$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa File: 2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa (raw, json) Hash identifier: gfD/NkZ28TbGSzaTAh9Zwfh4EZ6o+MDFJcDxvd9CnIQ= Subject key identifier: 90:6A:54:75:EF:08:5E:58:F9:20:68:C4:DE:5D:1D:55:ED:39:DA:EC Certificate issuer: /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Certificate serial: 010D0C9F4328584B8EACDFB98125EB1C98322C80 Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 32402 IP address blocks: 64.251.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:df:b9:81:25:eb:1c:98:32:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=378b4be3-ba2c-4d38-8e0c-0288f0490998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:1b:06:4b:2f:89:d0:6d:a4:80:f7:9f:8c: 95:61:5d:f7:55:04:35:cb:67:dd:56:7c:82:48:28: 56:90:c1:2b:10:6f:86:9c:5d:61:ba:d8:d3:b6:e5: a4:61:01:19:bb:19:34:2c:e6:d7:b9:22:41:8c:e2: d1:c8:6c:cd:16:9d:38:7d:62:97:d7:c0:c7:b9:85: 2b:f2:44:65:0e:52:1e:d0:d2:08:39:68:23:f2:7e: 7c:8a:5c:c1:0d:5d:f9:5b:38:77:25:71:d3:af:5f: 8a:9e:24:03:77:7a:16:9e:2e:2d:83:1b:46:dc:83: 56:8c:aa:f8:8b:a2:84:b7:73:26:81:34:b8:5c:fb: b1:3e:d7:52:f3:dd:0f:6b:15:0c:2d:ad:88:9f:96: 61:00:d9:47:03:8a:b0:81:04:de:ed:2f:49:06:c5: cf:bf:da:c7:62:0c:43:01:d5:10:be:ed:f0:1a:d3: 0d:0b:ac:9f:ac:69:4a:4f:80:86:2a:b8:31:31:71: 60:77:54:d7:91:83:20:06:03:e2:42:9f:58:62:5c: d8:3b:9d:de:e8:81:fc:77:ea:49:e8:b0:5b:10:54: d0:78:aa:aa:0c:62:41:db:5a:1a:46:04:b6:f8:31: 3f:a8:85:73:ce:de:50:b6:de:8a:25:be:2d:0c:a9: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6A:54:75:EF:08:5E:58:F9:20:68:C4:DE:5D:1D:55:ED:39:DA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl X509v3 Authority Key Identifier: keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer sbgp-ipAddrBlock: critical IPv4: 64.251.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6b:35:f1:67:ea:ed:fd:0e:e6:b1:8f:d1:10:35:18:43:0b: 41:14:16:1c:39:87:d5:0e:e6:b8:64:53:51:6a:46:88:b2:d1: 40:e5:4e:5d:82:4a:f7:ea:06:51:2e:92:de:a2:ab:20:d0:c7: ea:69:91:42:27:85:99:49:32:f9:ea:4f:80:40:24:4d:ac:ce: 4e:04:df:31:91:c5:ff:0b:a1:2f:69:db:e5:76:16:d6:f8:1a: 04:f8:6c:04:ce:cf:0c:22:5e:9b:eb:04:f2:e3:79:25:50:38: 46:bc:fd:f4:98:bc:90:f2:a4:d8:b4:59:e0:a0:fd:8a:3b:ae: 73:81:1d:6b:0a:39:e9:e6:99:82:21:06:e0:8b:06:ea:b6:43: 86:a5:5d:e0:15:a5:09:2d:55:de:1a:e5:4b:d4:37:fc:0c:80: 56:56:46:6c:2d:98:a4:5b:3a:5f:ad:27:d8:04:e9:d6:34:2f: 16:35:b9:90:81:9d:b4:97:4c:3f:5e:73:42:65:e9:4d:10:ca: 81:b7:b0:ca:91:bc:a2:7c:22:99:6b:36:96:bb:4e:46:df:49: f9:ad:65:b3:e2:f7:c3:76:34:34:5e:83:5f:e6:97:36:ff:c3: d2:45:34:a2:13:86:b8:71:f5:c4:a4:72:68:a3:83:62:b0:80: 4d:8c:7b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrN+5gSXrHJgyLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNm N2Y4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk Mzc4YjRiZTMtYmEyYy00ZDM4LThlMGMtMDI4OGYwNDkwOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7AbBksvidBtpID3n4yVYV33VQQ1y2fdVnyC SChWkMErEG+GnF1hutjTtuWkYQEZuxk0LObXuSJBjOLRyGzNFp04fWKX18DHuYUr 8kRlDlIe0NIIOWgj8n58ilzBDV35Wzh3JXHTr1+KniQDd3oWni4tgxtG3INWjKr4 i6KEt3MmgTS4XPuxPtdS890PaxUMLa2In5ZhANlHA4qwgQTe7S9JBsXPv9rHYgxD AdUQvu3wGtMNC6yfrGlKT4CGKrgxMXFgd1TXkYMgBgPiQp9YYlzYO53e6IH8d+pJ 6LBbEFTQeKqqDGJB21oaRgS2+DE/qIVzzt5Qtt6KJb4tDKkqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBqVHXvCF5Y+SBoxN5dHVXtOdrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDhl NGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvMmVlNTA2ZTAtMWQwNS0z OWVhLWI3ZjQtOWU5MDg2MDhhZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1 MTUtOTAxNzA4YzNmN2Y4L2VkOGU0ZGZhLWU5MGUtNGUzZC1hNTE1LTkwMTcwOGMz ZjdmOC5jcmwwHwYDVR0jBBgwFoAU2R0Zrz+TBG1NWTZN1xzphxtdhOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3 MDhjM2Y3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQPvXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJrNfFn6u39Duaxj9EQNRhDC0EUFhw5h9UO5rhkU1FqRoiy0UDlTl2C SvfqBlEukt6iqyDQx+ppkUInhZlJMvnqT4BAJE2szk4E3zGRxf8LoS9p2+V2Ftb4 GgT4bATOzwwiXpvrBPLjeSVQOEa8/fSYvJDypNi0WeCg/Yo7rnOBHWsKOenmmYIh BuCLBuq2Q4alXeAVpQktVd4a5UvUN/wMgFZWRmwtmKRbOl+tJ9gE6dY0LxY1uZCB nbSXTD9ec0Jl6U0QyoG3sMqRvKJ8IplrNpa7TkbfSfmtZbPi98N2NDReg1/mlzb/ w9JFNKIThrhx9cSkcmijg2KwgE2Me/Q= -----END CERTIFICATE-----Generated at Tue Oct 21 03:03:13 2025 by rpki-client