$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a87bfa30-1986-341c-9d26-d49d16142ab2.roa File: a87bfa30-1986-341c-9d26-d49d16142ab2.roa (raw, json) Hash identifier: EGphqlUGhphgTk+IHsw0HOYIKq4S7RgD/oa0td1sBUw= Subject key identifier: 1E:B1:4B:46:94:E7:8A:57:6F:49:D4:15:37:13:39:AE:8B:7E:00:DD Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B583C7F66010061BECE616500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a87bfa30-1986-341c-9d26-d49d16142ab2.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 64.114.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7f:66:01:00:61:be:ce:61:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=fc61fce4-dfe5-4588-ac48-8090099db1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:27:2a:43:63:f6:ae:00:64:d1:bd:f4:d3:37: 4c:de:ab:57:d6:a6:e3:ea:c6:64:17:43:fb:a0:4c: 6e:da:76:53:c3:41:b6:1c:65:35:84:aa:a5:b1:36: 5c:6f:4e:4a:7a:91:a5:5c:57:19:ba:25:92:94:21: f0:6c:e3:cb:ea:50:70:a9:71:04:22:68:a6:3e:4a: b5:f9:8b:4d:86:fe:29:c8:72:2e:60:9f:6b:95:61: 48:cf:85:71:38:10:85:1b:d4:20:40:19:a9:89:53: 5f:cd:2d:b8:73:05:32:77:ff:d6:c4:96:0b:e8:58: 5b:ba:fb:ab:cf:69:fa:18:88:76:f3:af:09:23:f0: 3d:f8:96:15:43:b8:e8:0f:c1:14:df:dc:f4:2c:21: 45:3e:3d:ae:ce:8b:6e:08:cc:d9:90:9e:ca:f9:26: 24:b9:1b:aa:bf:2a:48:49:0b:97:27:56:a7:f3:54: 15:65:28:06:a8:ad:0a:22:6b:5c:0d:07:11:a5:56: ed:09:28:61:20:5f:65:55:63:c5:ef:22:32:52:84: e0:10:97:d5:4d:6a:32:13:d9:5d:84:74:d5:e1:fd: cf:1a:29:12:0d:fa:bb:54:45:10:bd:75:7a:f4:ff: 71:fb:5a:84:84:db:60:be:10:06:f5:e3:d4:56:d7: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:4B:46:94:E7:8A:57:6F:49:D4:15:37:13:39:AE:8B:7E:00:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a87bfa30-1986-341c-9d26-d49d16142ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:03:70:2f:ec:b5:ba:20:1b:7e:3f:02:92:6b:8e:c6:3c:3f: 68:6e:12:47:1c:ee:b2:c6:5d:eb:70:ac:8e:74:36:69:f3:d0: f8:6b:40:0f:03:dd:d5:79:e0:29:3d:89:3f:79:54:01:03:16: 92:70:24:cf:f6:7b:40:8b:62:6b:9f:53:34:fa:a7:97:c7:5b: 44:9a:18:60:1a:a7:0b:03:a1:3f:fa:69:97:7d:5f:df:e4:a5: b3:3f:5e:03:b6:25:59:84:4a:8d:c1:95:08:56:d9:37:11:2e: 61:f6:3d:87:d1:58:a8:cc:02:28:86:2d:36:d7:01:3d:1f:2b: ee:81:ab:19:0b:97:1c:3d:50:2c:c4:7c:85:1b:5d:d4:93:ca: 3b:35:93:f7:bc:d3:24:08:27:a0:ed:db:fc:93:f2:5b:49:34: 3f:f5:33:85:d7:d8:84:e9:d2:d2:0e:20:25:3a:7b:31:b5:39: e7:0b:7a:e4:e0:c1:b0:72:e2:2f:29:f5:db:41:ff:2c:80:ee: 2d:67:ec:cf:30:63:83:b8:73:7a:9f:b5:e8:11:5d:80:7f:ce: cf:2c:19:5c:ca:3a:aa:81:88:0b:84:92:74:ec:b5:bf:c1:f7: 59:a2:1a:12:37:e2:c7:25:a7:97:f3:e2:d5:9f:be:e3:9d:52: c8:45:6d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPH9mAQBhvs5hZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmM2MWZjZTQtZGZlNS00NTg4LWFjNDgtODA5MDA5OWRiMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ycqQ2P2rgBk0b300zdM3qtX1qbj6sZkF0P7 oExu2nZTw0G2HGU1hKqlsTZcb05KepGlXFcZuiWSlCHwbOPL6lBwqXEEImimPkq1 +YtNhv4pyHIuYJ9rlWFIz4VxOBCFG9QgQBmpiVNfzS24cwUyd//WxJYL6Fhbuvur z2n6GIh2868JI/A9+JYVQ7joD8EU39z0LCFFPj2uzotuCMzZkJ7K+SYkuRuqvypI SQuXJ1an81QVZSgGqK0KImtcDQcRpVbtCShhIF9lVWPF7yIyUoTgEJfVTWoyE9ld hHTV4f3PGikSDfq7VEUQvXV69P9x+1qEhNtgvhAG9ePUVtcPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6xS0aU54pXb0nUFTcTOa6LfgDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTg3YmZhMzAtMTk4Ni0z NDFjLTlkMjYtZDQ5ZDE2MTQyYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0DcC/stbogG34/ApJrjsY8P2huEkcc7rLGXetwrI50Nmnz0PhrQA8D 3dV54Ck9iT95VAEDFpJwJM/2e0CLYmufUzT6p5fHW0SaGGAapwsDoT/6aZd9X9/k pbM/XgO2JVmESo3BlQhW2TcRLmH2PYfRWKjMAiiGLTbXAT0fK+6BqxkLlxw9UCzE fIUbXdSTyjs1k/e80yQIJ6Dt2/yT8ltJND/1M4XX2ITp0tIOICU6ezG1OecLeuTg wbBy4i8p9dtB/yyA7i1n7M8wY4O4c3qftegRXYB/zs8sGVzKOqqBiAuEknTstb/B 91miGhI34sclp5fz4tWfvuOdUshFbVk= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:30 2025 by rpki-client