$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json) Hash identifier: 1fAz2KGWDpZyLl1V6R/u/2B7j1ktl/NhRQK+tR+f+70= Subject key identifier: 5B:75:B4:98:FB:CD:8A:50:14:02:15:85:5F:00:45:61:2F:00:FD:C0 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584B1C36C6AD5A748629945C3D00 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 21902 IP address blocks: 64.110.16.0/21 maxlen: 21 108.163.68.0/22 maxlen: 22 216.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c6:ad:5a:74:86:29:94:5c:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=22bdca9b-0204-4d6b-a8f6-9018290093d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:d4:7f:31:05:da:1d:18:46:ce:09:21:78: 70:53:89:28:29:33:74:12:b1:a6:ec:f3:fb:9c:6e: 6b:da:fc:ef:6c:d2:e6:cf:01:12:26:47:2c:77:a0: 4a:dd:be:5d:8d:46:5e:54:51:ec:73:dc:db:d2:79: 1b:5c:6f:81:e3:c0:ab:d9:3d:58:f9:d8:07:22:f3: cb:f9:79:29:84:59:e4:c3:1b:7c:dc:93:73:ad:89: ed:b7:b6:72:24:2a:54:98:a1:a4:2b:41:73:b5:da: df:50:80:47:a7:fd:ea:69:0b:bd:3c:d0:15:32:27: 76:41:e6:ca:88:34:a6:39:f9:4c:f1:04:90:56:ec: 47:48:57:dc:91:bb:97:2f:10:1d:21:19:0d:b8:76: 0f:59:d0:d5:4d:fc:1d:41:de:6f:51:d3:05:b8:81: 28:59:89:d0:5c:a2:37:bd:ec:93:ce:b7:eb:d9:d1: 65:cf:9f:bf:fb:a1:b3:a1:8b:6a:a7:e8:6b:d1:b8: 6d:49:29:6a:5b:39:1a:a0:b6:cf:45:2c:40:4c:9e: cd:b9:8f:22:84:61:5f:78:a8:88:7b:0f:75:f1:7e: fb:23:65:b6:dd:ae:ce:16:1a:ff:2f:ae:ab:ae:7e: f1:33:b7:67:81:ed:1c:a0:d7:d6:30:6c:ee:6d:43: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:75:B4:98:FB:CD:8A:50:14:02:15:85:5F:00:45:61:2F:00:FD:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: 64.110.16.0/21 108.163.68.0/22 216.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:bd:31:93:61:bb:23:1b:8a:f1:a0:fc:53:3a:82:d1:e8:7c: b2:4d:d9:c7:66:59:1e:fc:4e:f8:2f:7e:e3:c0:f4:4b:23:33: 35:4f:92:d2:48:4f:ca:b7:e0:c8:e7:0a:13:42:3c:de:3c:60: 3a:2a:22:c2:ee:fa:46:9c:c5:99:a6:81:7a:41:90:f1:69:b9: b3:39:e4:fa:7c:84:1f:ee:75:33:e5:61:b5:57:57:3f:84:47: 8b:de:8b:a0:aa:01:3a:2e:4d:8e:87:ab:e7:cd:6f:01:d7:14: 4a:c0:f6:4d:9b:49:23:e2:e1:3a:16:1a:6e:53:ac:76:48:b7: bf:52:5f:8c:c2:1f:e1:fd:e6:a6:d9:0b:36:97:ef:a2:09:66: 49:59:e7:36:93:38:b7:22:3a:fb:00:24:37:92:b8:12:ff:b6: b9:46:da:a5:12:96:c5:cf:be:ba:c4:b4:ea:1f:1f:61:13:3f: 56:c3:b7:a0:19:3c:76:12:95:1c:31:a8:a3:66:18:7f:54:01: 28:de:b6:5c:70:7c:ad:bd:30:9e:be:6b:aa:30:88:88:b5:3c: 29:ea:fc:9a:b7:5d:cd:1e:4c:35:75:45:25:b1:5b:4e:f5:85: 09:05:0b:32:09:93:48:e5:87:29:7b:73:23:94:5b:c0:fa:c3: 54:8f:2a:39 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEscNsatWnSGKZRcPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjJiZGNhOWItMDIwNC00ZDZiLWE4ZjYtOTAxODI5MDA5M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj3UfzEF2h0YRs4JIXhwU4koKTN0ErGm7PP7 nG5r2vzvbNLmzwESJkcsd6BK3b5djUZeVFHsc9zb0nkbXG+B48Cr2T1Y+dgHIvPL +XkphFnkwxt83JNzrYntt7ZyJCpUmKGkK0FztdrfUIBHp/3qaQu9PNAVMid2QebK iDSmOflM8QSQVuxHSFfckbuXLxAdIRkNuHYPWdDVTfwdQd5vUdMFuIEoWYnQXKI3 veyTzrfr2dFlz5+/+6GzoYtqp+hr0bhtSSlqWzkaoLbPRSxATJ7NuY8ihGFfeKiI ew918X77I2W23a7OFhr/L66rrn7xM7dnge0coNfWMGzubUNz2QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFt1tJj7zYpQFAIVhV8ARWEvAP3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvNjViMWFkMzYtY2JlOS0z NzcxLTljOTYtZTcwMDc0NGU2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG4QAwQC bKNEAwQE2L2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACe9MZNhuyMbivGg/FM6gtHofLJN2cdmWR78Tvgv fuPA9EsjMzVPktJIT8q34MjnChNCPN48YDoqIsLu+kacxZmmgXpBkPFpubM55Pp8 hB/udTPlYbVXVz+ER4vei6CqATouTY6Hq+fNbwHXFErA9k2bSSPi4ToWGm5TrHZI t79SX4zCH+H95qbZCzaX76IJZklZ5zaTOLciOvsAJDeSuBL/trlG2qUSlsXPvrrE tOofH2ETP1bDt6AZPHYSlRwxqKNmGH9UASjetlxwfK29MJ6+a6owiIi1PCnq/Jq3 Xc0eTDV1RSWxW071hQkFCzIJk0jlhyl7cyOUW8D6w1SPKjk= -----END CERTIFICATE-----Generated at Thu Nov 6 02:40:01 2025 by rpki-client