$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b508510f-71dc-3ca5-b172-be511949fa07.roa File: b508510f-71dc-3ca5-b172-be511949fa07.roa (raw, json) Hash identifier: koaWY/bVsRdoZ+AIhue4tVEsx+G7+ZRyTZuNYlOvZq4= Subject key identifier: B2:A9:35:20:44:69:D4:B7:5F:A2:65:10:F6:11:6A:2F:83:9C:16:1E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9E8D3188F7EFF1C6AF9F6350 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b508510f-71dc-3ca5-b172-be511949fa07.roa Signing time: Thu 23 Oct 2025 17:29:54 +0000 ROA not before: Thu 23 Oct 2025 17:29:54 +0000 ROA not after: Wed 21 Jan 2026 18:29:54 +0000 asID: 55201 IP address blocks: 64.204.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:8d:31:88:f7:ef:f1:c6:af:9f:63:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 17:29:54 2025 GMT Not After : Jan 21 18:29:54 2026 GMT Subject: CN=84cf1a72-23f0-4cf5-94fe-61dc21077dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:0e:ab:18:7d:c1:ca:41:38:18:f3:ea:ba: 34:c1:f3:bd:ed:32:51:71:87:b1:94:d8:21:c5:b6: 9f:30:11:d8:4f:45:08:7b:61:d8:15:7f:93:55:94: 1d:44:ae:0d:b6:1a:63:fe:52:05:18:e9:51:2c:bb: bd:ff:c5:ca:4c:8f:e2:dc:e1:ad:02:75:dd:5f:f2: a6:90:4c:55:43:90:9c:a4:2c:a7:77:9e:ee:9a:6f: c0:cf:be:2c:64:d1:73:6c:03:b7:f0:99:f6:81:19: 5a:56:ee:f2:d3:53:dc:2b:3a:17:c8:84:d8:72:db: 6c:3f:dc:25:f6:44:18:4c:c1:96:d1:c9:0c:cf:8d: ae:c6:25:b9:e4:60:f0:7c:d0:a8:fb:84:73:7e:7c: 45:3d:38:89:5e:3a:cb:a3:01:6a:8c:4b:5f:f5:e6: 92:25:58:60:b0:1d:84:39:06:db:f8:0c:7c:b3:46: 72:53:48:1a:dd:5e:d3:8f:5c:17:cb:51:df:7c:ee: 6d:c0:f2:be:43:09:4e:9c:68:f9:ff:30:b1:e3:a6: 9a:49:5c:5d:26:bc:f5:e7:75:24:b6:07:ca:31:b7: 00:5a:b7:29:f5:43:12:4c:30:e8:3f:52:c4:f6:c6: d2:b3:db:9c:4d:90:88:af:3f:81:24:31:40:cf:cc: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:35:20:44:69:D4:B7:5F:A2:65:10:F6:11:6A:2F:83:9C:16:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b508510f-71dc-3ca5-b172-be511949fa07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:da:7b:50:2a:65:ef:23:05:2c:f0:84:ef:fc:74:dc:fb:c0: d6:87:95:15:b4:fb:59:d5:0e:7a:2c:cb:2c:f9:cb:87:eb:6f: e9:ed:e2:12:ec:77:c9:45:47:fc:e6:bc:28:cc:c5:0d:45:ec: 7a:c3:eb:3d:86:14:d3:3e:89:d2:2c:c7:46:a3:63:4d:10:b3: 09:d1:1a:b1:50:97:27:a3:a7:1a:62:bc:1a:87:bb:65:46:2e: 84:d7:2d:b4:54:77:28:0b:f5:48:54:87:cb:54:3a:09:1c:88: 1a:90:38:52:d1:f3:b4:39:76:da:35:02:d6:49:b9:45:24:a0: fb:15:e5:b5:69:2e:db:40:c1:72:03:c9:a9:99:ec:70:60:e6: dc:a2:e6:29:de:a8:ac:a9:07:14:6d:4d:52:22:3e:85:ec:1c: 18:55:e8:6f:05:ca:15:1e:06:fe:7a:7e:29:3c:65:3a:3b:f9: 59:38:ab:9b:4b:a4:73:36:3d:da:a4:67:ea:cc:0a:f0:2c:44: c0:f0:1b:1a:cd:ae:08:a0:62:43:f2:1a:48:c3:88:3f:2c:fb: 00:c4:a0:b5:d5:d7:dc:d9:88:4a:05:4f:17:a9:36:10:39:25: 33:9e:90:d9:80:cc:19:68:98:74:eb:96:cd:71:2c:59:3d:2b: 83:f9:cb:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuejTGI9+/xxq+fY1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMzE3Mjk1NFoXDTI2MDEyMTE4Mjk1NFowLzEtMCsGA1UEAxMk ODRjZjFhNzItMjNmMC00Y2Y1LTk0ZmUtNjFkYzIxMDc3ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOQOqxh9wcpBOBjz6ro0wfO97TJRcYexlNgh xbafMBHYT0UIe2HYFX+TVZQdRK4Nthpj/lIFGOlRLLu9/8XKTI/i3OGtAnXdX/Km kExVQ5CcpCynd57umm/Az74sZNFzbAO38Jn2gRlaVu7y01PcKzoXyITYcttsP9wl 9kQYTMGW0ckMz42uxiW55GDwfNCo+4RzfnxFPTiJXjrLowFqjEtf9eaSJVhgsB2E OQbb+Ax8s0ZyU0ga3V7Tj1wXy1HffO5twPK+QwlOnGj5/zCx46aaSVxdJrz153Uk tgfKMbcAWrcp9UMSTDDoP1LE9sbSs9ucTZCIrz+BJDFAz8y8jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKpNSBEadS3X6JlEPYRai+DnBYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjUwODUxMGYtNzFkYy0z Y2E1LWIxNzItYmU1MTE5NDlmYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDae1AqZe8jBSzwhO/8dNz7wNaHlRW0+1nVDnosyyz5y4frb+nt4hLs d8lFR/zmvCjMxQ1F7HrD6z2GFNM+idIsx0ajY00QswnRGrFQlyejpxpivBqHu2VG LoTXLbRUdygL9UhUh8tUOgkciBqQOFLR87Q5dto1AtZJuUUkoPsV5bVpLttAwXID yamZ7HBg5tyi5ineqKypBxRtTVIiPoXsHBhV6G8FyhUeBv56fik8ZTo7+Vk4q5tL pHM2PdqkZ+rMCvAsRMDwGxrNrgigYkPyGkjDiD8s+wDEoLXV19zZiEoFTxepNhA5 JTOekNmAzBlomHTrls1xLFk9K4P5y1w= -----END CERTIFICATE-----Generated at Wed Nov 5 03:23:41 2025 by rpki-client