$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d31723a-3f6d-375d-a41d-0499065348da.roa File: 9d31723a-3f6d-375d-a41d-0499065348da.roa (raw, json) Hash identifier: hCdIdq3NkPM8AdTeFzXfcqVM5yFeSlp5f6FsXJ9b6Nw= Subject key identifier: 70:F5:EA:F5:4D:03:47:9F:9F:67:34:A8:21:EB:D6:EA:30:E2:33:5D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B88ACB9419C82C61FF5725742 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d31723a-3f6d-375d-a41d-0499065348da.roa Signing time: Wed 15 Oct 2025 21:25:39 +0000 ROA not before: Wed 15 Oct 2025 21:25:39 +0000 ROA not after: Tue 13 Jan 2026 22:25:39 +0000 asID: 9304 IP address blocks: 64.7.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:ac:b9:41:9c:82:c6:1f:f5:72:57:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 21:25:39 2025 GMT Not After : Jan 13 22:25:39 2026 GMT Subject: CN=2f9455e4-bd4a-4c6f-a185-d5bbbe56ba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:27:aa:81:83:13:a7:50:78:ab:af:3e:63: a9:77:89:a5:8a:a0:f7:78:24:d5:a8:56:18:b7:62: d8:d0:2b:61:e9:0e:1f:c2:81:5b:0a:a1:67:55:bf: 60:7d:04:bc:5e:9e:da:a4:36:f1:8f:c0:d6:35:87: 9a:fc:e5:e1:24:c9:9b:2b:72:90:d1:fd:11:38:f5: 23:d9:a9:34:d9:83:a3:35:6a:54:2b:a6:52:08:8c: 5b:5f:2e:6c:d0:83:00:15:83:55:e3:cb:82:8e:82: 30:6c:9c:7d:a1:29:95:27:34:80:8c:74:7f:5e:13: 48:c4:a4:93:39:aa:1c:e4:89:c6:f6:56:2c:76:83: 04:f5:86:8f:9b:cd:fd:02:15:a7:ac:10:24:a5:da: d3:cb:78:7f:3c:0a:f4:91:72:f8:00:fb:b1:bc:8e: cf:32:1b:f0:e0:a3:53:d4:98:62:5d:16:35:7c:c9: 59:cf:47:27:07:f1:f3:be:92:55:2b:0f:8c:24:60: b1:9b:6d:c2:d3:a8:93:53:9c:ca:93:5e:47:f0:47: 67:54:54:68:81:ff:89:35:65:08:44:5d:80:ce:59: 1d:25:10:bd:c8:eb:e6:01:db:09:ec:91:b5:d4:d5: 97:eb:ec:c1:56:64:a0:64:c3:06:4d:af:64:32:56: ea:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:EA:F5:4D:03:47:9F:9F:67:34:A8:21:EB:D6:EA:30:E2:33:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d31723a-3f6d-375d-a41d-0499065348da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:41:b3:06:04:3a:dc:02:9d:d5:28:90:d2:32:c1:5e:f8:ad: d1:3b:db:78:14:42:86:e0:24:87:28:87:03:cd:27:c6:9e:10: 29:13:b0:18:00:14:a2:c0:c3:42:d2:26:b3:50:9a:14:64:1d: ad:5c:da:de:9c:b6:d2:78:30:76:22:c8:48:35:3f:e3:53:5f: 33:4a:5a:01:87:ba:49:38:1b:6d:f0:70:7a:d0:44:91:9b:bf: 2a:a4:f9:42:30:2c:96:eb:43:e0:7a:39:b1:0c:55:a5:91:1a: 2b:21:65:49:7e:19:ae:91:d5:c9:ef:c8:4e:e0:59:e6:e3:98: 15:ee:eb:ae:a9:32:5c:0b:a8:c0:f7:46:95:b7:8e:aa:5d:2e: ca:f5:06:28:67:4c:d1:61:73:6f:77:82:39:31:3d:12:ef:66: 25:f1:e6:c1:a0:fa:24:77:36:01:86:62:e3:af:3f:97:eb:32: 2e:c3:b1:90:8f:7a:1e:43:93:08:35:85:0c:e4:29:71:68:1a: 4e:af:5b:c6:b5:42:19:2d:8d:0c:62:a8:b0:d7:49:89:d7:40: bd:91:4f:b8:45:7b:2c:2f:dd:8e:cc:d7:60:59:3a:f7:49:b2: d1:82:0c:a5:44:62:1d:97:f1:bd:83:17:6d:ea:d7:8e:74:31: 0b:20:75:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIrLlBnILGH/VyV0IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTIxMjUzOVoXDTI2MDExMzIyMjUzOVowLzEtMCsGA1UEAxMk MmY5NDU1ZTQtYmQ0YS00YzZmLWExODUtZDViYmJlNTZiYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDonqoGDE6dQeKuvPmOpd4mliqD3eCTVqFYY t2LY0Cth6Q4fwoFbCqFnVb9gfQS8Xp7apDbxj8DWNYea/OXhJMmbK3KQ0f0ROPUj 2ak02YOjNWpUK6ZSCIxbXy5s0IMAFYNV48uCjoIwbJx9oSmVJzSAjHR/XhNIxKST Oaoc5InG9lYsdoME9YaPm839AhWnrBAkpdrTy3h/PAr0kXL4APuxvI7PMhvw4KNT 1JhiXRY1fMlZz0cnB/HzvpJVKw+MJGCxm23C06iTU5zKk15H8EdnVFRogf+JNWUI RF2AzlkdJRC9yOvmAdsJ7JG11NWX6+zBVmSgZMMGTa9kMlbqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD16vVNA0efn2c0qCHr1uow4jNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWQzMTcyM2EtM2Y2ZC0z NzVkLWE0MWQtMDQ5OTA2NTM0OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNBswYEOtwCndUokNIywV74rdE723gUQobgJIcohwPNJ8aeECkTsBgA FKLAw0LSJrNQmhRkHa1c2t6cttJ4MHYiyEg1P+NTXzNKWgGHukk4G23wcHrQRJGb vyqk+UIwLJbrQ+B6ObEMVaWRGishZUl+Ga6R1cnvyE7gWebjmBXu666pMlwLqMD3 RpW3jqpdLsr1BihnTNFhc293gjkxPRLvZiXx5sGg+iR3NgGGYuOvP5frMi7DsZCP eh5Dkwg1hQzkKXFoGk6vW8a1QhktjQxiqLDXSYnXQL2RT7hFeywv3Y7M12BZOvdJ stGCDKVEYh2X8b2DF23q1450MQsgdc0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:17 2025 by rpki-client