$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa File: 0efa75e2-cd2b-36ec-81d8-1737411c5361.roa (raw, json) Hash identifier: 7IJufBtUO5T1xgmnwRZocuhgKiAeD9dGfvutY7Lgq6o= Subject key identifier: 14:72:FA:F7:19:F6:87:60:D3:5E:8D:15:C5:2A:97:A8:C3:29:A2:85 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584B75F58D8B26E8937A20A35D80 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa Signing time: Thu 09 Oct 2025 04:32:02 +0000 ROA not before: Thu 09 Oct 2025 04:32:02 +0000 ROA not after: Wed 07 Jan 2026 05:32:02 +0000 asID: 22079 IP address blocks: 64.136.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:f5:8d:8b:26:e8:93:7a:20:a3:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 9 04:32:02 2025 GMT Not After : Jan 7 05:32:02 2026 GMT Subject: CN=b307f015-a174-49b1-9579-6b66067b1d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:5f:e2:15:58:3b:af:dc:c9:96:fc:43:b1: cb:74:a9:6f:44:a4:08:e2:04:7f:e5:b5:e7:d7:64: 1d:46:91:54:40:aa:32:f3:f2:01:5f:b2:40:9c:90: f1:5a:8d:bd:75:9f:9c:5e:9e:31:dd:8c:6b:f0:49: 55:cc:e8:14:4c:e9:6e:3d:bf:0f:f9:23:fe:fd:42: 1a:56:75:f9:81:4a:da:14:72:5e:93:76:86:3f:ab: 2d:f4:8b:1e:91:c7:35:60:3a:f8:78:81:51:e5:f5: 58:95:1d:fe:43:24:20:32:7c:35:a0:a5:b9:8e:c4: d9:1e:af:36:4e:84:50:00:62:d4:3d:5d:1d:ac:8a: 41:24:43:e0:07:59:17:24:50:bc:7c:d4:c1:59:48: 00:f2:82:c9:da:58:b0:42:de:9d:03:dc:bb:f7:be: fe:e3:8b:2a:1c:af:79:2b:b1:4e:0a:e9:9d:19:aa: 47:7c:ea:ba:f8:6e:fd:f7:cb:33:d6:06:79:34:96: 44:91:59:e1:0c:31:c9:14:e8:25:37:19:76:63:20: 05:31:37:73:58:91:d9:d5:33:cc:f7:e0:33:90:fb: 24:da:84:4d:7d:ea:91:52:b7:12:36:39:b4:26:66: 0a:9a:e6:8c:7a:53:51:65:b3:82:b5:95:c2:dd:70: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:72:FA:F7:19:F6:87:60:D3:5E:8D:15:C5:2A:97:A8:C3:29:A2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.136.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9f:ba:ac:96:e3:56:64:8f:be:01:4a:94:96:e1:3d:ae:08: d4:2e:c8:4f:aa:dd:89:75:77:26:51:f1:15:33:34:12:e0:73: 15:66:19:55:57:62:19:0d:9b:f6:cc:11:96:e3:c0:94:e7:fa: a0:78:1d:54:1c:fd:a7:20:2b:3a:5b:88:8f:2c:22:44:0d:c3: 22:d8:c6:63:29:7a:24:39:b9:8d:34:98:96:c6:04:b3:50:c5: 2f:c7:5f:b5:b0:12:43:30:13:ad:73:6e:87:fd:14:4b:10:f3: af:01:11:42:80:cf:34:ec:11:9a:bf:03:59:42:ea:81:25:99: c4:41:61:26:19:b9:d6:b1:d0:5d:bc:59:9e:74:b8:ee:09:d1: 38:4f:df:21:14:25:46:00:89:39:6c:0d:0f:d7:7d:7c:cf:f6: d9:cc:60:6c:ed:f7:89:0a:63:0e:e3:d7:7e:4b:09:3a:94:26: 6f:0e:e4:2b:86:45:f9:db:9d:0c:b2:cf:a0:cc:84:d4:ee:9c: fa:fa:94:6c:4c:45:29:31:b7:4d:1a:ed:72:b1:5c:c4:d5:ee: 52:38:8f:9b:1e:ec:2c:70:f8:ee:14:be:61:85:0c:77:c8:f8: e3:11:17:6e:f0:29:d9:f9:8e:9b:60:80:12:74:91:2f:b5:70: 3e:8a:15:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt19Y2LJuiTeiCjXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI1MTAwOTA0MzIwMloXDTI2MDEwNzA1MzIwMlowLzEtMCsGA1UEAxMk YjMwN2YwMTUtYTE3NC00OWIxLTk1NzktNmI2NjA2N2IxZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTdf4hVYO6/cyZb8Q7HLdKlvRKQI4gR/5bXn 12QdRpFUQKoy8/IBX7JAnJDxWo29dZ+cXp4x3Yxr8ElVzOgUTOluPb8P+SP+/UIa VnX5gUraFHJek3aGP6st9Isekcc1YDr4eIFR5fVYlR3+QyQgMnw1oKW5jsTZHq82 ToRQAGLUPV0drIpBJEPgB1kXJFC8fNTBWUgA8oLJ2liwQt6dA9y7977+44sqHK95 K7FOCumdGapHfOq6+G7998sz1gZ5NJZEkVnhDDHJFOglNxl2YyAFMTdzWJHZ1TPM 9+AzkPsk2oRNfeqRUrcSNjm0JmYKmuaMelNRZbOCtZXC3XCrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRy+vcZ9odg016NFcUql6jDKaKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMGVmYTc1ZTItY2QyYi0z NmVjLTgxZDgtMTczNzQxMWM1MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWfuqyW41Zkj74BSpSW4T2uCNQuyE+q3Yl1dyZR8RUzNBLgcxVmGVVX YhkNm/bMEZbjwJTn+qB4HVQc/acgKzpbiI8sIkQNwyLYxmMpeiQ5uY00mJbGBLNQ xS/HX7WwEkMwE61zbof9FEsQ868BEUKAzzTsEZq/A1lC6oElmcRBYSYZudax0F28 WZ50uO4J0ThP3yEUJUYAiTlsDQ/XfXzP9tnMYGzt94kKYw7j135LCTqUJm8O5CuG RfnbnQyyz6DMhNTunPr6lGxMRSkxt00a7XKxXMTV7lI4j5se7Cxw+O4UvmGFDHfI +OMRF27wKdn5jptggBJ0kS+1cD6KFeE= -----END CERTIFICATE-----Generated at Tue Oct 21 12:41:10 2025 by rpki-client