$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa File: c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa (raw, json) Hash identifier: xEVtVizZP6WkLGQrd1X+HFaf5TvH0lg1tIP7EKhOFOw= Subject key identifier: 17:EF:04:10:C3:27:AC:48:13:DB:CF:91:C1:E3:42:A1:B7:4A:AE:23 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584B84E77C8570F062217CA0A780 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 65.37.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7c:85:70:f0:62:21:7c:a0:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=8536afe6-cedb-46e4-b026-6990f488c090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:97:0f:8c:5c:1b:6c:0c:d8:58:48:3d:5d: 7a:63:d9:72:8e:dd:18:57:c6:3e:0f:f2:b3:41:bc: 26:7c:c7:99:23:08:8d:e8:df:1e:eb:53:70:48:c1: 89:2b:54:74:19:a0:e3:e8:79:a9:a6:5f:b8:85:3d: 8c:d6:52:ad:4f:8c:8f:b9:f0:ea:9b:72:6b:a0:e1: 9f:8a:0f:ba:2d:8c:30:18:01:4e:28:99:58:4a:d1: bd:8f:43:da:c7:39:02:58:46:72:ab:bb:59:5e:0e: 69:d4:0e:9a:79:98:82:b3:ff:10:53:91:89:c0:64: 68:a9:e2:69:c6:23:8d:9a:3d:b3:a8:76:7d:44:9f: 31:52:5a:b6:ed:64:a5:88:4f:79:9f:f7:03:f6:82: 0c:53:0a:0e:a7:e5:c8:ee:16:af:b3:98:ea:3e:bd: 5f:0f:e5:1c:4a:ee:24:fe:d2:bf:7b:3b:df:06:7e: de:90:6c:85:12:bd:5e:5a:37:27:74:68:c3:68:e0: 21:85:4e:e9:98:26:10:97:e4:8b:71:84:2a:b7:76: 71:7e:57:3e:45:43:53:30:b5:08:2c:af:a3:a8:39: db:5a:65:aa:e1:59:83:3f:94:32:17:59:6b:b4:b6: 49:ab:c1:fa:41:ae:d3:cc:9a:9e:6e:35:d4:d1:f2: 59:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EF:04:10:C3:27:AC:48:13:DB:CF:91:C1:E3:42:A1:B7:4A:AE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 65.37.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6b:e9:79:ed:be:a9:7b:e4:54:51:e4:d4:b9:ba:73:35:6f: d8:11:3e:d2:5c:f4:03:68:13:23:b8:bc:40:7e:fb:e8:07:e5: 22:03:40:2f:ef:3e:e6:55:85:7d:4b:f4:d1:6a:4a:b8:2c:15: be:1c:35:46:e2:f7:f0:0f:44:05:3a:d5:a0:9e:2e:98:26:1f: 26:49:d4:99:8f:3e:95:85:1a:29:1d:9f:31:49:ee:7e:44:d2: f8:da:1e:f0:dc:87:b7:2c:5a:50:e6:4c:39:ff:8b:ea:d1:27: 51:76:41:a2:dc:91:5d:86:b9:6c:77:af:e9:73:9c:b3:a8:f9: 18:f2:07:fc:6f:05:91:df:1c:7b:93:15:d8:8b:92:59:13:54: d4:d2:78:25:8f:5a:d2:b5:9a:7f:c9:1b:3c:53:d3:8e:24:5c: 46:9a:6d:8b:d4:25:81:8e:e0:55:4f:9a:59:3a:09:63:9a:10: 76:cb:59:d0:d1:5e:de:71:56:70:ff:1e:94:32:b4:47:5b:a5: 63:d5:cd:24:4b:e0:4e:9b:20:3a:0d:6e:73:b5:87:9f:94:a8: 37:68:48:7a:54:b2:54:65:56:29:a3:37:c4:cf:dc:42:66:ef: 75:37:f4:eb:de:a1:34:da:19:5d:8a:48:f7:00:75:8f:db:e7: e3:9b:29:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53yFcPBiIXygp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODUzNmFmZTYtY2VkYi00NmU0LWIwMjYtNjk5MGY0ODhjMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15aXD4xcG2wM2FhIPV16Y9lyjt0YV8Y+D/Kz QbwmfMeZIwiN6N8e61NwSMGJK1R0GaDj6Hmppl+4hT2M1lKtT4yPufDqm3JroOGf ig+6LYwwGAFOKJlYStG9j0PaxzkCWEZyq7tZXg5p1A6aeZiCs/8QU5GJwGRoqeJp xiONmj2zqHZ9RJ8xUlq27WSliE95n/cD9oIMUwoOp+XI7havs5jqPr1fD+UcSu4k /tK/ezvfBn7ekGyFEr1eWjcndGjDaOAhhU7pmCYQl+SLcYQqt3Zxflc+RUNTMLUI LK+jqDnbWmWq4VmDP5QyF1lrtLZJq8H6Qa7TzJqebjXU0fJZRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfvBBDDJ6xIE9vPkcHjQqG3Sq4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYzc0MzdiOWEtMmRjYi0z M2VjLWI2MTMtOGQzMGE1OGM0ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdr6Xntvql75FRR5NS5unM1b9gRPtJc9ANoEyO4vEB+++gH5SIDQC/v PuZVhX1L9NFqSrgsFb4cNUbi9/APRAU61aCeLpgmHyZJ1JmPPpWFGikdnzFJ7n5E 0vjaHvDch7csWlDmTDn/i+rRJ1F2QaLckV2GuWx3r+lznLOo+RjyB/xvBZHfHHuT FdiLklkTVNTSeCWPWtK1mn/JGzxT044kXEaabYvUJYGO4FVPmlk6CWOaEHbLWdDR Xt5xVnD/HpQytEdbpWPVzSRL4E6bIDoNbnO1h5+UqDdoSHpUslRlVimjN8TP3EJm 73U39OveoTTaGV2KSPcAdY/b5+ObKcI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:18 2025 by rpki-client