$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/fd0bea5d-67c9-31a4-952b-5fdc60c8c126.roa File: fd0bea5d-67c9-31a4-952b-5fdc60c8c126.roa (raw, json) Hash identifier: n2o67DB1EkZ15vm2wMXAJ1bu4jM6yYX364+BAzUQWr8= Subject key identifier: 04:D5:75:58:70:8D:9F:0A:26:49:8B:8B:3D:45:B7:D7:93:CF:44:F1 Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Certificate serial: 010D0C9F4328584B434CAE6A7096C85479FB4200 Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/fd0bea5d-67c9-31a4-952b-5fdc60c8c126.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 32491 IP address blocks: 64.98.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ae:6a:70:96:c8:54:79:fb:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=676e26e9-7581-4a48-ae95-a8b78e9c9a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:95:da:2b:85:df:0a:a0:cd:e9:e2:23:ef: 47:39:ff:72:fa:00:a7:c8:9a:c9:ca:02:b6:ce:3e: 84:75:59:d7:f0:b9:91:ea:cb:9a:cc:14:2c:65:43: a7:1c:5e:7b:8d:d8:10:b9:9d:78:15:a1:84:4d:6e: a9:9c:e0:49:66:07:e2:dc:73:00:94:4e:ac:fa:a8: 87:2a:5b:02:94:f2:67:08:9a:e3:c5:ad:4f:02:6e: 9c:d8:a7:90:df:ac:00:66:84:27:1a:71:97:dd:1b: 00:67:c5:8d:92:17:1d:28:55:af:86:8f:88:9f:1f: b4:68:31:e5:06:00:03:2f:87:8d:e0:3f:37:75:44: fd:4b:c2:5d:e3:d8:c7:05:c2:75:f9:47:07:39:bc: 6d:44:f9:a7:15:ce:9e:ed:f8:14:25:45:01:ed:d9: ed:08:8f:0f:4f:2b:8e:4d:b8:ef:32:4c:69:23:9d: 8b:9b:e6:61:81:f5:35:c5:ba:c7:12:d4:55:bb:98: da:c5:54:84:a2:f6:90:ea:9b:c7:72:bf:bf:47:81: 31:90:86:39:8a:f1:7e:ab:56:1c:c6:27:e1:3b:64: 50:c3:c3:f1:20:6b:ec:a5:5a:2e:43:61:d3:02:87: 30:69:b0:24:f6:be:db:23:68:c6:98:77:77:e6:d8: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D5:75:58:70:8D:9F:0A:26:49:8B:8B:3D:45:B7:D7:93:CF:44:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/fd0bea5d-67c9-31a4-952b-5fdc60c8c126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl X509v3 Authority Key Identifier: keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer sbgp-ipAddrBlock: critical IPv4: 64.98.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:dc:1e:c7:05:02:10:cf:d0:c9:cb:bc:51:a0:1e:f2:b4:dd: 0f:a1:b5:dd:4f:ab:3d:d9:29:9c:a4:5c:0d:6a:0e:ad:78:32: 41:3d:d3:29:a8:4f:11:2a:31:60:96:d8:b1:53:0a:cc:dd:37: 69:a0:d0:b6:06:81:3e:df:49:3b:04:79:0c:6d:ef:e4:11:86: d3:96:07:85:f7:04:77:6c:32:bd:4a:a3:8f:e0:45:ca:da:68: 63:69:81:86:9f:0e:01:c9:93:69:ab:47:86:31:c8:e8:6d:9c: ea:4c:dc:8a:64:eb:f3:59:f4:ab:f1:45:66:57:7d:22:9e:46: 18:48:11:75:e1:a2:44:c9:41:43:ac:20:5e:a6:c7:4d:8e:ec: 76:dd:ae:ce:22:47:44:0b:7b:8f:98:27:91:aa:b8:af:5f:ff: 7f:96:c6:00:a0:13:ca:ec:9a:2c:ff:43:32:cd:2b:b7:7e:d3: 96:b9:fc:14:79:e0:45:b0:b8:77:40:bd:a7:02:62:85:32:3a: 9f:65:26:8d:52:23:1e:34:ce:34:2f:57:98:9f:29:8a:35:75: 2a:ca:d3:9a:3c:e0:82:68:fb:65:23:fc:7a:33:04:63:65:fb: 12:fc:c0:5c:03:94:e7:e3:81:4d:25:05:bc:f1:b9:89:75:87: 67:a5:26:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK5qcJbIVHn7QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk ZDBiMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Njc2ZTI2ZTktNzU4MS00YTQ4LWFlOTUtYThiNzhlOWM5YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV+V2iuF3wqgzeniI+9HOf9y+gCnyJrJygK2 zj6EdVnX8LmR6suazBQsZUOnHF57jdgQuZ14FaGETW6pnOBJZgfi3HMAlE6s+qiH KlsClPJnCJrjxa1PAm6c2KeQ36wAZoQnGnGX3RsAZ8WNkhcdKFWvho+Inx+0aDHl BgADL4eN4D83dUT9S8Jd49jHBcJ1+UcHObxtRPmnFc6e7fgUJUUB7dntCI8PTyuO TbjvMkxpI52Lm+ZhgfU1xbrHEtRVu5jaxVSEovaQ6pvHcr+/R4ExkIY5ivF+q1Yc xifhO2RQw8PxIGvspVouQ2HTAocwabAk9r7bI2jGmHd35th7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATVdVhwjZ8KJkmLiz1Ft9eTz0TxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5 MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvZmQwYmVhNWQtNjdjOS0z MWE0LTk1MmItNWZkYzYwYzhjMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3 ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQGKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHcHscFAhDP0MnLvFGgHvK03Q+htd1Pqz3ZKZykXA1qDq14MkE90ymo TxEqMWCW2LFTCszdN2mg0LYGgT7fSTsEeQxt7+QRhtOWB4X3BHdsMr1Ko4/gRcra aGNpgYafDgHJk2mrR4YxyOhtnOpM3Ipk6/NZ9KvxRWZXfSKeRhhIEXXhokTJQUOs IF6mx02O7Hbdrs4iR0QLe4+YJ5GquK9f/3+WxgCgE8rsmiz/QzLNK7d+05a5/BR5 4EWwuHdAvacCYoUyOp9lJo1SIx40zjQvV5ifKYo1dSrK05o84IJo+2Uj/HozBGNl +xL8wFwDlOfjgU0lBbzxuYl1h2elJmM= -----END CERTIFICATE-----Generated at Fri Oct 10 09:57:59 2025 by rpki-client