$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/8cd9efdf-bd82-32be-b209-7bc548067504.roa File: 8cd9efdf-bd82-32be-b209-7bc548067504.roa (raw, json) Hash identifier: xF8ni6jsc2p+r4YwrZPm1BqrGUIDtGnQpukVO3auPMQ= Subject key identifier: D2:F7:D2:D7:47:6B:B1:62:FE:9D:31:16:10:42:4F:54:74:A2:B7:8D Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584B75F98B45D1BF5F1C8DFD9CC0 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/8cd9efdf-bd82-32be-b209-7bc548067504.roa Signing time: Thu 09 Oct 2025 04:40:05 +0000 ROA not before: Thu 09 Oct 2025 04:40:05 +0000 ROA not after: Wed 07 Jan 2026 05:40:05 +0000 asID: 22079 IP address blocks: 64.136.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:f9:8b:45:d1:bf:5f:1c:8d:fd:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 9 04:40:05 2025 GMT Not After : Jan 7 05:40:05 2026 GMT Subject: CN=06f41c39-3235-4ec2-a575-379efcb07f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:50:5d:a9:08:81:7b:00:75:b4:65:42:37: dd:82:24:e0:dd:4b:0b:8d:dc:08:bc:f5:e4:fb:10: 82:49:df:b6:db:d5:0e:62:23:d8:6f:f1:81:46:43: 75:4a:ed:48:be:33:a4:66:6d:a2:fa:17:93:be:29: 38:1a:e6:71:08:ca:97:7f:ec:8e:2a:50:c6:62:73: f7:c7:a1:e0:13:8d:5b:bf:07:42:fb:c4:1a:df:11: 13:a6:3a:d6:ac:5e:01:dc:cc:c7:75:21:b5:26:7e: 1b:4e:a6:c2:57:d2:98:b8:00:67:b8:a4:4e:1a:84: 00:97:94:5e:1c:72:e5:c9:9e:73:53:61:fc:0e:56: 8d:c1:24:e3:55:d3:9a:5f:00:a6:8e:43:1a:8f:23: 45:14:55:3b:5b:6e:63:7c:65:d4:87:62:bb:66:5a: 9b:0e:c4:4a:99:0a:88:e9:4f:4a:10:ed:57:42:11: 1b:4c:fe:94:c4:43:26:13:5a:0f:c3:26:9c:c4:6f: 62:fd:54:c7:a7:d2:c6:7c:21:0c:a0:ed:70:33:0e: e8:b4:5d:8f:6c:e5:eb:6f:8f:5b:24:b0:17:b6:f0: 57:a2:5f:c1:82:78:2f:0b:14:f8:63:c1:55:16:fa: b2:a2:f9:35:95:c8:ec:fd:0a:cb:c6:7f:70:ce:e5: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:D2:D7:47:6B:B1:62:FE:9D:31:16:10:42:4F:54:74:A2:B7:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/8cd9efdf-bd82-32be-b209-7bc548067504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.136.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:25:12:0e:4b:7e:2b:95:b4:74:a1:28:5b:74:6d:37:53:19: 05:12:4b:75:9f:11:13:40:fe:4e:73:c6:9c:24:3f:85:29:df: c7:a4:39:8c:97:3c:bd:9d:8f:58:57:1a:c1:a5:55:e2:0b:f3: f9:63:b1:63:ef:1d:23:fe:93:7c:e6:16:d4:85:56:39:a8:bf: 7f:60:96:d4:13:7f:ee:67:cd:b1:c7:9b:f6:30:9c:b0:fa:d5: a3:c1:99:e0:e8:4e:ee:5d:60:44:e9:90:bc:30:e7:56:af:f3: ea:73:8a:33:dd:79:21:d7:7c:1f:fd:35:28:8f:4d:f0:ba:2d: 85:c5:cc:44:8f:11:69:33:4f:07:c1:b7:cb:a2:20:4a:50:10: 17:ca:52:19:b6:1a:06:ed:6d:b3:fc:90:e4:93:6d:bb:89:6a: 02:e7:1f:a1:4d:d4:0a:19:0c:2d:27:3f:e9:ed:3a:5e:22:f9: 94:5f:fb:e8:1e:16:ef:5b:d0:18:68:f1:8e:d2:1a:f5:b5:cc: f2:85:7b:71:6b:b2:33:79:5e:f1:8c:38:5c:0f:55:db:9c:a4: a4:bd:45:10:72:dd:0b:59:c1:6d:d6:ab:cb:e7:00:78:92:d4: bf:aa:5a:07:00:9e:b7:64:f9:35:76:50:b2:b5:26:e7:83:db: 9c:8d:7e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1+YtF0b9fHI39nMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI1MTAwOTA0NDAwNVoXDTI2MDEwNzA1NDAwNVowLzEtMCsGA1UEAxMk MDZmNDFjMzktMzIzNS00ZWMyLWE1NzUtMzc5ZWZjYjA3ZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0RQXakIgXsAdbRlQjfdgiTg3UsLjdwIvPXk +xCCSd+229UOYiPYb/GBRkN1Su1IvjOkZm2i+heTvik4GuZxCMqXf+yOKlDGYnP3 x6HgE41bvwdC+8Qa3xETpjrWrF4B3MzHdSG1Jn4bTqbCV9KYuABnuKROGoQAl5Re HHLlyZ5zU2H8DlaNwSTjVdOaXwCmjkMajyNFFFU7W25jfGXUh2K7ZlqbDsRKmQqI 6U9KEO1XQhEbTP6UxEMmE1oPwyacxG9i/VTHp9LGfCEMoO1wMw7otF2PbOXrb49b JLAXtvBXol/BgngvCxT4Y8FVFvqyovk1lcjs/QrLxn9wzuWU6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL30tdHa7Fi/p0xFhBCT1R0oreNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvOGNkOWVmZGYtYmQ4Mi0z MmJlLWIyMDktN2JjNTQ4MDY3NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQIhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIlEg5LfiuVtHShKFt0bTdTGQUSS3WfERNA/k5zxpwkP4Up38ekOYyX PL2dj1hXGsGlVeIL8/ljsWPvHSP+k3zmFtSFVjmov39gltQTf+5nzbHHm/YwnLD6 1aPBmeDoTu5dYETpkLww51av8+pzijPdeSHXfB/9NSiPTfC6LYXFzESPEWkzTwfB t8uiIEpQEBfKUhm2GgbtbbP8kOSTbbuJagLnH6FN1AoZDC0nP+ntOl4i+ZRf++ge Fu9b0Bho8Y7SGvW1zPKFe3FrsjN5XvGMOFwPVducpKS9RRBy3QtZwW3Wq8vnAHiS 1L+qWgcAnrdk+TV2ULK1JueD25yNfjU= -----END CERTIFICATE-----Generated at Tue Oct 21 12:41:10 2025 by rpki-client