$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa File: 3dd6c447-11e7-3124-8886-5326a815b42c.roa (raw, json) Hash identifier: /RA1h0qkidDXovGX196I03vdX3+JGEis7wjxD6+W9kw= Subject key identifier: 1A:C4:3A:D3:A7:9E:C1:BA:4B:B3:69:FB:49:2F:30:95:C3:B2:A1:99 Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Certificate serial: 010D0C9F4328584B2761792694FDFF04CB7AC200 Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 32133 IP address blocks: 64.99.104.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:79:26:94:fd:ff:04:cb:7a:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=de6647f0-796c-4c9f-b2d6-d62f5ab3e1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:bc:90:c1:27:02:d1:60:55:c0:15:65:b6: 93:b3:0d:ce:0a:0b:04:75:4f:c5:53:62:41:eb:21: f6:3b:50:6f:0c:ab:3c:91:5d:40:b9:48:ff:6e:73: da:9b:7a:ab:d0:99:ec:2b:2a:af:62:95:ea:d0:85: c0:59:e5:ac:49:8b:2e:a4:96:9e:59:af:37:5e:62: 6a:e8:eb:4e:1c:72:3d:59:f3:6b:cc:5e:82:fd:ca: 10:4f:70:46:94:59:f3:15:ab:44:b9:f5:35:ba:eb: 16:0d:aa:a1:e8:e5:ec:40:6c:bb:87:d4:f2:8c:c2: e2:b8:d6:65:fa:1e:84:e1:60:5a:95:46:be:a7:a3: 4e:8e:62:ec:62:b1:d2:61:70:39:c6:a5:c6:5e:53: 06:c9:87:a8:a8:de:2d:48:b1:0e:1f:f5:b6:e1:44: 84:bb:0c:f4:c9:42:60:15:58:e5:a9:d9:df:89:d4: 5f:1a:63:25:b4:6e:c3:03:cb:60:8c:da:86:d3:67: 2b:23:25:ba:48:a9:a6:bd:08:3b:60:43:5c:4b:30: 29:2e:75:81:04:f1:95:b6:d2:dd:da:aa:b4:a4:64: 96:ae:84:c5:26:97:5b:62:29:09:0e:de:d2:61:d7: f7:9a:a4:d6:d1:ee:30:47:35:57:e6:5c:f7:a5:46: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C4:3A:D3:A7:9E:C1:BA:4B:B3:69:FB:49:2F:30:95:C3:B2:A1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl X509v3 Authority Key Identifier: keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer sbgp-ipAddrBlock: critical IPv4: 64.99.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e6:2c:a0:71:54:58:9d:93:1d:78:13:26:67:1c:e4:1a:65: 44:10:a2:9b:31:c1:39:d9:e2:81:10:b7:5d:b0:57:ae:54:2a: 7a:60:ba:91:1f:bd:01:24:8f:07:10:1b:25:74:cd:71:c1:9e: 0e:81:f8:b5:f7:4a:cc:58:46:98:99:b0:06:29:30:c8:7c:3a: 7f:f2:3e:2a:5e:08:40:de:de:e0:99:90:74:dd:e5:52:0c:9e: 22:e3:2c:64:47:83:1e:27:f2:ea:07:fe:91:e7:69:39:50:59: 68:9e:37:6c:19:95:3d:1e:4b:e1:71:00:e1:9b:a6:a2:20:ab: 99:91:bc:73:71:5a:dd:7c:48:95:4a:34:a0:0a:56:1f:33:b7: f4:39:2e:df:d1:5b:2c:26:f8:26:4d:18:97:06:b0:f6:9f:b8: d1:b4:05:ac:59:a1:f9:6c:31:6a:72:fa:2a:cd:6d:ae:7e:fe: 1b:1d:62:3b:ba:58:7b:7f:b0:56:34:4f:ed:e2:1a:3f:c2:53: dd:34:29:c6:da:d8:bb:6e:41:85:e4:bb:9d:2e:65:65:6c:19: bc:f7:9b:51:e5:90:e4:63:49:47:1c:8d:df:53:43:2c:26:ec: 57:d9:73:91:72:56:b1:d2:68:f3:63:d5:a8:e4:8e:7c:32:6b: 1f:47:d4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXkmlP3/BMt6wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk ZDBiMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk ZGU2NjQ3ZjAtNzk2Yy00YzlmLWIyZDYtZDYyZjVhYjNlMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLO8kMEnAtFgVcAVZbaTsw3OCgsEdU/FU2JB 6yH2O1BvDKs8kV1AuUj/bnPam3qr0JnsKyqvYpXq0IXAWeWsSYsupJaeWa83XmJq 6OtOHHI9WfNrzF6C/coQT3BGlFnzFatEufU1uusWDaqh6OXsQGy7h9TyjMLiuNZl +h6E4WBalUa+p6NOjmLsYrHSYXA5xqXGXlMGyYeoqN4tSLEOH/W24USEuwz0yUJg FVjlqdnfidRfGmMltG7DA8tgjNqG02crIyW6SKmmvQg7YENcSzApLnWBBPGVttLd 2qq0pGSWroTFJpdbYikJDt7SYdf3mqTW0e4wRzVX5lz3pUZBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrEOtOnnsG6S7Np+0kvMJXDsqGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5 MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvM2RkNmM0NDctMTFlNy0z MTI0LTg4ODYtNTMyNmE4MTViNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3 ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQGNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHmLKBxVFidkx14EyZnHOQaZUQQopsxwTnZ4oEQt12wV65UKnpgupEf vQEkjwcQGyV0zXHBng6B+LX3SsxYRpiZsAYpMMh8On/yPipeCEDe3uCZkHTd5VIM niLjLGRHgx4n8uoH/pHnaTlQWWieN2wZlT0eS+FxAOGbpqIgq5mRvHNxWt18SJVK NKAKVh8zt/Q5Lt/RWywm+CZNGJcGsPafuNG0BaxZoflsMWpy+irNba5+/hsdYju6 WHt/sFY0T+3iGj/CU900Kcba2LtuQYXku50uZWVsGbz3m1HlkORjSUccjd9TQywm 7FfZc5FyVrHSaPNj1ajkjnwyax9H1Bk= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:06 2025 by rpki-client