$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa File: a20f1c23-b345-360d-ab0a-26cae59bee50.roa (raw, json) Hash identifier: bkkqO7K0htREPhTV82Ob2zfVO9DIO+SzXmzh7GUgPlA= Subject key identifier: 0C:96:8F:FC:C1:A9:B2:F8:FF:DD:61:09:33:24:4D:DF:47:E7:10:47 Certificate issuer: /CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8 Certificate serial: 010D0C9F4328584BAEC7AE0BC00484377D638F80 Authority key identifier: FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 64.207.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ae:0b:c0:04:84:37:7d:63:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=335d4e1a-c11c-45e3-94c0-ad394a916e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:d2:c4:85:16:c3:6a:1d:79:7d:0e:68:30: 34:8a:99:38:02:00:a7:54:1d:db:d3:41:bf:c1:d8: 51:ab:27:44:64:96:82:af:0a:ef:08:e8:25:d8:96: 0f:b5:26:ec:6b:2b:0a:37:ed:24:85:c6:c5:c5:b0: bc:3b:12:cb:18:c2:25:92:5c:08:7b:df:fd:7b:c0: 06:26:88:5b:9a:7a:c8:f4:a2:aa:38:92:61:19:c1: c2:ef:bf:c1:67:c6:14:b5:ed:15:78:a7:a5:0d:ea: 46:9b:18:8b:c8:dd:9a:44:06:6c:16:92:6c:c1:42: f2:46:c3:52:c3:8d:d4:a3:f9:38:f4:00:8f:9d:8a: 63:46:89:b9:b9:1f:33:72:fd:0c:25:f1:20:57:d4: a5:bf:ce:ac:56:c5:b7:77:57:ef:32:fc:6d:c6:49: 53:a4:3c:f7:8b:ad:93:0a:d3:9d:7f:ec:19:30:bf: d9:ef:1d:2c:ab:b6:09:2d:65:13:14:f7:5e:60:62: 63:62:b2:c8:03:5f:83:81:5c:45:32:cd:94:6c:ac: e7:bc:80:5e:43:e5:28:97:76:a2:c7:f7:a5:50:57: a9:d9:50:9c:75:10:cc:95:3c:75:ee:74:88:80:87: 13:8b:de:cb:6b:28:15:cf:f7:5d:f1:f1:fe:29:8a: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:8F:FC:C1:A9:B2:F8:FF:DD:61:09:33:24:4D:DF:47:E7:10:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.crl X509v3 Authority Key Identifier: keyid:FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer sbgp-ipAddrBlock: critical IPv4: 64.207.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:52:69:6a:e6:b2:d1:fe:bf:b6:4d:d4:df:74:ac:83:02:85: 33:5e:c9:a3:85:b7:88:1a:35:37:15:1d:b5:e1:f7:a4:82:d1: 45:c7:f2:0b:e6:30:3e:1e:86:f9:44:19:30:4f:b9:9e:cb:ed: cf:4e:45:ae:34:8b:ce:76:50:bc:24:ab:d1:17:d2:50:46:ee: 82:6a:1c:5d:78:64:91:dd:ac:1b:37:72:b9:70:6f:ac:4d:e2: b4:49:a3:05:18:c4:4e:13:b6:93:2d:7d:39:05:3d:e8:dc:86: e7:0b:1c:90:b2:b0:19:ed:4f:5e:46:6e:62:ad:97:a4:59:0b: 2e:c1:d6:c3:70:67:64:a2:77:9b:71:37:73:98:e4:b9:9b:9e: 51:06:34:57:f0:ee:35:ef:71:d9:19:3f:e2:06:d4:5d:ff:5f: 2e:78:b3:58:cb:73:a0:d8:d7:64:72:de:04:b4:bd:55:49:b4: 28:02:f3:fd:79:2b:b8:e5:24:f1:3f:dd:ba:22:18:d0:14:14: 40:e0:d0:38:44:8e:b0:07:ec:ef:2e:fe:e1:60:23:f1:4e:8b: 3e:23:9e:ff:ac:d1:10:85:ce:68:44:7b:58:cc:b8:92:fd:72: 22:63:36:79:cc:d8:21:c6:7f:24:bd:e6:03:35:88:bb:46:16: 43:32:cf:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux64LwASEN31jj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBiZmE3YjUtYzEyZC00NGI5LTg0ZGUtZmUzM2E0ODM4 ZmE4MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MzM1ZDRlMWEtYzExYy00NWUzLTk0YzAtYWQzOTRhOTE2ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhzSxIUWw2odeX0OaDA0ipk4AgCnVB3b00G/ wdhRqydEZJaCrwrvCOgl2JYPtSbsaysKN+0khcbFxbC8OxLLGMIlklwIe9/9e8AG JohbmnrI9KKqOJJhGcHC77/BZ8YUte0VeKelDepGmxiLyN2aRAZsFpJswULyRsNS w43Uo/k49ACPnYpjRom5uR8zcv0MJfEgV9Slv86sVsW3d1fvMvxtxklTpDz3i62T CtOdf+wZML/Z7x0sq7YJLWUTFPdeYGJjYrLIA1+DgVxFMs2UbKznvIBeQ+Uol3ai x/elUFep2VCcdRDMlTx17nSIgIcTi97LaygVz/dd8fH+KYrhuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyWj/zBqbL4/91hCTMkTd9H5xBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MGJm YTdiNS1jMTJkLTQ0YjktODRkZS1mZTMzYTQ4MzhmYTgvYTIwZjFjMjMtYjM0NS0z NjBkLWFiMGEtMjZjYWU1OWJlZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzBiZmE3YjUtYzEyZC00NGI5LTg0 ZGUtZmUzM2E0ODM4ZmE4LzcwYmZhN2I1LWMxMmQtNDRiOS04NGRlLWZlMzNhNDgz OGZhOC5jcmwwHwYDVR0jBBgwFoAU/X1/ca8IUgFTIz/aCHJnlPzZW+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83MGJmYTdiNS1jMTJkLTQ0YjktODRkZS1mZTMz YTQ4MzhmYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5SaWrmstH+v7ZN1N90rIMChTNeyaOFt4gaNTcVHbXh96SC0UXH8gvm MD4ehvlEGTBPuZ7L7c9ORa40i852ULwkq9EX0lBG7oJqHF14ZJHdrBs3crlwb6xN 4rRJowUYxE4TtpMtfTkFPejchucLHJCysBntT15GbmKtl6RZCy7B1sNwZ2Sid5tx N3OY5LmbnlEGNFfw7jXvcdkZP+IG1F3/Xy54s1jLc6DY12Ry3gS0vVVJtCgC8/15 K7jlJPE/3boiGNAUFEDg0DhEjrAH7O8u/uFgI/FOiz4jnv+s0RCFzmhEe1jMuJL9 ciJjNnnM2CHGfyS95gM1iLtGFkMyz7Q= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:33 2025 by rpki-client