$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d0ac765e-19b0-35b2-bd54-a561c68197d7.roa File: d0ac765e-19b0-35b2-bd54-a561c68197d7.roa (raw, json) Hash identifier: wVCiwbUHWQdPBHKF77+5uBRJsHVHCngFoTT60lQK+Ic= Subject key identifier: 03:EA:BF:12:98:BD:03:BA:FA:E4:13:B4:3A:B7:E3:18:C9:38:3A:D5 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B5C6C7AED28E41E2C8DC31A00 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d0ac765e-19b0-35b2-bd54-a561c68197d7.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 63023 IP address blocks: 64.190.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:7a:ed:28:e4:1e:2c:8d:c3:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=ecef9a46-54e9-4fe1-b172-6df560754e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:54:57:32:dd:e2:bd:45:3f:61:ca:db:8a: 30:68:ae:ab:98:13:01:0a:6a:8f:78:4d:5c:58:55: bf:dd:88:13:a4:ef:f6:d4:20:c0:4a:00:67:e2:55: e7:d7:65:76:80:6d:c4:f3:ff:4e:a3:d3:36:4e:55: c5:28:1a:a1:de:44:c9:e7:9b:4c:fd:c9:25:64:5e: 94:06:a0:ce:1c:a1:ec:63:c0:37:a8:ac:ff:37:0a: 07:2f:1b:34:aa:81:1f:6b:96:00:72:7f:0f:7c:23: 60:30:f9:d3:21:a8:9d:a8:c8:29:e4:c6:7b:b9:c0: 10:e9:cb:00:1b:39:7b:db:da:48:99:ae:10:9d:db: aa:43:ba:4f:39:ef:04:1e:95:07:89:ca:83:62:2a: cb:85:08:01:f2:88:0f:fb:3c:86:84:a0:7c:01:bd: 08:ed:8f:f8:e2:32:4c:5a:2c:fe:2a:83:b8:55:67: cb:b1:e4:66:c4:99:c6:d6:ea:b8:0b:07:0f:82:0f: 3f:31:8c:f7:88:15:6d:8f:1d:e0:ec:dc:69:70:93: 7f:f5:9d:49:21:4d:46:8e:16:1c:c4:bd:f4:68:1b: be:d2:9a:2a:91:4b:e7:c8:e3:43:b8:57:38:b7:36: 4d:02:77:62:08:69:04:af:f8:2c:c0:4f:e2:4a:3b: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EA:BF:12:98:BD:03:BA:FA:E4:13:B4:3A:B7:E3:18:C9:38:3A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d0ac765e-19b0-35b2-bd54-a561c68197d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 64.190.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:97:7f:dc:0c:24:af:d0:6e:2e:6a:6a:f7:11:b4:57:43:bd: 7e:3b:3b:21:9f:52:95:02:97:68:f4:f5:bf:29:49:b5:21:51: 96:ed:23:21:53:8d:c2:42:34:94:11:eb:4e:f9:61:bb:2a:25: 39:6b:20:5d:a9:7e:93:ec:3a:78:5e:7c:96:ca:e4:48:a8:b7: 83:4d:54:e2:18:1b:b3:02:35:ca:ab:88:4f:cd:3d:28:f7:ed: ce:71:98:fc:fb:0e:02:b6:cc:ab:f4:6e:cd:dc:7a:2e:4a:b2: cc:8a:08:e9:85:28:86:40:59:5f:ef:46:7e:29:ae:b3:0f:cb: 7e:d5:c6:8b:c5:44:0c:95:8d:a4:a2:10:c6:8c:d9:e4:6a:50: 32:d5:77:a8:14:e7:10:c8:01:75:e1:fd:4a:e7:d3:a9:1d:94: 74:bf:e3:7d:13:22:6a:2b:27:79:a9:09:86:25:2e:e5:5c:ff: b0:d4:88:ad:52:67:b0:02:86:bc:3f:70:fb:1d:02:04:c2:86: fa:f5:e9:06:e2:7b:87:d0:af:aa:85:33:aa:9d:0b:5f:66:a4: 89:2f:71:06:c9:ba:e2:c4:81:2e:c8:61:52:93:23:1c:5f:5a: d0:f8:35:da:0c:76:64:29:16:87:63:b6:2a:aa:bc:2d:e4:da: c6:c6:a2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHrtKOQeLI3DGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZWNlZjlhNDYtNTRlOS00ZmUxLWIxNzItNmRmNTYwNzU0ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBVUVzLd4r1FP2HK24owaK6rmBMBCmqPeE1c WFW/3YgTpO/21CDASgBn4lXn12V2gG3E8/9Oo9M2TlXFKBqh3kTJ55tM/cklZF6U BqDOHKHsY8A3qKz/NwoHLxs0qoEfa5YAcn8PfCNgMPnTIaidqMgp5MZ7ucAQ6csA Gzl729pIma4QnduqQ7pPOe8EHpUHicqDYirLhQgB8ogP+zyGhKB8Ab0I7Y/44jJM Wiz+KoO4VWfLseRmxJnG1uq4CwcPgg8/MYz3iBVtjx3g7NxpcJN/9Z1JIU1GjhYc xL30aBu+0poqkUvnyONDuFc4tzZNAndiCGkEr/gswE/iSjvKHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPqvxKYvQO6+uQTtDq34xjJODrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZDBhYzc2NWUtMTliMC0z NWIyLWJkNTQtYTU2MWM2ODE5N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL7VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKXf9wMJK/Qbi5qavcRtFdDvX47OyGfUpUCl2j09b8pSbUhUZbtIyFT jcJCNJQR6075YbsqJTlrIF2pfpPsOnhefJbK5Eiot4NNVOIYG7MCNcqriE/NPSj3 7c5xmPz7DgK2zKv0bs3cei5KssyKCOmFKIZAWV/vRn4prrMPy37VxovFRAyVjaSi EMaM2eRqUDLVd6gU5xDIAXXh/Urn06kdlHS/430TImorJ3mpCYYlLuVc/7DUiK1S Z7AChrw/cPsdAgTChvr16Qbie4fQr6qFM6qdC19mpIkvcQbJuuLEgS7IYVKTIxxf WtD4NdoMdmQpFodjtiqqvC3k2sbGomY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:10 2025 by rpki-client