:35:77:49:53:7c:5d:39:1d:03:40:2f:0f:59:1f: c6:2a:6a:33:b7:57:45:e4:05:c2:88:48:dd:09:db: 0f:c6:77:32:2b:a3:b1:3d:69:4b:58:48:81:d8:29: 9b:71:bf:ef:d8:90:db:c5:1d:ef:8c:f1:c4:27:bb: d3:01:75:b1:af:b2:40:6b:4b:b5:2f:50:a7:dc:54: 11:95:35:e4:f4:b9:8f:28:62:0e:25:6d:9e:21:6a: 70:c4:45:59:b1:0b:eb:4c:ae:d6:59:97:84:8c:76: dd:1e:f9:3d:de:a4:e9:28:09:de:64:21:b0:23:16: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:36:74:1A:FF:3B:F5:DE:EF:16:BF:FA:67:30:6C:56:0C:86:0A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.186.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:64:15:d1:2d:d1:05:6c:f9:d6:42:44:6b:51:c6:b2:66:58: 4b:db:fb:f1:23:38:fb:8e:1f:47:2f:44:89:2f:be:64:16:c8: 52:b4:7c:f0:a0:d1:1b:68:27:8b:16:19:b3:c9:89:47:d4:d8: e9:04:76:28:cd:dd:ba:f9:5c:ca:70:5a:f3:77:14:9b:e7:88: 54:29:b1:be:23:91:98:9d:7a:98:2f:22:e9:a1:3e:56:12:a7: aa:20:f9:dd:57:ee:1a:16:77:a7:63:5f:76:e6:d3:aa:e1:62: 82:3a:47:b3:be:74:21:a1:cc:fb:85:57:3f:56:46:68:9c:a6: 21:38:d6:9f:0a:dc:b0:bf:a0:52:28:e9:cb:b5:98:6c:70:27: ce:41:26:97:0c:51:28:a0:1d:37:69:ef:4e:cb:d8:9c:60:ca: eb:b9:86:05:fd:c4:c7:cc:86:0f:ec:22:07:3c:3a:31:5e:58: d2:d5:fe:f6:b6:4e:b4:57:dc:c1:5c:57:de:1a:95:9b:8a:3a: 50:01:29:f6:24:d6:2a:41:e1:2b:4f:f1:2c:61:ee:ab:9c:9a: c6:9e:87:d6:24:67:9d:f2:04:38:08:c8:f9:d6:08:cf:3d:08: b7:7d:f2:0f:18:71:f0:9e:a1:35:3b:32:2d:94:9c:81:3e:1b: be:5c:6d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1/5Usc1S5BBNDmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI1MTAwOTA0NTIxNVoXDTI2MDEwNzA1NTIxNVowLzEtMCsGA1UEAxMk NzcxZWFkMjEtMmYxMy00ZDk3LTg5OTMtYjk1ZmJhZDk5ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSvMYFPDfEYMuXTr16kh3h0UVQ7zAcaT+jo8 50W2k7/WkxRwSd3oPwGTE4yhhk8gYSs5Abj/yVHsPNrkQ8F/nSt2FB5REH68k8MH vZ8zOLGZlHTP+VPtrN1rKkyW52rDoBq2ePjmD8Dj11MO9NXo9gt5+z1FnzwCEinq gITj17rUJDNU9fRxNXdJU3xdOR0DQC8PWR/GKmozt1dF5AXCiEjdCdsPxncyK6Ox PWlLWEiB2Cmbcb/v2JDbxR3vjPHEJ7vTAXWxr7JAa0u1L1Cn3FQRlTXk9LmPKGIO JW2eIWpwxEVZsQvrTK7WWZeEjHbdHvk93qTpKAneZCGwIxa+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk2dBr/O/Xe7xa/+mcwbFYMhgpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMGNmZjNiZTQtMGE4Ny0z NmJlLTkyNjAtMTlkOWExNjRmMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpkFdEt0QVs+dZCRGtRxrJmWEvb+/EjOPuOH0cvRIkvvmQWyFK0fPCg 0RtoJ4sWGbPJiUfU2OkEdijN3br5XMpwWvN3FJvniFQpsb4jkZidepgvIumhPlYS p6og+d1X7hoWd6djX3bm06rhYoI6R7O+dCGhzPuFVz9WRmicpiE41p8K3LC/oFIo 6cu1mGxwJ85BJpcMUSigHTdp707L2Jxgyuu5hgX9xMfMhg/sIgc8OjFeWNLV/va2 TrRX3MFcV94alZuKOlABKfYk1ipB4StP8Sxh7qucmsaeh9YkZ53yBDgIyPnWCM89 CLd98g8YcfCeoTU7Mi2UnIE+G75cbWg= -----END CERTIFICATE-----Generated at Tue Oct 21 12:41:11 2025 by rpki-client