$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d3c731d0-15f8-3078-81fa-924e42ae5df5.roa File: d3c731d0-15f8-3078-81fa-924e42ae5df5.roa (raw, json) Hash identifier: mHb6DpMpiAS7ydUcp0oM1jz9NeMEz08SS1Bt7+3OnoE= Subject key identifier: 47:2A:C7:92:F0:73:27:E0:A6:FE:A4:49:96:BE:5C:D1:8D:36:6D:10 Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Certificate serial: 010D0C9F4328584B434CAE9F01ED38C528B9D980 Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d3c731d0-15f8-3078-81fa-924e42ae5df5.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 32491 IP address blocks: 64.98.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ae:9f:01:ed:38:c5:28:b9:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=ec013e49-d65a-4d8b-9092-69a2ebef4d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:89:41:e6:95:81:1d:47:6e:bd:21:94:23: 57:10:fa:1e:d3:dd:da:ac:42:5d:38:7a:2a:ca:74: 07:7c:16:6c:a7:b5:7d:ca:ca:11:a8:7c:ce:dc:11: 33:87:5f:21:ad:da:95:3e:0e:0c:14:0a:1b:db:08: e2:bd:f2:98:45:7a:63:80:b4:ca:6a:b6:ec:2c:39: 03:8a:d5:79:1f:40:a2:2d:b7:0e:70:23:98:7e:50: 24:6e:20:cb:3b:b3:76:c4:88:20:bc:8c:5f:c6:a2: 5a:7f:7c:f0:60:8f:04:95:6c:c3:7e:e6:b7:31:4f: 06:23:14:6e:4b:4a:e9:4c:46:93:c6:16:d6:80:c8: 72:2f:28:2a:24:1e:dd:b3:f3:a7:ae:e8:ff:e3:b3: 6f:0d:e8:9e:dd:8e:60:83:2d:4a:2d:7f:9c:79:0c: b7:da:f3:6a:51:d3:f8:13:23:f7:7c:73:62:03:d8: 0b:31:2c:3c:06:c3:fa:04:3b:f4:92:5b:df:51:ff: c6:91:2d:61:26:8d:ec:bc:40:74:ac:71:00:a6:b9: 94:d6:1a:c9:51:62:64:ea:63:a0:46:a4:cf:bb:8f: 3d:2a:85:93:31:15:b8:ed:3a:7b:a7:6a:80:3f:34: 1b:d9:8a:94:c1:55:fe:1e:69:97:ca:56:60:88:08: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2A:C7:92:F0:73:27:E0:A6:FE:A4:49:96:BE:5C:D1:8D:36:6D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d3c731d0-15f8-3078-81fa-924e42ae5df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl X509v3 Authority Key Identifier: keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer sbgp-ipAddrBlock: critical IPv4: 64.98.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:17:e1:76:a7:e2:2b:5c:b4:f1:53:91:63:81:2b:9b:d5:b4: e5:18:59:65:61:cd:e5:1d:73:9d:76:d5:23:a9:58:61:d8:2a: b1:1f:10:3b:ab:4a:2c:6e:54:cc:41:ed:4e:1f:3a:11:f4:6b: 97:e1:83:a3:8b:a5:56:00:5b:fb:cb:19:46:fe:cf:cf:84:42: 31:99:73:ed:b5:68:4c:a5:7a:f6:00:11:22:60:d0:5d:0a:7b: 3b:a7:e1:2a:25:ac:ff:79:d4:11:13:3c:49:bd:44:7e:05:be: 4e:24:5b:b8:4d:a4:80:68:cf:fe:9b:dd:f7:c6:b9:3f:d5:ce: 87:e4:f2:73:9f:ab:d4:1c:fe:c2:9b:43:dd:44:f2:80:54:2e: e2:18:09:68:fe:99:2b:87:8e:6f:cc:d0:28:92:60:24:e8:1e: 1c:e4:46:dc:51:f4:e5:dd:26:97:d3:6c:04:a5:52:c0:3c:37: d5:ba:d0:e3:26:04:7e:52:db:2c:1b:00:62:ba:6c:9b:ec:0e: 8e:a6:42:83:a1:46:43:79:5d:a4:3c:41:47:02:a0:2a:8d:e0: 15:17:e0:6d:7b:6a:41:ee:87:ae:c2:9d:5b:e1:2e:ea:99:83: 56:0f:79:f8:09:49:44:a0:5f:70:d0:5e:4d:1c:ed:8d:d4:cb: d7:ce:6d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK6fAe04xSi52YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk ZDBiMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWMwMTNlNDktZDY1YS00ZDhiLTkwOTItNjlhMmViZWY0ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdOJQeaVgR1Hbr0hlCNXEPoe093arEJdOHoq ynQHfBZsp7V9ysoRqHzO3BEzh18hrdqVPg4MFAob2wjivfKYRXpjgLTKarbsLDkD itV5H0CiLbcOcCOYflAkbiDLO7N2xIggvIxfxqJaf3zwYI8ElWzDfua3MU8GIxRu S0rpTEaTxhbWgMhyLygqJB7ds/Onruj/47NvDeie3Y5ggy1KLX+ceQy32vNqUdP4 EyP3fHNiA9gLMSw8BsP6BDv0klvfUf/GkS1hJo3svEB0rHEAprmU1hrJUWJk6mOg RqTPu489KoWTMRW47Tp7p2qAPzQb2YqUwVX+HmmXylZgiAi+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcqx5Lwcyfgpv6kSZa+XNGNNm0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5 MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvZDNjNzMxZDAtMTVmOC0z MDc4LTgxZmEtOTI0ZTQyYWU1ZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3 ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQGKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8X4Xan4itctPFTkWOBK5vVtOUYWWVhzeUdc5121SOpWGHYKrEfEDur SixuVMxB7U4fOhH0a5fhg6OLpVYAW/vLGUb+z8+EQjGZc+21aEylevYAESJg0F0K ezun4SolrP951BETPEm9RH4Fvk4kW7hNpIBoz/6b3ffGuT/Vzofk8nOfq9Qc/sKb Q91E8oBULuIYCWj+mSuHjm/M0CiSYCToHhzkRtxR9OXdJpfTbASlUsA8N9W60OMm BH5S2ywbAGK6bJvsDo6mQoOhRkN5XaQ8QUcCoCqN4BUX4G17akHuh67CnVvhLuqZ g1YPefgJSUSgX3DQXk0c7Y3Uy9fObQo= -----END CERTIFICATE-----Generated at Fri Oct 10 09:55:36 2025 by rpki-client