$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa File: 01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa (raw, json) Hash identifier: CCJKuGhuUZG/A0I592zndiqLu7GdHoLzlaD4Tb9yzyY= Subject key identifier: CA:E2:D9:B0:4A:65:A9:FD:30:B4:50:47:8E:59:2A:17:8D:0D:89:8D Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584B44B1B991CEE95EEB17F1C380 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 63902 IP address blocks: 65.181.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b9:91:ce:e9:5e:eb:17:f1:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=cfb0e536-2da7-4464-bb9e-feea9eb1ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b9:4a:59:e3:f4:ab:66:f1:65:21:5d:fa:b2: ef:5f:38:3e:97:c5:7f:d0:f6:ff:dd:df:77:08:8a: e2:86:1f:a2:49:ed:7b:2a:e7:f4:52:ec:4b:ed:d7: 4d:a4:57:aa:78:73:57:e1:73:40:cc:27:2b:7c:ed: 82:95:8b:8d:6f:c4:f7:b4:5a:7a:e2:2e:c1:70:1b: ee:01:02:e5:0a:f4:45:a5:b9:67:29:bf:95:30:33: 7e:58:e4:f0:e9:c6:e0:1b:db:4a:5a:be:88:ce:6a: f2:27:3e:e1:0f:ba:8a:7f:58:5c:9c:f2:3d:bf:09: 03:a8:09:7c:ec:13:54:e3:73:e3:2d:08:f7:df:21: 94:de:bb:7e:93:6d:84:d0:8d:38:c4:99:fa:03:9d: 28:8e:e7:5c:93:d1:08:d6:4d:ba:d7:74:41:a5:2c: 4c:6b:e9:3d:d1:ab:5c:03:39:d3:4d:b1:70:78:fa: 02:52:ce:91:f1:5c:cd:4d:bc:53:50:01:96:2b:ff: a8:6a:b5:7f:81:0d:fb:7c:a8:50:5d:be:b4:da:aa: a9:e0:99:11:50:3c:c5:ac:a3:04:89:89:7d:63:07: f7:80:21:d7:c4:86:88:21:1e:a3:c9:14:55:72:d9: 26:7e:9b:08:af:50:42:f8:91:ef:3a:02:07:7a:be: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E2:D9:B0:4A:65:A9:FD:30:B4:50:47:8E:59:2A:17:8D:0D:89:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bd:be:66:f7:52:3a:f0:b5:fb:4e:7a:57:f4:68:c2:c8:4a: 8d:53:34:5e:98:b7:36:4d:a4:84:f4:cf:b4:c7:7f:23:4c:98: c0:10:bd:75:66:45:d4:52:88:f5:9b:61:be:d1:ab:0f:3e:c8: 6b:21:48:60:a4:ad:ca:a9:2e:e3:ee:d0:88:b1:ef:bc:fb:6d: f2:25:4b:37:5a:14:c4:d6:73:74:2a:18:31:4b:78:d0:94:3c: ef:11:68:72:c7:ae:ed:db:1e:3c:78:30:88:16:28:e2:65:67: aa:37:ca:90:31:1f:24:b6:e6:45:6b:58:8a:b2:5f:50:f6:56: cb:f5:72:f5:06:70:0b:29:45:40:6c:03:00:77:ce:d0:39:88: c8:4c:b3:87:6f:e3:85:45:03:f7:51:25:26:cd:60:63:04:76: fe:88:c2:d1:02:4a:5a:90:57:d2:4a:f3:81:79:1f:60:35:e9: 16:51:d6:50:44:ce:71:f1:17:48:cb:b7:a3:32:76:5c:65:6c: 73:06:56:c1:33:59:4d:2a:26:ce:94:49:9f:3c:ec:22:82:37: 2e:06:43:bd:f4:df:ea:8a:ed:4e:1c:3d:1a:d1:eb:f1:88:58: 1d:6a:24:b1:9c:8c:ca:1f:9a:2f:c1:d8:2a:e9:42:cb:a6:a2: d0:1d:3c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbmRzule6xfxw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk Y2ZiMGU1MzYtMmRhNy00NDY0LWJiOWUtZmVlYTllYjFmZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07lKWeP0q2bxZSFd+rLvXzg+l8V/0Pb/3d93 CIrihh+iSe17Kuf0UuxL7ddNpFeqeHNX4XNAzCcrfO2ClYuNb8T3tFp64i7BcBvu AQLlCvRFpblnKb+VMDN+WOTw6cbgG9tKWr6IzmryJz7hD7qKf1hcnPI9vwkDqAl8 7BNU43PjLQj33yGU3rt+k22E0I04xJn6A50ojudck9EI1k2613RBpSxMa+k90atc AznTTbFwePoCUs6R8VzNTbxTUAGWK/+oarV/gQ37fKhQXb602qqp4JkRUDzFrKME iYl9Ywf3gCHXxIaIIR6jyRRVctkmfpsIr1BC+JHvOgIHer4nmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMri2bBKZan9MLRQR45ZKheNDYmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvMDFmNDUwMmMtZjUzZC0z ZmZiLWJjNzctMzc1NjA1MWE3ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQbW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi9vmb3UjrwtftOelf0aMLISo1TNF6YtzZNpIT0z7THfyNMmMAQvXVm RdRSiPWbYb7Rqw8+yGshSGCkrcqpLuPu0Iix77z7bfIlSzdaFMTWc3QqGDFLeNCU PO8RaHLHru3bHjx4MIgWKOJlZ6o3ypAxHyS25kVrWIqyX1D2Vsv1cvUGcAspRUBs AwB3ztA5iMhMs4dv44VFA/dRJSbNYGMEdv6IwtECSlqQV9JK84F5H2A16RZR1lBE znHxF0jLt6MydlxlbHMGVsEzWU0qJs6USZ887CKCNy4GQ7303+qK7U4cPRrR6/GI WB1qJLGcjMofmi/B2CrpQsumotAdPBo= -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:33 2025 by rpki-client