$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa File: 829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa (raw, json) Hash identifier: +Gyh19orbmjobGmrP1q7jCrDLxEBE125uT5Mqb1v4hI= Subject key identifier: 15:2C:6A:10:BC:C2:36:B3:82:D0:85:52:3E:4D:F8:B3:D6:75:12:26 Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1 Certificate serial: 010D0C9F4328584B76F27B4765C625D6A5255B80 Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 8987 IP address blocks: 64.190.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7b:47:65:c6:25:d6:a5:25:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=bdeb87ca-75f4-4c1e-987c-256f61e90284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:99:59:80:3c:0c:a3:9f:59:f7:8e:16:01:b4: aa:73:f5:f6:00:5a:e7:3f:22:c1:96:91:f3:67:1d: c3:c0:63:8f:b5:d3:bb:4d:96:68:c3:d2:74:5c:86: 47:82:02:06:82:46:ea:0f:34:2a:6d:44:6e:6a:45: 6a:e3:46:c8:82:23:ad:d5:dd:01:be:82:f0:9c:f2: 18:35:c1:08:0a:20:79:e4:f4:4f:65:23:89:57:6b: 60:44:a3:e3:f2:f2:c6:38:23:55:4c:9f:05:db:b8: 8e:a2:1e:e5:34:3a:a2:07:5c:0e:3c:55:89:b6:3b: 18:20:00:9e:8d:ba:28:3a:be:f2:b0:2c:07:2a:ab: 18:27:aa:b2:0a:72:61:e2:4a:17:b4:d7:61:69:98: 90:55:df:ee:c4:54:3d:0c:f9:a5:0b:4b:b0:7f:39: 10:4a:73:1d:43:99:a2:72:69:04:32:dc:a3:f0:ea: 61:a6:42:22:44:bb:7d:8a:23:3f:85:91:1f:12:1f: 29:c5:6c:6b:55:89:a7:59:15:90:85:70:19:5d:e4: ac:34:eb:30:d2:bd:b3:1b:9b:18:b3:bf:82:c2:80: 10:8e:cf:61:6b:fd:03:ac:67:65:2d:6a:57:ae:81: 43:6e:59:c0:0a:f0:09:6d:16:d7:4c:bf:4a:da:86: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:6A:10:BC:C2:36:B3:82:D0:85:52:3E:4D:F8:B3:D6:75:12:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl X509v3 Authority Key Identifier: keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer sbgp-ipAddrBlock: critical IPv4: 64.190.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b3:e8:3a:4d:37:4d:44:dc:eb:f4:bd:9f:4e:53:b9:d3:af: 8f:89:0b:24:b3:c5:dd:3e:d4:02:14:07:27:11:51:0e:1e:6f: 91:ec:54:87:97:87:d1:6d:ff:ca:b4:7f:ea:88:fd:b4:4f:2c: c1:ed:2e:2a:25:f2:e9:85:a2:fd:75:21:8e:9a:16:d0:60:9d: a1:35:5a:e3:55:89:f9:4b:3f:ef:7f:93:88:43:88:22:91:ad: 77:5b:7a:6f:e9:11:fc:16:ef:ef:fc:97:1f:9a:04:ab:2a:6c: a1:40:db:c0:1f:00:01:c4:cd:cc:d9:a8:68:18:77:9d:ac:f0: bd:8d:77:3e:7c:32:0b:5f:33:f9:0a:0e:a2:05:65:d3:19:50: 60:db:76:ec:31:94:09:5a:c2:3d:fe:37:b2:c1:a5:d3:49:b8: 53:37:25:99:f8:18:09:e9:ab:bc:6d:49:82:27:6f:74:b4:7f: d9:82:ef:c2:25:1a:3f:b9:30:97:85:a1:e7:78:b9:f4:63:70: d9:9a:6f:9f:5b:22:fd:28:19:69:39:cd:b2:c8:14:cb:95:53: ad:6e:14:fb:bc:98:82:e0:26:7f:0c:65:5a:57:4f:ef:ba:8d: 0a:72:6e:01:7a:73:dd:08:7a:ce:e8:e1:ce:2d:7c:65:5a:9a: 07:2f:59:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ntHZcYl1qUlW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3 NmUxMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmRlYjg3Y2EtNzVmNC00YzFlLTk4N2MtMjU2ZjYxZTkwMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5lZgDwMo59Z944WAbSqc/X2AFrnPyLBlpHz Zx3DwGOPtdO7TZZow9J0XIZHggIGgkbqDzQqbURuakVq40bIgiOt1d0BvoLwnPIY NcEICiB55PRPZSOJV2tgRKPj8vLGOCNVTJ8F27iOoh7lNDqiB1wOPFWJtjsYIACe jbooOr7ysCwHKqsYJ6qyCnJh4koXtNdhaZiQVd/uxFQ9DPmlC0uwfzkQSnMdQ5mi cmkEMtyj8OphpkIiRLt9iiM/hZEfEh8pxWxrVYmnWRWQhXAZXeSsNOsw0r2zG5sY s7+CwoAQjs9ha/0DrGdlLWpXroFDblnACvAJbRbXTL9K2oaAcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUsahC8wjazgtCFUj5N+LPWdRImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0 ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvODI5MTIxYmItYWQ2Yy0z YmRiLWE4YTQtZWJhNGEyYjk1MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0 MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0 YzgxZTc2ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqz6DpNN01E3Ov0vZ9OU7nTr4+JCySzxd0+1AIUBycRUQ4eb5HsVIeX h9Ft/8q0f+qI/bRPLMHtLiol8umFov11IY6aFtBgnaE1WuNViflLP+9/k4hDiCKR rXdbem/pEfwW7+/8lx+aBKsqbKFA28AfAAHEzczZqGgYd52s8L2Ndz58MgtfM/kK DqIFZdMZUGDbduwxlAlawj3+N7LBpdNJuFM3JZn4GAnpq7xtSYInb3S0f9mC78Il Gj+5MJeFoed4ufRjcNmab59bIv0oGWk5zbLIFMuVU61uFPu8mILgJn8MZVpXT++6 jQpybgF6c90Ies7o4c4tfGVamgcvWVA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:12 2025 by rpki-client