$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/720f5a45-f788-3a3d-b535-23eaced3e2fe.roa File: 720f5a45-f788-3a3d-b535-23eaced3e2fe.roa (raw, json) Hash identifier: tDGBQ+ksb8rfc8dsvJz6LPnJiGf+JV/JQDO2N5t39tw= Subject key identifier: 28:A8:B6:5E:7E:CC:D3:A4:D9:6A:66:37:65:B1:9D:6F:64:A7:01:92 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA11992990435C76C977F57F0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/720f5a45-f788-3a3d-b535-23eaced3e2fe.roa Signing time: Fri 24 Oct 2025 15:24:22 +0000 ROA not before: Fri 24 Oct 2025 15:24:22 +0000 ROA not after: Thu 22 Jan 2026 16:24:22 +0000 asID: 5650 IP address blocks: 65.86.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:19:92:99:04:35:c7:6c:97:7f:57:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 15:24:22 2025 GMT Not After : Jan 22 16:24:22 2026 GMT Subject: CN=64ed867b-e432-411e-9b2f-03d577ceee9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:62:80:6a:21:30:0a:76:ab:fd:2d:cb:59:bb: 70:76:ff:cf:9f:28:63:2d:00:7a:1b:36:52:68:4a: 87:c8:15:a8:e8:70:76:ed:65:7d:34:f1:51:5e:15: 02:89:3f:a8:0b:a1:0e:01:27:63:8e:b9:05:62:e8: 41:fe:59:dd:52:50:e0:72:76:1e:69:92:51:dd:6f: 28:85:89:01:5b:63:46:a9:b6:44:3b:56:85:61:e7: 89:9e:b8:11:d7:55:b8:56:dc:3a:ea:91:f7:70:e0: 45:18:a4:fb:7d:a2:83:4c:89:3e:9e:d8:84:28:4c: 2d:dd:0a:2e:3a:d7:4a:d3:fb:e4:ca:8b:7c:7e:d0: 4e:d3:2b:6b:cf:49:72:f4:68:69:54:26:b6:fb:ff: 90:f8:f4:44:39:5c:9b:a9:27:98:3f:28:ea:ee:ec: ed:bc:5a:0b:c7:51:ab:8d:0e:96:47:71:57:36:22: 19:44:32:f3:12:e7:85:cc:42:de:8c:28:a8:b7:ba: 4a:d3:6c:9f:19:78:2d:73:00:df:46:5c:8a:cf:ae: e4:91:04:48:0a:75:35:16:8e:ac:ce:d6:d2:0c:e5: ed:d9:c2:c6:10:a0:88:6a:63:1a:39:93:b9:84:c6: 40:5a:1e:9a:dd:97:7f:10:76:47:06:53:82:7f:ca: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A8:B6:5E:7E:CC:D3:A4:D9:6A:66:37:65:B1:9D:6F:64:A7:01:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/720f5a45-f788-3a3d-b535-23eaced3e2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f7:11:f7:94:92:1e:a0:75:2e:94:1d:d5:e0:24:be:f1:35: 9b:22:c7:89:6e:65:78:dc:d7:95:67:71:ff:f6:bb:3e:57:e7: 15:01:61:2f:b2:d3:e8:1f:4e:37:ef:76:ae:dc:8b:20:ad:1e: 70:0a:ec:89:ed:04:db:19:f6:48:85:0a:b0:51:88:85:f3:4e: cb:99:8c:3f:2f:c6:77:3b:58:f4:16:6d:ce:8c:eb:10:65:c0: 4b:f4:7f:36:89:ae:e4:10:e1:b0:3a:3b:c5:31:57:b9:96:a6: 07:32:bc:19:16:20:7e:dc:0c:3c:3a:27:5c:e5:25:51:98:49: 08:4d:f4:6f:09:8a:22:77:1b:f2:13:a6:85:d2:7b:cd:f2:4f: 82:14:21:41:d1:bb:db:2b:dc:83:e2:e9:7f:85:e2:c5:11:94: 35:7b:d4:27:63:20:49:3d:1a:d0:b6:3a:92:a6:e2:29:31:8d: 44:56:e1:85:81:77:6d:08:f1:56:7e:a9:9f:73:c9:5f:fd:5e: c8:30:38:81:5d:85:01:3d:02:7f:76:66:86:15:ca:bb:8d:6e: 6f:05:97:2e:ac:9b:d6:9b:d1:ae:08:0b:e7:0e:ce:48:89:a8: 5b:52:38:a9:f6:99:21:33:fb:cf:fe:be:c8:62:44:38:64:16: 47:04:80:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhGZKZBDXHbJd/V/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNDE1MjQyMloXDTI2MDEyMjE2MjQyMlowLzEtMCsGA1UEAxMk NjRlZDg2N2ItZTQzMi00MTFlLTliMmYtMDNkNTc3Y2VlZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmKAaiEwCnar/S3LWbtwdv/PnyhjLQB6GzZS aEqHyBWo6HB27WV9NPFRXhUCiT+oC6EOASdjjrkFYuhB/lndUlDgcnYeaZJR3W8o hYkBW2NGqbZEO1aFYeeJnrgR11W4Vtw66pH3cOBFGKT7faKDTIk+ntiEKEwt3Qou OtdK0/vkyot8ftBO0ytrz0ly9GhpVCa2+/+Q+PREOVybqSeYPyjq7uztvFoLx1Gr jQ6WR3FXNiIZRDLzEueFzELejCiot7pK02yfGXgtcwDfRlyKz67kkQRICnU1Fo6s ztbSDOXt2cLGEKCIamMaOZO5hMZAWh6a3Zd/EHZHBlOCf8rHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiotl5+zNOk2WpmN2WxnW9kpwGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzIwZjVhNDUtZjc4OC0z YTNkLWI1MzUtMjNlYWNlZDNlMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ33EfeUkh6gdS6UHdXgJL7xNZsix4luZXjc15Vncf/2uz5X5xUBYS+y 0+gfTjfvdq7ciyCtHnAK7IntBNsZ9kiFCrBRiIXzTsuZjD8vxnc7WPQWbc6M6xBl wEv0fzaJruQQ4bA6O8UxV7mWpgcyvBkWIH7cDDw6J1zlJVGYSQhN9G8JiiJ3G/IT poXSe83yT4IUIUHRu9sr3IPi6X+F4sURlDV71CdjIEk9GtC2OpKm4ikxjURW4YWB d20I8VZ+qZ9zyV/9XsgwOIFdhQE9An92ZoYVyruNbm8Fly6sm9ab0a4IC+cOzkiJ qFtSOKn2mSEz+8/+vshiRDhkFkcEgGg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:53 2025 by rpki-client