$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/86b85971-9067-3bf6-a919-91da36766beb.roa File: 86b85971-9067-3bf6-a919-91da36766beb.roa (raw, json) Hash identifier: dhZCQiDxIMN6vm2WlOlno8s4oO1QYucGI/1aIpq3+rs= Subject key identifier: 5E:63:A5:FF:51:F8:DE:A0:4C:3F:D1:8F:75:53:77:34:42:6B:C5:64 Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Certificate serial: 010D0C9F4328584B7F521339CC8C213609C23000 Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/86b85971-9067-3bf6-a919-91da36766beb.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397041 IP address blocks: 64.112.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:13:39:cc:8c:21:36:09:c2:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d71fc278-3000-4a80-b7cc-2e88ef50a975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:30:93:85:0e:aa:92:59:e5:c4:45:28:97: cb:53:19:01:bf:c1:73:f8:2a:48:c4:0e:a8:3e:36: 6b:4f:2c:cf:b3:28:1a:16:83:d5:0b:40:83:0d:0d: 4c:7a:0d:d7:be:98:9a:7c:d7:87:b1:8a:d4:52:69: 8e:48:ad:51:fc:f1:b3:0f:65:97:e0:ac:a4:cd:31: fd:17:a2:a5:01:f0:3e:9c:af:e7:82:d4:4d:06:d9: 4b:82:ce:f7:47:7f:d3:5d:37:e3:71:8b:17:c2:49: 82:99:42:8e:8b:13:7a:92:2e:e5:5b:b2:b5:a3:33: 0e:57:20:be:7c:0c:61:a4:de:e1:69:d3:26:87:a4: 4c:dc:bf:55:50:38:f7:e7:cc:ed:bb:33:a4:62:97: 4a:85:5c:03:41:aa:bd:5e:d5:be:77:05:90:0f:39: b9:ff:da:a3:d9:e2:b4:83:10:df:7b:5d:d0:43:54: ce:30:25:14:48:2f:c7:f8:37:26:8c:4b:7b:f7:47: a8:fe:30:93:25:7e:3c:67:00:a5:7a:5b:0a:fa:c9: f9:79:0a:b8:e9:a9:a8:fe:9c:99:5b:78:40:41:3a: 34:61:1c:af:45:ab:c8:b3:35:e2:a6:0a:bf:dd:53: b2:fb:0d:a5:95:75:d6:47:00:cc:f2:e9:95:2a:4e: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:63:A5:FF:51:F8:DE:A0:4C:3F:D1:8F:75:53:77:34:42:6B:C5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/86b85971-9067-3bf6-a919-91da36766beb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl X509v3 Authority Key Identifier: keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer sbgp-ipAddrBlock: critical IPv4: 64.112.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:47:11:c2:7f:f4:e6:57:42:dc:d3:e9:bf:28:76:cb:82:bb: 65:67:9b:78:97:ee:04:fe:1f:b4:74:0a:b2:ad:cc:7e:a7:55: 0c:1f:7e:d5:fb:ae:f8:11:c3:3b:9b:52:dc:8f:6f:6f:e7:5a: ca:50:e7:ef:a3:27:e9:4b:60:7a:a2:fc:2d:64:3f:9a:33:c4: d3:54:7e:93:3c:7e:26:29:f3:ab:d7:20:ef:6c:b8:fe:0d:1a: 61:fc:00:c6:0a:84:ba:6a:40:00:98:a0:79:ae:13:ee:92:52: f2:4f:f7:9e:66:0e:69:dd:74:8e:50:d2:6c:24:8b:c3:1b:b7: 9e:24:59:1d:60:45:04:59:b9:e4:33:ef:37:e6:28:49:04:4e: 11:29:3e:35:fe:08:d7:10:36:42:71:7e:31:59:54:e0:15:99: d1:5d:f0:57:f8:e9:b1:68:03:5d:01:c9:34:86:f4:b1:e4:bd: b4:f5:88:d3:f6:d1:5e:b9:56:4c:ee:d6:45:34:8b:50:48:53: 7c:fe:f7:46:81:8c:f6:09:44:d5:5e:08:73:4d:95:b6:50:66: ee:69:e8:bd:51:ba:50:04:d4:71:e2:bb:91:3c:c8:90:9b:b9: 93:3f:fe:6f:91:42:47:10:3c:1e:98:83:88:35:d0:b5:34:39: fb:70:84:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhM5zIwhNgnCMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm M2JmMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDcxZmMyNzgtMzAwMC00YTgwLWI3Y2MtMmU4OGVmNTBhOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOgwk4UOqpJZ5cRFKJfLUxkBv8Fz+CpIxA6o PjZrTyzPsygaFoPVC0CDDQ1Meg3XvpiafNeHsYrUUmmOSK1R/PGzD2WX4KykzTH9 F6KlAfA+nK/ngtRNBtlLgs73R3/TXTfjcYsXwkmCmUKOixN6ki7lW7K1ozMOVyC+ fAxhpN7hadMmh6RM3L9VUDj358ztuzOkYpdKhVwDQaq9XtW+dwWQDzm5/9qj2eK0 gxDfe13QQ1TOMCUUSC/H+DcmjEt790eo/jCTJX48ZwClelsK+sn5eQq46amo/pyZ W3hAQTo0YRyvRavIszXipgq/3VOy+w2llXXWRwDM8umVKk5lKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5jpf9R+N6gTD/Rj3VTdzRCa8VkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3 OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvODZiODU5NzEtOTA2Ny0z YmY2LWE5MTktOTFkYTM2NzY2YmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl NDQwY2YzYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtHEcJ/9OZXQtzT6b8odsuCu2Vnm3iX7gT+H7R0CrKtzH6nVQwfftX7 rvgRwzubUtyPb2/nWspQ5++jJ+lLYHqi/C1kP5ozxNNUfpM8fiYp86vXIO9suP4N GmH8AMYKhLpqQACYoHmuE+6SUvJP955mDmnddI5Q0mwki8Mbt54kWR1gRQRZueQz 7zfmKEkEThEpPjX+CNcQNkJxfjFZVOAVmdFd8Ff46bFoA10ByTSG9LHkvbT1iNP2 0V65Vkzu1kU0i1BIU3z+90aBjPYJRNVeCHNNlbZQZu5p6L1RulAE1HHiu5E8yJCb uZM//m+RQkcQPB6Yg4g10LU0OftwhAo= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:08 2025 by rpki-client