$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e14febe8-dc77-3993-886f-c5107e427fea.roa File: e14febe8-dc77-3993-886f-c5107e427fea.roa (raw, json) Hash identifier: AJArrDtuV2dUMTlX9irNAu2crZP8gANy75INoBOPQ3I= Subject key identifier: 69:B6:69:1F:94:EA:5C:63:3D:5C:C9:2D:F6:D6:B0:F8:FC:21:CB:F2 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC7530C7408F2597133BCC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e14febe8-dc77-3993-886f-c5107e427fea.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:53:0c:74:08:f2:59:71:33:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=f67ac027-5e27-4387-80d3-7dff5b464e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:d0:a1:1e:67:94:4d:f3:b6:cb:1c:25:64: 75:c3:d4:83:fd:49:0b:a7:11:59:0a:2b:04:e0:80: 7b:dc:9d:64:4f:95:b2:97:94:8f:0a:54:ed:4c:13: 43:af:67:1b:b7:1b:0e:72:3a:9f:53:1f:bc:ad:be: ad:77:f0:18:56:62:e1:cf:76:4d:f7:41:e7:9c:e0: 54:45:09:2e:90:06:75:9d:97:50:d6:2a:ef:8f:72: 80:25:7e:17:b1:b0:b7:66:7c:71:39:8a:00:03:10: da:46:a9:8e:d5:94:a5:4f:ec:d2:c8:2b:9b:18:93: 88:c3:6a:9b:8a:91:e9:b3:e3:43:4c:e8:49:cb:2b: 3c:ed:1c:ca:04:46:d1:44:56:d0:43:f3:58:dd:32: 64:9c:01:7a:0c:f6:0a:f7:ca:40:c4:ae:39:e1:bb: 49:bc:47:04:ba:0b:06:9a:00:d1:36:c3:d7:ea:ad: 5f:23:7c:0f:5d:73:2e:5f:69:6a:09:f9:eb:a3:6b: 2a:78:f2:0d:b2:41:23:6b:7c:a0:11:a3:38:2d:75: d9:32:7c:99:03:89:ed:da:37:71:23:a3:98:5a:da: 16:c6:b8:24:75:93:35:c7:d4:fa:47:d5:6c:6e:f8: ff:d5:58:98:e8:11:7c:e3:d3:fd:d3:06:dd:83:23: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B6:69:1F:94:EA:5C:63:3D:5C:C9:2D:F6:D6:B0:F8:FC:21:CB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e14febe8-dc77-3993-886f-c5107e427fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:7a:f7:c1:97:fa:ec:e6:17:90:55:4e:99:1a:eb:10:18:d6: 18:79:50:7c:28:54:65:ea:bb:18:84:db:ee:7e:51:77:67:78: f8:03:84:fd:9a:4d:a4:85:8f:20:d9:d2:d3:2e:c5:48:83:25: 4c:2b:db:ad:d1:7f:3a:66:5b:0b:2b:d1:fc:2e:a9:e7:b4:a2: 62:f0:69:6c:64:7d:db:e3:56:d6:84:6c:2c:7c:5a:b6:f4:31: cb:e8:ab:61:09:f7:1c:2f:81:7a:c5:4d:7b:21:0a:96:c6:8e: 14:fb:a0:a8:73:5f:79:c6:f9:33:0a:a2:c0:40:74:f2:c0:94: 41:1b:de:ee:8f:c1:6b:ae:15:a0:e6:3e:70:c4:99:ff:b3:d8: 7a:15:8a:0d:4b:c1:5d:57:73:57:69:ba:f8:e7:47:6b:96:af: 3c:ce:8a:85:3b:28:bb:4e:24:4c:2a:38:9e:b6:b3:62:0b:f8: 60:4c:4e:91:bf:57:21:75:13:af:30:c1:08:f1:bc:af:ea:72: c5:21:53:43:fc:e8:45:28:7b:10:c7:e2:88:ef:43:a4:35:d6: 25:12:5b:c2:cc:d0:11:79:08:99:30:4d:ac:93:c8:40:d2:47: 8d:15:0f:ba:ac:c8:d8:7b:4c:31:a0:36:eb:3a:38:51:f4:fc: 44:93:8f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1MMdAjyWXEzvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZjY3YWMwMjctNWUyNy00Mzg3LTgwZDMtN2RmZjViNDY0ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKTQoR5nlE3ztsscJWR1w9SD/UkLpxFZCisE 4IB73J1kT5Wyl5SPClTtTBNDr2cbtxsOcjqfUx+8rb6td/AYVmLhz3ZN90HnnOBU RQkukAZ1nZdQ1irvj3KAJX4XsbC3ZnxxOYoAAxDaRqmO1ZSlT+zSyCubGJOIw2qb ipHps+NDTOhJyys87RzKBEbRRFbQQ/NY3TJknAF6DPYK98pAxK454btJvEcEugsG mgDRNsPX6q1fI3wPXXMuX2lqCfnro2sqePINskEja3ygEaM4LXXZMnyZA4nt2jdx I6OYWtoWxrgkdZM1x9T6R9Vsbvj/1ViY6BF849P90wbdgyPLKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm2aR+U6lxjPVzJLfbWsPj8IcvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZTE0ZmViZTgtZGM3Ny0z OTkzLTg4NmYtYzUxMDdlNDI3ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN698GX+uzmF5BVTpka6xAY1hh5UHwoVGXquxiE2+5+UXdnePgDhP2a TaSFjyDZ0tMuxUiDJUwr263RfzpmWwsr0fwuqee0omLwaWxkfdvjVtaEbCx8Wrb0 Mcvoq2EJ9xwvgXrFTXshCpbGjhT7oKhzX3nG+TMKosBAdPLAlEEb3u6PwWuuFaDm PnDEmf+z2HoVig1LwV1Xc1dpuvjnR2uWrzzOioU7KLtOJEwqOJ62s2IL+GBMTpG/ VyF1E68wwQjxvK/qcsUhU0P86EUoexDH4ojvQ6Q11iUSW8LM0BF5CJkwTayTyEDS R40VD7qsyNh7TDGgNus6OFH0/ESTjxc= -----END CERTIFICATE-----Generated at Thu Nov 6 09:04:53 2025 by rpki-client