$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa File: 7942817f-a176-37e5-8911-6f29c62a1537.roa (raw, json) Hash identifier: 06zbb4YK4KAuK3wt5lQvlSviW2H+HyGPC1u4wP12VhM= Subject key identifier: 04:02:D4:92:B6:43:21:7C:28:5B:FD:5D:5B:F9:39:24:FC:C9:41:07 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584B0A1165D4FDBB273D2C85EF80 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 393885 IP address blocks: 64.71.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:65:d4:fd:bb:27:3d:2c:85:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=bcb80eac-a2d5-4384-9a3d-7964ed0a9ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:22:b0:9d:5f:c3:d0:5d:47:ee:63:bd:26: a5:46:a2:06:59:06:ae:eb:b3:fd:b0:40:4b:70:8b: 04:5b:18:38:a0:07:0b:f6:5e:16:2f:99:4b:f4:c0: ca:a4:05:bc:8c:b5:3d:17:cb:05:9c:af:09:b4:a5: 10:78:40:74:d7:b4:c4:31:e5:7b:ed:b3:87:bc:84: 14:f6:0f:93:0f:34:d1:5d:b9:53:f6:f3:19:26:3b: 1b:1f:42:6d:7a:2e:43:88:e3:ba:f9:0e:23:28:a4: 5d:7f:10:13:16:d9:52:c8:02:be:d6:13:88:a8:0b: fc:18:70:5b:9f:e3:d4:cb:18:6f:ff:5c:5a:42:29: ed:52:eb:85:d7:cb:06:7c:51:81:25:c3:e9:d3:99: ab:44:99:51:41:10:7e:a4:79:52:e1:a7:45:9c:1d: 59:05:dc:0b:75:85:e2:68:36:14:f8:bb:d4:43:b8: 09:45:9d:9c:dc:d7:47:e3:7a:3d:14:b7:8a:1c:3d: 4b:08:6b:48:f7:ae:ab:9e:75:d2:30:27:33:7a:34: 25:25:30:d2:3d:a2:4d:d9:78:c7:5e:99:b2:64:73: 06:a6:1c:16:73:28:27:b3:69:b0:21:6a:f3:60:48: be:be:cf:54:1c:5c:cf:a5:d6:eb:f8:f3:8c:5b:0a: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:D4:92:B6:43:21:7C:28:5B:FD:5D:5B:F9:39:24:FC:C9:41:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:db:e9:da:ca:b2:32:72:df:09:56:79:5d:2a:03:c5:af:b8: 02:ad:b6:9e:6b:ce:5a:b8:10:21:c0:6a:69:84:11:b6:97:29: 26:92:6e:a0:f7:59:39:d1:fd:5a:b5:01:d8:51:29:5b:9a:6f: 9f:a4:c3:53:05:83:93:a4:19:0e:53:c6:22:07:26:e0:ac:d1: a5:92:70:13:50:3f:2a:6c:04:8a:6c:98:43:79:7e:3d:04:82: f2:37:6f:0d:39:52:da:04:c8:85:b2:2d:e4:84:24:8b:59:42: 4f:1a:35:76:57:48:64:df:2a:28:04:26:f4:e4:9c:8c:ca:77: 36:c3:05:5b:cd:f4:eb:16:04:3e:c4:e0:2f:ab:13:db:55:d2: e7:46:b0:90:2f:38:9e:b0:b6:71:1b:50:b8:43:eb:13:a7:c8: 3d:d7:95:4e:2c:cc:ec:28:48:9f:62:3a:5c:70:d5:fe:cc:3d: 9f:b0:2b:a8:cb:25:27:d3:8b:f8:b0:b5:92:94:98:87:4f:c4: 25:0a:8d:7a:5e:53:0c:2d:a2:3c:ee:07:dc:f4:23:6f:ed:d1: 0b:cb:c0:f1:d6:ac:8b:96:ca:15:51:5f:4e:0e:74:9e:b6:73: 0c:79:f4:79:c1:59:cb:46:de:06:6d:4c:4c:35:67:36:c9:42: 5c:66:47:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWXU/bsnPSyF74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YmNiODBlYWMtYTJkNS00Mzg0LTlhM2QtNzk2NGVkMGE5Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGMisJ1fw9BdR+5jvSalRqIGWQau67P9sEBL cIsEWxg4oAcL9l4WL5lL9MDKpAW8jLU9F8sFnK8JtKUQeEB017TEMeV77bOHvIQU 9g+TDzTRXblT9vMZJjsbH0Jtei5DiOO6+Q4jKKRdfxATFtlSyAK+1hOIqAv8GHBb n+PUyxhv/1xaQintUuuF18sGfFGBJcPp05mrRJlRQRB+pHlS4adFnB1ZBdwLdYXi aDYU+LvUQ7gJRZ2c3NdH43o9FLeKHD1LCGtI966rnnXSMCczejQlJTDSPaJN2XjH XpmyZHMGphwWcygns2mwIWrzYEi+vs9UHFzPpdbr+POMWwr42wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQC1JK2QyF8KFv9XVv5OST8yUEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvNzk0MjgxN2YtYTE3Ni0z N2U1LTg5MTEtNmYyOWM2MmExNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInb6drKsjJy3wlWeV0qA8WvuAKttp5rzlq4ECHAammEEbaXKSaSbqD3 WTnR/Vq1AdhRKVuab5+kw1MFg5OkGQ5TxiIHJuCs0aWScBNQPypsBIpsmEN5fj0E gvI3bw05UtoEyIWyLeSEJItZQk8aNXZXSGTfKigEJvTknIzKdzbDBVvN9OsWBD7E 4C+rE9tV0udGsJAvOJ6wtnEbULhD6xOnyD3XlU4szOwoSJ9iOlxw1f7MPZ+wK6jL JSfTi/iwtZKUmIdPxCUKjXpeUwwtojzuB9z0I2/t0QvLwPHWrIuWyhVRX04OdJ62 cwx59HnBWctG3gZtTEw1ZzbJQlxmR54= -----END CERTIFICATE-----Generated at Tue Oct 21 06:51:37 2025 by rpki-client