$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4795f460-2988-3240-8750-10dbf25f3c5a.roa File: 4795f460-2988-3240-8750-10dbf25f3c5a.roa (raw, json) Hash identifier: dxME+u1P/Gbk7W6Hf7KRHxX55Tzifeda9m1aoekxHcQ= Subject key identifier: 20:E3:34:5B:FB:3B:1B:66:6C:90:42:D2:48:91:3B:F0:D0:43:93:21 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584B821CD4F42DC8760F8003B700 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4795f460-2988-3240-8750-10dbf25f3c5a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 398465 IP address blocks: 64.40.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d4:f4:2d:c8:76:0f:80:03:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=00f47a72-fe32-461a-82d4-2f9328d9ed1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:98:8b:7d:f3:77:40:2d:d8:e0:2f:a7:15: 2d:f0:3c:d2:6d:aa:b0:14:23:75:38:13:c9:30:6f: 8c:40:5a:29:e7:94:87:e7:30:7f:e4:01:f0:67:92: 9f:38:1c:43:70:75:65:66:33:17:37:c6:5c:eb:a1: ca:55:ea:8e:9a:5a:01:ad:0a:27:94:f6:ab:3d:26: 55:20:2c:43:7f:0d:2c:9f:b3:2b:16:8f:a0:78:12: ef:f7:70:a0:5e:4b:19:91:63:63:1c:63:5a:3e:e0: 5d:54:9e:cd:0d:0f:cc:97:7a:2b:78:c2:3d:ed:88: ca:cf:52:ea:02:6b:10:ae:cf:73:42:36:18:5c:6e: 7b:33:e3:10:85:6b:17:1c:2a:55:95:75:15:25:54: fb:25:ae:b0:1c:9e:1e:36:b6:6b:7c:73:d9:61:3c: 7d:bb:2f:fc:b1:64:19:96:78:80:43:4a:91:07:fe: 4f:40:11:67:35:22:fa:60:e5:92:2e:f2:59:b6:72: 93:4e:35:f5:6a:2e:2e:76:6e:fd:7a:56:bd:1a:24: 96:45:54:66:10:ad:69:a8:10:51:61:76:c3:06:5a: 34:0e:32:10:b8:73:42:5d:eb:9e:0c:d5:b1:aa:0c: d7:d0:31:13:2d:b1:28:78:9a:73:df:5d:55:90:db: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:34:5B:FB:3B:1B:66:6C:90:42:D2:48:91:3B:F0:D0:43:93:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/4795f460-2988-3240-8750-10dbf25f3c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:64:5e:3a:fd:a7:3b:c0:68:9d:6b:9e:7d:c9:f9:da:f5:e2: c6:aa:ef:c1:a7:ff:58:e9:f4:c3:dc:b5:46:8d:41:d3:28:c3: b9:32:08:70:64:f9:4b:b1:8c:3d:bd:e3:9a:1b:5c:7f:85:d8: 22:6d:ed:f4:b9:23:6c:56:17:82:54:dd:7d:e4:3c:52:c1:2f: 83:3d:19:24:60:24:96:6e:72:37:5c:04:61:10:49:73:a4:17: ee:89:d4:41:4b:58:f4:41:4f:18:69:fe:c8:28:7d:b0:9f:74: f1:20:53:9e:9b:66:87:cd:9b:33:f0:45:09:f3:9d:27:fd:2a: 9e:67:9b:9a:f2:87:43:c8:c0:ab:4a:d6:35:6b:61:87:c4:1b: 94:20:59:1d:96:a7:54:5a:12:97:1a:87:fe:8f:a3:41:26:8f: 5d:dd:be:44:1e:9d:83:4c:db:71:7a:ca:ff:bc:11:df:26:b2: 5f:c0:3d:b0:41:0c:58:9e:fd:27:a5:4a:ec:1e:cc:e5:cd:20: 53:44:7b:34:8b:ba:79:95:53:09:79:f3:9a:f2:63:79:88:a2: 5e:ce:68:4f:cf:49:43:a1:68:ac:65:67:be:6b:64:41:9d:51: bb:47:c2:5c:48:68:5b:7c:64:48:da:19:15:c2:4d:49:83:98: cb:89:24:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNT0Lch2D4ADtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MDBmNDdhNzItZmUzMi00NjFhLTgyZDQtMmY5MzI4ZDllZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QqYi33zd0At2OAvpxUt8DzSbaqwFCN1OBPJ MG+MQFop55SH5zB/5AHwZ5KfOBxDcHVlZjMXN8Zc66HKVeqOmloBrQonlParPSZV ICxDfw0sn7MrFo+geBLv93CgXksZkWNjHGNaPuBdVJ7NDQ/Ml3oreMI97YjKz1Lq AmsQrs9zQjYYXG57M+MQhWsXHCpVlXUVJVT7Ja6wHJ4eNrZrfHPZYTx9uy/8sWQZ lniAQ0qRB/5PQBFnNSL6YOWSLvJZtnKTTjX1ai4udm79ela9GiSWRVRmEK1pqBBR YXbDBlo0DjIQuHNCXeueDNWxqgzX0DETLbEoeJpz311VkNux4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDjNFv7OxtmbJBC0kiRO/DQQ5MhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNDc5NWY0NjAtMjk4OC0z MjQwLTg3NTAtMTBkYmYyNWYzYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpkXjr9pzvAaJ1rnn3J+dr14saq78Gn/1jp9MPctUaNQdMow7kyCHBk +UuxjD2945obXH+F2CJt7fS5I2xWF4JU3X3kPFLBL4M9GSRgJJZucjdcBGEQSXOk F+6J1EFLWPRBTxhp/sgofbCfdPEgU56bZofNmzPwRQnznSf9Kp5nm5ryh0PIwKtK 1jVrYYfEG5QgWR2Wp1RaEpcah/6Po0Emj13dvkQenYNM23F6yv+8Ed8msl/APbBB DFie/SelSuwezOXNIFNEezSLunmVUwl585ryY3mIol7OaE/PSUOhaKxlZ75rZEGd UbtHwlxIaFt8ZEjaGRXCTUmDmMuJJPk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:50:03 2025 by rpki-client