$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa File: 25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa (raw, json) Hash identifier: Zb0r3U7izMvbOxP+US0YobJyTi4fb3uhJmeUlBN8dOw= Subject key identifier: 55:A5:D5:E2:2F:7E:47:DA:1C:91:39:64:F6:0A:DC:AA:FA:47:01:9E Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F4328584B1AD1979A48C402FE57C406A0 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 64.140.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:97:9a:48:c4:02:fe:57:c4:06:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=09d80293-ad18-4280-9cdb-be7c12a0dbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:7e:c4:a7:12:2a:32:c1:7a:0e:e5:9a:d3: 04:03:af:82:ed:5b:f4:42:6a:27:b4:1e:9f:b1:19: ea:47:7b:b3:bf:26:6a:8b:5d:75:ae:f6:85:10:ae: 9d:5f:be:15:ed:a6:f2:0e:63:0e:b5:e2:46:ee:06: 56:88:47:ea:ad:aa:47:75:5e:cf:18:60:1d:54:50: 52:86:32:8a:ed:86:56:ce:be:80:1d:71:e4:67:5c: ea:e2:e8:24:30:ee:f1:ee:43:e6:d1:77:8c:cc:19: 16:5b:b5:f1:d9:51:a5:f6:a7:1a:61:4f:78:68:04: f6:9d:e2:3c:59:8a:8f:c8:39:6b:1c:22:b6:2a:ca: 55:b6:4d:27:1c:4a:e6:c0:8a:c5:5e:50:15:31:dd: 93:6d:49:5a:71:7a:09:50:81:e5:23:20:73:11:a0: 60:f6:9a:fe:38:63:63:3b:07:cb:5f:a0:2f:4c:06: d0:e5:a8:d5:dc:42:e2:34:8e:1c:26:00:c2:e8:b7: a0:88:40:32:fe:ca:d8:f7:fa:00:80:3e:72:37:c2: 3b:4b:ca:fe:4d:36:14:be:e2:fe:0d:64:bf:53:32: 0f:04:98:8f:1b:ae:2a:12:f6:87:9b:f9:b7:86:a9: 4c:c0:05:29:6d:d4:a5:86:3f:cf:08:5a:b1:c9:8f: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A5:D5:E2:2F:7E:47:DA:1C:91:39:64:F6:0A:DC:AA:FA:47:01:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 64.140.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:84:3f:d7:9c:16:31:df:99:01:e7:e6:c9:0f:30:b3:cf:16: 91:b6:91:ce:99:5c:5d:43:b7:9c:29:13:cd:ad:25:04:03:2d: 5f:42:93:ef:60:dd:8c:e7:c8:05:5e:92:fb:b2:a7:d6:5c:26: f5:00:fa:c6:f4:d6:09:c6:13:2c:c9:9f:53:0b:63:6e:33:fc: ea:16:9c:24:f6:2f:2e:f9:54:27:ae:b8:b1:17:2c:6f:43:35: e4:0a:04:a5:76:c2:f5:16:e0:0f:87:b8:7c:47:11:57:ff:d2: 4b:b5:ee:5f:51:4e:1b:cc:ea:59:93:f3:c7:d9:93:f3:b2:ec: 7d:e7:40:a8:e9:1e:93:0f:55:d7:4b:9f:d1:4d:1e:6b:47:5f: 52:eb:b6:d7:d3:5d:b4:2d:54:60:75:9e:4b:1b:c0:8b:ff:53: fc:e9:a8:80:d2:d4:08:10:d5:99:a9:72:29:6c:3f:e8:34:2f: 40:69:dc:ad:08:58:8b:12:0f:ad:f2:cf:e3:30:99:19:64:2c: 36:0e:ef:25:53:13:59:d2:8b:e2:63:0f:aa:1b:fd:88:9c:4a: 83:d2:04:c6:00:9b:c2:4e:bc:1d:65:73:b0:4f:f9:8e:5d:6f: 4b:b7:69:fc:89:8f:03:0a:cb:3d:55:71:85:ae:56:de:c3:03: 96:52:1c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZeaSMQC/lfEBqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MDlkODAyOTMtYWQxOC00MjgwLTljZGItYmU3YzEyYTBkYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+l+xKcSKjLBeg7lmtMEA6+C7Vv0QmontB6f sRnqR3uzvyZqi111rvaFEK6dX74V7abyDmMOteJG7gZWiEfqrapHdV7PGGAdVFBS hjKK7YZWzr6AHXHkZ1zq4ugkMO7x7kPm0XeMzBkWW7Xx2VGl9qcaYU94aAT2neI8 WYqPyDlrHCK2KspVtk0nHErmwIrFXlAVMd2TbUlacXoJUIHlIyBzEaBg9pr+OGNj OwfLX6AvTAbQ5ajV3ELiNI4cJgDC6LegiEAy/srY9/oAgD5yN8I7S8r+TTYUvuL+ DWS/UzIPBJiPG64qEvaHm/m3hqlMwAUpbdSlhj/PCFqxyY8wdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWl1eIvfkfaHJE5ZPYK3Kr6RwGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvMjUyOTJiNjItOThlYy0z NWY5LThhNGUtZmQ3ZDJjZDAyZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeEP9ecFjHfmQHn5skPMLPPFpG2kc6ZXF1Dt5wpE82tJQQDLV9Ck+9g 3YznyAVekvuyp9ZcJvUA+sb01gnGEyzJn1MLY24z/OoWnCT2Ly75VCeuuLEXLG9D NeQKBKV2wvUW4A+HuHxHEVf/0ku17l9RThvM6lmT88fZk/Oy7H3nQKjpHpMPVddL n9FNHmtHX1LrttfTXbQtVGB1nksbwIv/U/zpqIDS1AgQ1ZmpcilsP+g0L0Bp3K0I WIsSD63yz+MwmRlkLDYO7yVTE1nSi+JjD6ob/YicSoPSBMYAm8JOvB1lc7BP+Y5d b0u3afyJjwMKyz1VcYWuVt7DA5ZSHIY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:38 2025 by rpki-client