$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/e7a5e9fa-54f1-3277-837e-353a459841a6.roa File: e7a5e9fa-54f1-3277-837e-353a459841a6.roa (raw, json) Hash identifier: Z2qDHLjIIsV48c5qNq1ERCAcwIYfCZ37KrVJ7xHbz20= Subject key identifier: 08:70:95:13:D3:9D:E4:2A:B3:BF:0F:35:A2:DA:6B:69:36:EC:C8:6C Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584BA9324F5FD1A5B0FDF9AE1700 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/e7a5e9fa-54f1-3277-837e-353a459841a6.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 40505 IP address blocks: 65.181.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:4f:5f:d1:a5:b0:fd:f9:ae:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=0f440b2b-1fce-4daa-8fcb-e7a96149eb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:85:7d:6f:05:25:ae:e2:e4:3c:5b:b4:f4:f7: 85:dd:f8:19:01:53:58:fa:07:57:92:72:0e:01:fa: 76:36:67:b9:70:e1:6a:ac:3f:4f:73:71:65:c4:d7: 55:15:93:d1:b7:6a:de:99:f7:fc:cc:3b:1f:06:04: dd:cc:ec:6e:c7:06:88:a6:46:bf:ff:2c:b8:37:a9: 01:81:15:18:81:31:38:00:b7:0f:d4:ab:c3:8b:09: d1:92:e4:cb:fa:c8:37:5c:02:98:8c:67:c1:33:91: 89:5d:cb:c4:ad:20:af:7d:6a:a2:19:ac:e1:0d:0f: 37:bb:1a:9a:3d:f4:e6:88:44:bc:aa:a8:32:8f:24: 1d:4f:35:d4:ac:c0:2d:fc:a3:16:f7:37:d3:09:5c: 88:05:a7:fa:dc:15:10:c1:9d:0e:db:c2:2d:57:ac: 94:82:da:b9:08:32:e4:a2:71:9b:dd:fd:20:80:34: d7:38:02:23:75:01:8d:df:71:df:a6:69:db:4e:a9: 12:16:f6:c2:74:2a:a2:da:6c:0b:f4:ba:5b:81:3f: 98:35:9a:1c:b0:d2:19:75:96:85:3e:e6:17:0e:73: a1:df:b2:62:69:46:74:e1:24:e3:47:ff:8d:f8:02: 3c:22:e8:aa:8e:68:e8:70:af:86:1c:0b:49:bf:c1: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:70:95:13:D3:9D:E4:2A:B3:BF:0F:35:A2:DA:6B:69:36:EC:C8:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/e7a5e9fa-54f1-3277-837e-353a459841a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ac:ee:c4:0c:2c:b8:1c:c0:97:06:4c:a2:30:19:14:e3:86: 1d:0d:d1:8e:0f:f7:2e:de:56:cc:64:a2:e6:ca:6d:bd:38:5f: e4:1c:84:9e:27:18:79:e5:5f:3d:26:bf:7f:59:d8:f1:89:91: 0c:37:fb:70:0d:9a:14:9c:a5:8a:0d:6b:01:88:80:15:6c:7c: f3:03:cd:15:98:0a:d6:a1:37:74:29:14:0a:af:a4:76:c7:a3: e4:bf:88:f1:6c:54:c3:85:52:b8:e3:a2:a5:bd:d9:77:c8:47: b8:b1:cd:f2:f0:7a:c7:aa:85:5b:c7:27:07:42:cc:72:95:88: 0e:09:1c:13:53:07:f0:b4:5a:f6:dd:21:5c:c3:f3:a0:55:92: 26:99:60:74:32:ef:e5:69:6f:75:2f:c5:c3:56:35:83:6a:be: 81:ed:7c:31:4d:f6:5c:b1:4e:6c:e5:a3:e5:12:d9:76:ad:91: 7b:36:e9:c5:ca:c3:8c:e2:36:64:bb:97:d8:98:b0:ca:16:ac: 8e:18:11:a3:e5:f5:df:9c:83:33:4a:ba:5c:05:25:b7:5f:da: af:d4:15:9a:1b:ba:a7:67:e6:d8:7b:b0:c4:31:47:13:b2:70: 70:0a:a8:22:0c:81:0d:a0:6b:c0:7f:f2:06:68:97:c1:e4:b8: fd:08:7d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMk9f0aWw/fmuFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MGY0NDBiMmItMWZjZS00ZGFhLThmY2ItZTdhOTYxNDllYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IV9bwUlruLkPFu09PeF3fgZAVNY+gdXknIO Afp2Nme5cOFqrD9Pc3FlxNdVFZPRt2remff8zDsfBgTdzOxuxwaIpka//yy4N6kB gRUYgTE4ALcP1KvDiwnRkuTL+sg3XAKYjGfBM5GJXcvErSCvfWqiGazhDQ83uxqa PfTmiES8qqgyjyQdTzXUrMAt/KMW9zfTCVyIBaf63BUQwZ0O28ItV6yUgtq5CDLk onGb3f0ggDTXOAIjdQGN33HfpmnbTqkSFvbCdCqi2mwL9LpbgT+YNZocsNIZdZaF PuYXDnOh37JiaUZ04STjR/+N+AI8IuiqjmjocK+GHAtJv8EaxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhwlRPTneQqs78PNaLaa2k27MhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvZTdhNWU5ZmEtNTRmMS0z Mjc3LTgzN2UtMzUzYTQ1OTg0MWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGes7sQMLLgcwJcGTKIwGRTjhh0N0Y4P9y7eVsxkoubKbb04X+QchJ4n GHnlXz0mv39Z2PGJkQw3+3ANmhScpYoNawGIgBVsfPMDzRWYCtahN3QpFAqvpHbH o+S/iPFsVMOFUrjjoqW92XfIR7ixzfLweseqhVvHJwdCzHKViA4JHBNTB/C0Wvbd IVzD86BVkiaZYHQy7+Vpb3UvxcNWNYNqvoHtfDFN9lyxTmzlo+US2XatkXs26cXK w4ziNmS7l9iYsMoWrI4YEaPl9d+cgzNKulwFJbdf2q/UFZobuqdn5th7sMQxRxOy cHAKqCIMgQ2ga8B/8gZol8HkuP0Ifbc= -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:46 2025 by rpki-client