$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa File: 7bac194a-18e0-36b4-83d1-6245c751326f.roa (raw, json) Hash identifier: RA5Vg23MC9K7cuwSeQfOVt1IM2UAaa0gYxDYsZrkuSo= Subject key identifier: 92:01:02:55:5D:04:59:6D:37:F7:D0:55:C7:29:16:36:1F:A3:58:0B Certificate issuer: /CN=b915136a-e2d3-4f27-83f6-3ee5af191f60 Certificate serial: 010D0C9F4328584B3AEC4147FCA4DA4BE808D3AC Authority key identifier: B9:E0:D4:6D:67:07:08:51:50:97:DC:D8:91:70:DF:D0:46:7B:64:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 400470 IP address blocks: 64.90.214.0/24 maxlen: 24 216.25.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/b915136a-e2d3-4f27-83f6-3ee5af191f60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/b915136a-e2d3-4f27-83f6-3ee5af191f60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:41:47:fc:a4:da:4b:e8:08:d3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b915136a-e2d3-4f27-83f6-3ee5af191f60 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=bc87a580-80c5-4288-8989-af90846bcc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e8:9f:fd:13:ee:95:bc:47:97:f1:d0:87:2d: 51:1d:da:67:4d:11:15:70:da:ac:b9:65:64:bb:5a: ec:6a:42:17:99:25:10:4f:99:23:c1:07:8b:3e:95: 2b:4d:5e:11:f6:ee:e5:9f:ce:6f:30:2f:65:9e:3c: d0:9d:3a:be:1f:01:40:3d:cf:f4:4c:8f:57:60:1e: b9:a0:b5:53:9c:53:15:70:19:99:7c:59:b2:75:e4: 70:88:7f:b7:4b:dd:02:0e:b4:53:d0:ac:2f:f0:1e: ca:c9:96:bf:ab:67:d2:29:ae:da:72:52:97:f0:10: 9d:c0:c9:44:08:77:6f:4b:ea:69:48:6e:5f:9f:fe: 44:64:79:b0:ff:42:80:4f:14:e1:72:69:81:69:3b: 1b:c5:54:10:71:89:7d:58:cf:18:9e:cb:4f:15:a0: d0:54:9f:bb:3d:f8:7b:0c:d1:0c:18:a1:72:f3:be: 98:21:21:44:6c:54:b6:43:a4:42:6b:5f:9e:db:75: 24:2c:1e:58:c3:0c:c5:e9:bc:bb:aa:8a:f0:40:af: cd:f8:2e:ce:f2:ba:30:aa:82:a4:6c:20:92:f8:0a: d9:ec:ef:f6:e0:78:2e:b5:87:60:28:cc:2a:ec:fb: 51:9f:1b:7d:05:24:d1:a4:5a:ab:bf:0b:25:1d:c5: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:01:02:55:5D:04:59:6D:37:F7:D0:55:C7:29:16:36:1F:A3:58:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/b915136a-e2d3-4f27-83f6-3ee5af191f60.crl X509v3 Authority Key Identifier: keyid:B9:E0:D4:6D:67:07:08:51:50:97:DC:D8:91:70:DF:D0:46:7B:64:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer sbgp-ipAddrBlock: critical IPv4: 64.90.214.0/24 216.25.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e1:5e:86:52:e0:b4:24:29:81:8d:e5:e2:87:2f:1d:f8:9d: 6e:ec:52:eb:00:7b:41:27:ef:d1:c5:b2:c8:76:4f:37:7f:10: d0:f0:8d:aa:37:f9:7c:67:4d:71:b9:e5:86:61:8f:8c:b4:6e: 50:dc:dd:5d:a6:86:e7:7c:30:aa:ee:d4:66:5d:ce:7a:81:3f: 3e:1f:81:dd:fb:05:40:16:d3:52:42:3f:51:fe:42:34:ef:d9: 26:97:4f:ed:e2:72:04:e2:b6:d8:f8:dd:8b:2c:03:ac:a1:4b: 45:31:dc:9a:5d:a3:fb:0f:6f:21:c3:c5:7b:21:36:73:de:bb: bb:96:63:b0:06:13:94:05:df:fb:14:50:b7:e0:04:5e:98:ec: 93:e1:cb:8e:fe:c2:f1:6e:1d:0a:60:7b:94:24:85:0e:2a:1c: 84:c9:0a:8e:d5:bd:1e:1e:20:b9:37:0c:6d:23:b0:72:9e:ac: d7:4d:84:74:9e:62:e4:ad:03:4c:21:40:bd:aa:64:ee:11:58: 80:01:a3:56:19:79:64:d8:82:aa:55:8c:11:05:97:47:47:d2: 93:c3:08:f2:ad:bd:98:90:03:cb:ff:a8:7f:f5:7c:31:0f:52: d5:6b:dd:65:39:38:51:24:c6:cf:90:05:34:ef:9b:18:8c:37: 4d:45:ec:f3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs67EFH/KTaS+gI06wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkxNTEzNmEtZTJkMy00ZjI3LTgzZjYtM2VlNWFmMTkx ZjYwMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk YmM4N2E1ODAtODBjNS00Mjg4LTg5ODktYWY5MDg0NmJjYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuif/RPulbxHl/HQhy1RHdpnTREVcNqsuWVk u1rsakIXmSUQT5kjwQeLPpUrTV4R9u7ln85vMC9lnjzQnTq+HwFAPc/0TI9XYB65 oLVTnFMVcBmZfFmydeRwiH+3S90CDrRT0Kwv8B7KyZa/q2fSKa7aclKX8BCdwMlE CHdvS+ppSG5fn/5EZHmw/0KATxThcmmBaTsbxVQQcYl9WM8YnstPFaDQVJ+7Pfh7 DNEMGKFy876YISFEbFS2Q6RCa1+e23UkLB5YwwzF6by7qorwQK/N+C7O8rowqoKk bCCS+ArZ7O/24HgutYdgKMwq7PtRnxt9BSTRpFqrvwslHcWWQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJIBAlVdBFltN/fQVccpFjYfo1gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTE1 MTM2YS1lMmQzLTRmMjctODNmNi0zZWU1YWYxOTFmNjAvN2JhYzE5NGEtMThlMC0z NmI0LTgzZDEtNjI0NWM3NTEzMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkxNTEzNmEtZTJkMy00ZjI3LTgz ZjYtM2VlNWFmMTkxZjYwL2I5MTUxMzZhLWUyZDMtNGYyNy04M2Y2LTNlZTVhZjE5 MWY2MC5jcmwwHwYDVR0jBBgwFoAUueDUbWcHCFFQl9zYkXDf0EZ7ZMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTE1MTM2YS1lMmQzLTRmMjctODNmNi0zZWU1 YWYxOTFmNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQFrWAwQA 2Bm7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD3hXoZS4LQkKYGN5eKHLx34nW7sUusAe0En79HFssh2Tzd/ ENDwjao3+XxnTXG55YZhj4y0blDc3V2mhud8MKru1GZdznqBPz4fgd37BUAW01JC P1H+QjTv2SaXT+3icgTittj43YssA6yhS0Ux3Jpdo/sPbyHDxXshNnPeu7uWY7AG E5QF3/sUULfgBF6Y7JPhy47+wvFuHQpge5QkhQ4qHITJCo7VvR4eILk3DG0jsHKe rNdNhHSeYuStA0whQL2qZO4RWIABo1YZeWTYgqpVjBEFl0dH0pPDCPKtvZiQA8v/ qH/1fDEPUtVr3WU5OFEkxs+QBTTvmxiMN01F7PM= -----END CERTIFICATE-----Generated at Wed Oct 22 00:18:38 2025 by rpki-client