$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/87243b99-5c76-34c2-98a2-b2317462cb4c.roa File: 87243b99-5c76-34c2-98a2-b2317462cb4c.roa (raw, json) Hash identifier: 2dHoszWjC00xZsyuorioa2ao6Qfhw2e3g27IIAtR7xs= Subject key identifier: E8:1B:E9:7A:4A:32:42:F1:FE:0F:06:18:F2:D9:35:CF:AD:22:AB:99 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584B7603F4D7468D8DE7BEAB7400 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/87243b99-5c76-34c2-98a2-b2317462cb4c.roa Signing time: Thu 09 Oct 2025 05:01:03 +0000 ROA not before: Thu 09 Oct 2025 05:01:03 +0000 ROA not after: Wed 07 Jan 2026 06:01:03 +0000 asID: 22079 IP address blocks: 64.186.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:03:f4:d7:46:8d:8d:e7:be:ab:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 9 05:01:03 2025 GMT Not After : Jan 7 06:01:03 2026 GMT Subject: CN=fcebf855-5045-4e46-bee8-bec57aa321c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f6:22:2b:e6:59:05:f7:71:ec:9f:48:61:5f: 55:7b:a7:3d:d1:ea:f9:9b:56:01:28:a1:46:e4:1d: 0f:34:40:c4:cb:77:d3:b9:db:bb:04:b7:7e:67:31: 27:f8:0b:d7:f2:51:91:cd:16:00:e6:1a:1a:76:2f: 72:3f:b5:bd:21:ba:93:7d:1d:5a:78:16:c3:b6:27: c1:4a:c8:91:49:38:83:ad:6b:36:7a:12:a1:66:5e: db:31:91:03:df:9b:44:13:97:86:6b:a9:5e:d9:5e: b9:a6:ce:29:d5:ac:a4:88:85:13:e1:96:25:80:88: 0e:13:5f:6c:89:30:37:e5:80:f4:f2:ab:48:3c:8b: 3d:16:45:dc:d4:fd:e7:65:bc:ce:5d:55:eb:a9:c2: 56:f2:76:b4:88:f8:5d:38:d4:ed:6c:13:f2:e7:e3: 43:fd:da:0a:90:be:f9:cc:af:65:ce:27:8c:08:d5: 63:ec:20:3d:1a:51:46:13:77:2a:33:ce:28:6b:d4: 19:1e:87:ea:d8:a6:26:df:30:dd:b0:59:b5:5f:12: f9:68:41:3b:5f:72:f8:48:98:43:36:a3:d6:5a:7a: f8:52:8b:a2:ab:7f:7e:f2:10:1e:4d:69:c9:96:a8: 86:67:d9:e8:d2:7f:32:d8:61:7a:bb:1d:15:15:6a: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1B:E9:7A:4A:32:42:F1:FE:0F:06:18:F2:D9:35:CF:AD:22:AB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/87243b99-5c76-34c2-98a2-b2317462cb4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.186.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a1:88:f7:87:1d:b8:f9:76:84:cd:13:b0:c2:92:c9:75:86: bc:50:ca:1f:bd:83:f5:aa:ee:da:cc:58:13:fb:a2:93:d6:88: 7d:ec:f4:6b:6e:7f:fb:9b:b0:d9:65:49:ca:2f:f0:e5:90:b3: 66:b5:e0:ce:5d:cc:56:5a:cb:47:61:21:f1:57:a2:1e:2e:57: 22:a8:ee:24:10:57:04:fd:ef:a2:c1:87:71:09:77:2c:cd:62: 3b:ba:83:e2:95:fc:cd:82:a4:1e:11:16:e3:6e:28:fa:94:09: 3e:a6:15:f1:a8:bb:74:84:29:6c:fd:73:6c:59:20:98:5c:f7: 23:c2:48:4b:b6:4b:bc:13:9f:19:a1:87:e8:02:08:cc:4c:25: 28:1a:f3:e8:93:14:9f:d8:5e:07:23:47:bb:e2:2c:a7:a9:54: 36:14:f0:6d:20:b3:f9:58:f0:48:02:34:99:6c:f0:9e:c4:8d: 5f:7d:76:77:65:00:57:bc:94:f4:14:7e:8d:83:06:09:f7:04: 62:6e:ed:66:3d:9e:d6:43:0d:45:72:dd:11:26:ba:46:5a:7a: 7e:0f:6e:9c:15:f3:02:b9:e9:58:fa:74:e6:f9:33:08:68:f2: a0:31:cd:7b:22:2c:0f:04:4c:ba:0b:d2:4e:b9:44:25:4b:1b: 16:97:c7:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2A/TXRo2N576rdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI1MTAwOTA1MDEwM1oXDTI2MDEwNzA2MDEwM1owLzEtMCsGA1UEAxMk ZmNlYmY4NTUtNTA0NS00ZTQ2LWJlZTgtYmVjNTdhYTMyMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/YiK+ZZBfdx7J9IYV9Ve6c90er5m1YBKKFG 5B0PNEDEy3fTudu7BLd+ZzEn+AvX8lGRzRYA5hoadi9yP7W9IbqTfR1aeBbDtifB SsiRSTiDrWs2ehKhZl7bMZED35tEE5eGa6le2V65ps4p1aykiIUT4ZYlgIgOE19s iTA35YD08qtIPIs9FkXc1P3nZbzOXVXrqcJW8na0iPhdONTtbBPy5+ND/doKkL75 zK9lzieMCNVj7CA9GlFGE3cqM84oa9QZHofq2KYm3zDdsFm1XxL5aEE7X3L4SJhD NqPWWnr4Uouiq39+8hAeTWnJlqiGZ9no0n8y2GF6ux0VFWolnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgb6XpKMkLx/g8GGPLZNc+tIquZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvODcyNDNiOTktNWM3Ni0z NGMyLTk4YTItYjIzMTc0NjJjYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImhiPeHHbj5doTNE7DCksl1hrxQyh+9g/Wq7trMWBP7opPWiH3s9Gtu f/ubsNllScov8OWQs2a14M5dzFZay0dhIfFXoh4uVyKo7iQQVwT976LBh3EJdyzN Yju6g+KV/M2CpB4RFuNuKPqUCT6mFfGou3SEKWz9c2xZIJhc9yPCSEu2S7wTnxmh h+gCCMxMJSga8+iTFJ/YXgcjR7viLKepVDYU8G0gs/lY8EgCNJls8J7EjV99dndl AFe8lPQUfo2DBgn3BGJu7WY9ntZDDUVy3REmukZaen4PbpwV8wK56Vj6dOb5Mwho 8qAxzXsiLA8ETLoL0k65RCVLGxaXx90= -----END CERTIFICATE-----Generated at Tue Oct 21 12:48:23 2025 by rpki-client