$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa File: 72a09a28-e7b1-3e90-b42d-bbab33e58352.roa (raw, json) Hash identifier: CZ2ov8tMCQDDYlPZx6Yj24CYQdSM3+5QiJRLzr8VVI0= Subject key identifier: FA:20:E5:4C:3C:06:42:3F:49:C8:C8:3C:56:40:F2:63:80:47:49:B9 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584B7603A56290A38EF4F828C580 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa Signing time: Thu 09 Oct 2025 05:00:26 +0000 ROA not before: Thu 09 Oct 2025 05:00:26 +0000 ROA not after: Wed 07 Jan 2026 06:00:26 +0000 asID: 22079 IP address blocks: 64.186.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:03:a5:62:90:a3:8e:f4:f8:28:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 9 05:00:26 2025 GMT Not After : Jan 7 06:00:26 2026 GMT Subject: CN=08a84eaf-5e76-4ad9-a485-7e6495a93047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:79:17:f5:40:b4:43:e8:fc:76:03:8f:a3: 35:9d:4a:68:fc:fb:6d:e1:7c:ac:48:9a:a8:ea:1f: e5:76:ce:33:5e:65:c7:c8:52:60:74:f5:89:b4:13: 71:b8:3f:d7:8d:1a:61:17:9d:2d:dd:6d:d4:e1:9a: a5:c2:0d:ac:a1:fe:be:f3:ab:f6:d5:d9:8d:f8:f2: 1e:17:8c:e0:23:60:d6:28:4e:3a:75:ce:5b:02:e5: ea:61:26:50:2d:24:f4:f7:12:3c:07:18:fb:f0:6b: 91:c7:85:30:34:e1:ae:fd:f7:75:df:90:41:dc:b4: fb:74:15:59:1b:f2:20:87:ae:32:ed:7d:df:8b:fc: a2:3c:81:a2:b8:8c:de:ee:b8:aa:7c:10:f7:f5:a1: 20:fc:ec:79:2e:15:a0:60:74:eb:89:be:8f:11:2e: a2:c2:91:f1:8d:25:a3:3f:87:cc:e0:66:07:b7:c6: ef:8c:f4:e2:8a:25:53:33:35:13:ef:7b:df:7c:85: 94:57:e7:ca:9a:cf:6f:fe:ee:aa:1e:de:2b:9c:83: 9e:bb:44:c5:55:57:9b:8b:fc:72:9d:61:d2:dc:84: f3:18:73:eb:ae:60:5a:df:ed:8a:8a:52:e0:6d:11: cc:2a:38:53:d0:6c:8b:2a:95:a4:65:64:e3:95:bb: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:20:E5:4C:3C:06:42:3F:49:C8:C8:3C:56:40:F2:63:80:47:49:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/72a09a28-e7b1-3e90-b42d-bbab33e58352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.186.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:76:99:42:81:20:d4:29:de:8f:81:b1:dc:7c:2f:5c:c9:28: 05:f2:cd:18:8f:8b:2d:df:15:25:db:34:c7:65:02:f5:ff:00: 1d:a6:49:01:c1:80:39:0a:fd:aa:21:81:55:2f:08:6c:19:2a: 9b:c7:1a:9e:b0:65:34:1e:d7:dc:c3:d1:e8:16:83:09:c1:eb: 85:10:22:e6:d7:88:1a:c1:2f:66:e4:22:db:81:5b:f4:fc:e5: e3:9f:e3:90:26:43:8f:9c:c6:5f:76:a0:52:e1:6c:21:46:8e: b7:78:68:b8:5f:6d:4d:b8:d1:d6:98:2f:19:e4:c5:dc:7e:ab: e7:3a:3b:54:ff:88:ef:f2:ec:90:bc:e3:3b:c6:c9:27:8c:03: b0:73:0e:9c:94:9c:65:cf:ad:92:7b:64:78:54:1a:ac:ed:30: 59:81:4f:a7:84:a2:fb:af:10:7c:5c:95:e5:b3:4d:4d:a3:6e: a2:a7:a6:ff:94:64:96:06:2e:2d:63:11:3f:83:91:d4:6c:48: 65:f4:17:79:e6:9e:ec:c2:e3:3a:1a:61:1f:9f:3d:4a:23:00: f2:8b:8a:51:5c:ac:20:8d:10:d0:23:86:eb:24:60:3c:9d:d8: 19:43:f4:a9:b4:e5:6c:dd:e1:e9:42:46:21:0e:03:1f:9e:e5: cd:12:e4:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2A6VikKOO9PgoxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI1MTAwOTA1MDAyNloXDTI2MDEwNzA2MDAyNlowLzEtMCsGA1UEAxMk MDhhODRlYWYtNWU3Ni00YWQ5LWE0ODUtN2U2NDk1YTkzMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1V5F/VAtEPo/HYDj6M1nUpo/Ptt4XysSJqo 6h/lds4zXmXHyFJgdPWJtBNxuD/XjRphF50t3W3U4Zqlwg2sof6+86v21dmN+PIe F4zgI2DWKE46dc5bAuXqYSZQLST09xI8Bxj78GuRx4UwNOGu/fd135BB3LT7dBVZ G/Igh64y7X3fi/yiPIGiuIze7riqfBD39aEg/Ox5LhWgYHTrib6PES6iwpHxjSWj P4fM4GYHt8bvjPTiiiVTMzUT73vffIWUV+fKms9v/u6qHt4rnIOeu0TFVVebi/xy nWHS3ITzGHPrrmBa3+2KilLgbRHMKjhT0GyLKpWkZWTjlbvM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPog5Uw8BkI/ScjIPFZA8mOAR0m5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvNzJhMDlhMjgtZTdiMS0z ZTkwLWI0MmQtYmJhYjMzZTU4MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx2mUKBINQp3o+Bsdx8L1zJKAXyzRiPiy3fFSXbNMdlAvX/AB2mSQHB gDkK/aohgVUvCGwZKpvHGp6wZTQe19zD0egWgwnB64UQIubXiBrBL2bkItuBW/T8 5eOf45AmQ4+cxl92oFLhbCFGjrd4aLhfbU240daYLxnkxdx+q+c6O1T/iO/y7JC8 4zvGySeMA7BzDpyUnGXPrZJ7ZHhUGqztMFmBT6eEovuvEHxcleWzTU2jbqKnpv+U ZJYGLi1jET+DkdRsSGX0F3nmnuzC4zoaYR+fPUojAPKLilFcrCCNENAjhuskYDyd 2BlD9Km05Wzd4elCRiEOAx+e5c0S5Ag= -----END CERTIFICATE-----Generated at Tue Oct 21 12:37:43 2025 by rpki-client