$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a540ace-76f2-3d52-8e79-1cd025a96048.roa File: 9a540ace-76f2-3d52-8e79-1cd025a96048.roa (raw, json) Hash identifier: 2MwhPJOKmI2ZCOfvFihBv34+z0i2sem15MDTsm52eOU= Subject key identifier: F3:70:F6:DB:52:90:AA:6F:0A:F1:FA:9E:38:3B:D4:CC:15:1D:B4:DB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8BC523A3C5D58315071F7380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a540ace-76f2-3d52-8e79-1cd025a96048.roa Signing time: Fri 17 Oct 2025 00:02:16 +0000 ROA not before: Fri 17 Oct 2025 00:02:16 +0000 ROA not after: Thu 15 Jan 2026 01:02:16 +0000 asID: 7029 IP address blocks: 64.7.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:c5:23:a3:c5:d5:83:15:07:1f:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 17 00:02:16 2025 GMT Not After : Jan 15 01:02:16 2026 GMT Subject: CN=be41a485-fcfb-4aa1-9f2c-aca67532f34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:e7:f2:48:fc:49:83:97:e5:3a:42:d7:c5: c8:74:44:9d:24:e9:55:8d:03:8c:9e:a5:23:6f:16: 3d:42:a8:fa:75:49:46:d7:bd:0a:c7:08:ac:bd:e9: 91:7c:fe:5f:bb:8a:1b:ce:a3:29:36:6f:a6:41:16: a3:8c:62:af:fc:c1:4e:7e:46:5d:05:17:d4:f6:57: db:ee:9d:09:a3:61:f5:77:57:68:98:b7:26:75:d5: dc:82:c3:36:d2:ba:c0:0a:2d:d2:c9:4e:4c:22:02: 41:32:a3:5c:2f:06:7a:cd:be:08:d4:b9:5c:cc:55: 0e:e8:03:49:4a:b5:d3:ba:83:aa:15:95:14:40:00: b1:d7:7c:84:41:00:73:f2:8c:1c:56:b3:3c:49:53: 75:c1:f3:59:02:36:db:b6:69:f3:a1:de:ad:df:4c: f7:49:42:92:a7:63:ee:58:3f:17:43:2a:0f:43:c2: 7e:7a:9f:53:9b:69:d8:3f:bd:b7:f5:be:a0:47:15: 1d:12:27:0a:28:65:92:ad:16:e1:69:46:cd:ef:2d: 28:89:de:d1:9e:93:11:97:65:a3:c3:ce:22:46:1e: 7b:ca:c6:25:f2:d4:c8:29:8d:03:82:6f:c2:b0:c1: 7d:29:cc:3e:30:22:02:d8:f2:34:c2:48:eb:34:f5: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:70:F6:DB:52:90:AA:6F:0A:F1:FA:9E:38:3B:D4:CC:15:1D:B4:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a540ace-76f2-3d52-8e79-1cd025a96048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:85:60:5b:9a:df:85:ca:02:e1:49:f4:62:72:a8:b0:ae:92: d7:7e:a4:98:2a:f1:1f:45:13:8d:a0:6c:31:03:58:86:6d:fc: 34:a1:81:87:a9:8f:df:af:ef:e0:48:d2:c8:dd:48:20:f1:6b: 42:eb:67:34:ce:8d:8b:ce:de:56:87:38:fa:ec:23:84:ff:d7: fd:f0:1c:64:db:03:9d:f0:ca:8d:4d:7b:2b:94:14:0d:4f:d6: 4f:e7:c4:f9:2e:fe:0e:f7:38:62:a7:09:5e:43:31:02:75:81: a3:15:57:ed:96:8d:83:a9:92:59:69:21:36:d1:de:1e:45:3d: 69:8c:4e:78:cd:52:64:44:48:24:7a:46:a7:a5:9a:1b:99:33: 1d:34:d9:d1:88:76:68:25:65:36:52:9b:e8:af:f6:1a:b2:f9: a3:0d:33:13:64:d4:e7:29:87:63:be:c4:c5:de:19:b9:20:bf: d9:60:4c:eb:39:08:1e:37:08:a6:14:13:63:d0:56:bf:11:19: 2c:f1:28:bc:a7:5a:53:a0:85:4f:7a:d8:d5:2d:7e:ea:5a:cc: f0:7b:0b:06:3e:ee:7d:73:b8:63:7d:c4:9c:48:d9:58:88:69: 7f:e9:ab:c5:3c:27:58:5e:62:6e:fb:30:04:ab:8b:44:82:3c: c6:37:69:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLxSOjxdWDFQcfc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNzAwMDIxNloXDTI2MDExNTAxMDIxNlowLzEtMCsGA1UEAxMk YmU0MWE0ODUtZmNmYi00YWExLTlmMmMtYWNhNjc1MzJmMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3jn8kj8SYOX5TpC18XIdESdJOlVjQOMnqUj bxY9Qqj6dUlG170KxwisvemRfP5fu4obzqMpNm+mQRajjGKv/MFOfkZdBRfU9lfb 7p0Jo2H1d1domLcmddXcgsM20rrACi3SyU5MIgJBMqNcLwZ6zb4I1LlczFUO6ANJ SrXTuoOqFZUUQACx13yEQQBz8owcVrM8SVN1wfNZAjbbtmnzod6t30z3SUKSp2Pu WD8XQyoPQ8J+ep9Tm2nYP7239b6gRxUdEicKKGWSrRbhaUbN7y0oid7RnpMRl2Wj w84iRh57ysYl8tTIKY0Dgm/CsMF9Kcw+MCIC2PI0wkjrNPWVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNw9ttSkKpvCvH6njg71MwVHbTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWE1NDBhY2UtNzZmMi0z ZDUyLThlNzktMWNkMDI1YTk2MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqFYFua34XKAuFJ9GJyqLCuktd+pJgq8R9FE42gbDEDWIZt/DShgYep j9+v7+BI0sjdSCDxa0LrZzTOjYvO3laHOPrsI4T/1/3wHGTbA53wyo1NeyuUFA1P 1k/nxPku/g73OGKnCV5DMQJ1gaMVV+2WjYOpkllpITbR3h5FPWmMTnjNUmRESCR6 RqelmhuZMx002dGIdmglZTZSm+iv9hqy+aMNMxNk1Ocph2O+xMXeGbkgv9lgTOs5 CB43CKYUE2PQVr8RGSzxKLynWlOghU962NUtfupazPB7CwY+7n1zuGN9xJxI2ViI aX/pq8U8J1heYm77MASri0SCPMY3aW8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:05:45 2025 by rpki-client