$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa File: 387f6db0-20d1-3de5-86c6-570f32283f2a.roa (raw, json) Hash identifier: FP2ACqDedsbGxUpvjdaqfalUENK5SVMExk/lU28vTXs= Subject key identifier: FF:92:82:4C:7F:3F:B2:CD:5D:AD:54:E7:10:CB:F9:13:0A:66:2B:B9 Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1 Certificate serial: 010D0C9F4328584B76F28C1243F08CE37C12F580 Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 64.190.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8c:12:43:f0:8c:e3:7c:12:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f33162bc-b0ca-4b08-90c1-a6869ba38b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:a5:16:5d:2c:6f:30:28:5a:c6:98:33:41: fe:5c:df:15:1c:b3:ff:25:ec:64:16:96:b2:d3:17: 0b:67:4c:2e:c3:ff:23:b7:c4:c0:16:c9:67:5f:2c: ed:31:86:86:71:dc:c0:2f:a0:3d:36:9b:8d:e2:d8: a2:ed:e3:ed:91:f2:ef:a4:dd:24:b6:65:f4:2d:84: bd:e4:b5:41:2f:4d:c1:78:97:2e:e3:7c:ef:bb:d8: 1c:a3:8d:5f:07:3e:24:9f:8a:d7:13:5c:c7:b4:ea: 4c:9d:fd:98:51:09:08:18:7d:65:73:e8:64:38:9a: 46:8c:9f:1f:8e:b2:46:62:2f:56:ff:dd:23:78:4a: d4:aa:09:0b:80:26:34:7e:8a:22:ce:b3:f9:2d:f6: 98:8b:0e:69:8b:f2:28:21:54:5f:19:a6:d3:61:21: ac:13:d9:8d:1f:2c:20:2a:27:93:a8:8f:49:ed:61: 6e:f6:78:3e:5e:ff:95:4e:14:c9:43:86:97:a7:f6: 55:ad:fc:fa:54:31:fa:17:49:be:1f:38:e4:0f:55: 8b:97:c4:4c:36:53:10:e1:bb:89:8c:13:f1:4f:28: aa:43:ae:2f:b2:22:ce:1a:23:40:5a:b6:0e:a9:5b: d0:9f:97:56:8f:1a:bf:38:01:2a:be:39:42:33:51: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:82:4C:7F:3F:B2:CD:5D:AD:54:E7:10:CB:F9:13:0A:66:2B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl X509v3 Authority Key Identifier: keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer sbgp-ipAddrBlock: critical IPv4: 64.190.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5e:4b:43:23:dc:41:23:45:7e:29:95:ef:75:3d:5a:0e:e4: ef:86:4b:a7:0b:01:a3:f2:42:d4:d7:ab:81:cb:1c:af:74:64: 39:f2:1d:43:14:9c:34:00:1e:2c:a9:bf:87:20:40:25:d0:e7: d2:79:4a:00:b2:2c:75:4a:91:c0:78:66:34:91:13:d8:1e:c7: b4:f3:f4:89:79:2c:97:db:76:ab:d8:2b:6e:2e:38:fb:e5:22: cc:70:c5:c3:54:91:a7:e6:95:c5:aa:86:4d:39:4c:e1:0d:e1: 43:06:09:26:65:45:6f:00:e3:b3:27:c8:bb:dc:4e:b0:17:30: e5:f7:d5:29:24:c4:cd:05:31:08:99:b8:69:2f:5a:32:16:b9: 0e:65:83:16:c3:86:1b:c5:25:4b:78:e5:81:f3:84:25:6f:31: 0f:13:cc:c1:1c:32:31:ee:76:f0:6a:16:4c:e5:23:42:ac:f1: 33:30:0a:5a:4c:40:b3:d2:9b:aa:f5:9e:ae:0b:f3:c0:71:b7: fc:bf:75:9f:1d:2f:1d:57:5d:ba:a6:52:d5:48:29:d9:70:0b: 3e:2a:ef:d9:7c:33:b9:58:cf:2e:b9:b3:70:c0:ce:72:89:64: 91:c2:5d:1e:df:83:bc:74:5f:92:36:b5:fc:cc:39:02:f1:44: 5e:f2:96:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28owSQ/CM43wS9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3 NmUxMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjMzMTYyYmMtYjBjYS00YjA4LTkwYzEtYTY4NjliYTM4YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7elFl0sbzAoWsaYM0H+XN8VHLP/JexkFpay 0xcLZ0wuw/8jt8TAFslnXyztMYaGcdzAL6A9NpuN4tii7ePtkfLvpN0ktmX0LYS9 5LVBL03BeJcu43zvu9gco41fBz4kn4rXE1zHtOpMnf2YUQkIGH1lc+hkOJpGjJ8f jrJGYi9W/90jeErUqgkLgCY0fooizrP5LfaYiw5pi/IoIVRfGabTYSGsE9mNHywg KieTqI9J7WFu9ng+Xv+VThTJQ4aXp/ZVrfz6VDH6F0m+HzjkD1WLl8RMNlMQ4buJ jBPxTyiqQ64vsiLOGiNAWrYOqVvQn5dWjxq/OAEqvjlCM1EMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+Sgkx/P7LNXa1U5xDL+RMKZiu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0 ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvMzg3ZjZkYjAtMjBkMS0z ZGU1LTg2YzYtNTcwZjMyMjgzZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0 MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0 YzgxZTc2ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABheS0Mj3EEjRX4ple91PVoO5O+GS6cLAaPyQtTXq4HLHK90ZDnyHUMU nDQAHiypv4cgQCXQ59J5SgCyLHVKkcB4ZjSRE9gex7Tz9Il5LJfbdqvYK24uOPvl IsxwxcNUkafmlcWqhk05TOEN4UMGCSZlRW8A47MnyLvcTrAXMOX31SkkxM0FMQiZ uGkvWjIWuQ5lgxbDhhvFJUt45YHzhCVvMQ8TzMEcMjHudvBqFkzlI0Ks8TMwClpM QLPSm6r1nq4L88Bxt/y/dZ8dLx1XXbqmUtVIKdlwCz4q79l8M7lYzy65s3DAznKJ ZJHCXR7fg7x0X5I2tfzMOQLxRF7ylkc= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:25 2025 by rpki-client