$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/7cf618c6-90e0-3bbe-8c70-16b374eae75b.roa File: 7cf618c6-90e0-3bbe-8c70-16b374eae75b.roa (raw, json) Hash identifier: tU94NVlddjkxgLPSA85cFPhdUuaIGpuzgAgKEvgBQMc= Subject key identifier: E4:EE:50:E3:AE:E0:AD:C3:66:BC:9C:1E:BD:62:14:1D:57:D6:A1:41 Certificate issuer: /CN=65b75871-7632-4a71-a4a9-41f38235fc29 Certificate serial: 010D0C9F4328584BA2378C86084C10DC80CE2AA0 Authority key identifier: C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/7cf618c6-90e0-3bbe-8c70-16b374eae75b.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 13431 IP address blocks: 174.138.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8c:86:08:4c:10:dc:80:ce:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b75871-7632-4a71-a4a9-41f38235fc29 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=3d8e0f71-407d-4452-a28d-823248e89685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:33:fe:b7:d5:42:30:df:ec:6f:35:d3:2e: 6a:eb:e7:74:21:72:7d:fd:60:34:f8:b5:04:8c:98: 03:92:76:8c:65:a6:63:d8:0a:76:44:ba:be:9a:d6: 9f:bb:da:a8:42:57:e6:20:b2:db:23:ff:fd:60:61: f3:a1:cb:19:f7:0f:c6:ad:7e:5a:c7:cf:c0:64:f2: 69:c1:1e:67:cd:fe:1e:7c:47:bd:f0:bb:3f:b9:88: 5f:4c:08:67:e4:66:f1:10:b1:dc:8c:c0:b4:b3:a4: f2:1e:d2:8e:35:65:e6:6a:a6:f8:57:11:13:fd:81: 92:2e:b4:12:3e:51:97:67:f7:fd:26:de:42:b7:7a: 6d:44:09:74:27:af:d7:17:39:fd:ef:ed:3e:49:82: 9b:45:0e:d8:e9:d8:1e:03:bb:8c:43:68:8e:ae:63: 8a:f1:15:40:83:45:32:d5:9c:84:fa:37:93:d2:6f: d7:54:ed:b4:9c:ad:5f:5a:6b:61:81:35:04:69:32: 57:1f:b5:29:b4:68:e4:38:9a:b6:c0:94:59:31:5d: 8e:9e:53:96:e1:da:f5:a0:2c:52:7b:c8:b2:f9:16: cf:f1:31:68:61:2c:21:aa:95:e9:4c:28:a0:67:ee: e6:05:5f:cd:ca:b4:13:55:96:aa:a8:7d:34:15:53: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EE:50:E3:AE:E0:AD:C3:66:BC:9C:1E:BD:62:14:1D:57:D6:A1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/7cf618c6-90e0-3bbe-8c70-16b374eae75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl X509v3 Authority Key Identifier: keyid:C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer sbgp-ipAddrBlock: critical IPv4: 174.138.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:16:39:dc:e1:f0:51:8b:71:09:b9:6c:aa:e6:e4:96:43:d7: 41:93:a8:29:5c:26:45:fd:87:b9:14:94:2c:68:92:48:54:3c: dd:a0:78:30:cb:58:51:44:72:cb:b9:a1:88:76:37:4a:37:f4: fa:9b:91:59:ad:4f:6e:14:38:9b:51:6e:19:a6:6c:01:d3:c2: e9:d2:48:46:2b:95:1b:2d:95:7a:41:9e:30:dc:51:01:5f:55: 48:3e:d9:58:c1:7c:d9:c5:cf:7b:75:4c:a0:0c:81:72:2a:f8: 62:dd:ab:17:51:53:8e:b4:a9:e9:60:e4:0b:ac:ea:8b:87:7a: 34:30:16:07:b4:4c:5f:0e:28:33:07:4d:9d:a2:29:ae:4e:c0: 0c:bc:41:69:ec:e4:50:b5:34:cf:2c:3c:a2:ee:f2:98:31:f9: 0f:55:05:72:eb:80:32:26:65:a1:27:19:d3:2c:b5:42:19:fd: e4:4a:98:14:fd:11:9c:cf:a7:ba:f3:75:2d:cb:d2:4d:d3:bf: d2:7a:cd:72:e5:f2:71:a7:31:71:19:a6:97:9d:07:12:db:d7: d1:97:c0:93:63:17:3d:62:3e:f7:1c:29:e9:aa:32:f5:1a:6e: 9f:29:0e:06:3d:05:16:04:48:1e:4a:d8:c8:f0:aa:94:06:b3: b9:6b:d1:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN4yGCEwQ3IDOKqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViNzU4NzEtNzYzMi00YTcxLWE0YTktNDFmMzgyMzVm YzI5MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk M2Q4ZTBmNzEtNDA3ZC00NDUyLWEyOGQtODIzMjQ4ZTg5Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nAz/rfVQjDf7G810y5q6+d0IXJ9/WA0+LUE jJgDknaMZaZj2Ap2RLq+mtafu9qoQlfmILLbI//9YGHzocsZ9w/GrX5ax8/AZPJp wR5nzf4efEe98Ls/uYhfTAhn5GbxELHcjMC0s6TyHtKONWXmaqb4VxET/YGSLrQS PlGXZ/f9Jt5Ct3ptRAl0J6/XFzn97+0+SYKbRQ7Y6dgeA7uMQ2iOrmOK8RVAg0Uy 1ZyE+jeT0m/XVO20nK1fWmthgTUEaTJXH7UptGjkOJq2wJRZMV2OnlOW4dr1oCxS e8iy+RbP8TFoYSwhqpXpTCigZ+7mBV/NyrQTVZaqqH00FVNJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTuUOOu4K3DZrycHr1iFB1X1qFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWI3 NTg3MS03NjMyLTRhNzEtYTRhOS00MWYzODIzNWZjMjkvN2NmNjE4YzYtOTBlMC0z YmJlLThjNzAtMTZiMzc0ZWFlNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjViNzU4NzEtNzYzMi00YTcxLWE0 YTktNDFmMzgyMzVmYzI5LzY1Yjc1ODcxLTc2MzItNGE3MS1hNGE5LTQxZjM4MjM1 ZmMyOS5jcmwwHwYDVR0jBBgwFoAUx7CJHk/VIi/Bgn4+zl2FHCmNPeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWI3NTg3MS03NjMyLTRhNzEtYTRhOS00MWYz ODIzNWZjMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArorkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcWOdzh8FGLcQm5bKrm5JZD10GTqClcJkX9h7kUlCxokkhUPN2geDDL WFFEcsu5oYh2N0o39PqbkVmtT24UOJtRbhmmbAHTwunSSEYrlRstlXpBnjDcUQFf VUg+2VjBfNnFz3t1TKAMgXIq+GLdqxdRU460qelg5Aus6ouHejQwFge0TF8OKDMH TZ2iKa5OwAy8QWns5FC1NM8sPKLu8pgx+Q9VBXLrgDImZaEnGdMstUIZ/eRKmBT9 EZzPp7rzdS3L0k3Tv9J6zXLl8nGnMXEZppedBxLb19GXwJNjFz1iPvccKemqMvUa bp8pDgY9BRYESB5K2MjwqpQGs7lr0S4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:50 2025 by rpki-client