$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa File: 842ecda0-182f-3843-adab-4bdda84d6875.roa (raw, json) Hash identifier: YxKBeBamilK6I6Ym0vWizZtgdwDtJleogg85zvSpSJs= Subject key identifier: FA:DE:D1:C4:98:D9:45:F0:CF:91:39:72:18:30:16:E2:F0:E5:55:B8 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584B13D6C374A3FB2712223B9A40 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 64.57.33.0/24 maxlen: 24 64.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c3:74:a3:fb:27:12:22:3b:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=0fba1820-d0ae-4e58-9ab7-b07e67a6ee1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:e3:89:32:2a:81:88:83:08:a8:3f:c9:88: 71:59:2f:9a:cf:2e:67:fd:c7:4e:3d:8c:b3:6f:db: 02:ee:ab:a4:5e:a6:f8:56:fd:58:ad:4a:3b:9f:fd: ae:66:86:77:bf:09:59:18:2b:e1:3e:2b:30:93:53: 1d:33:5d:ce:7e:6b:f9:9f:05:bd:06:91:9c:e1:b4: ef:c3:a3:ba:66:c9:72:22:fd:2f:cf:19:55:84:59: cf:76:81:62:bb:23:a5:1c:50:83:8d:2b:47:16:51: 6e:12:7c:09:f9:39:45:5e:4c:49:05:8d:bf:b1:3d: ac:a5:14:03:69:35:b3:6d:62:c7:99:e5:41:89:1e: 96:2b:fd:be:9a:43:63:6a:42:e2:66:48:2a:0a:65: 96:ea:94:dd:b1:d3:e8:74:a8:df:1d:b9:9d:27:c8: 2c:a2:02:9a:d3:54:26:b5:a8:36:aa:0c:de:bf:f1: 9b:9b:be:b4:66:6a:e7:ec:a5:e8:c9:59:62:a2:6b: 20:0b:5e:08:fe:0f:f5:0f:08:49:ad:ef:03:13:08: 55:42:61:c8:5f:62:5c:1a:19:30:3d:06:85:1b:83: 73:c7:b1:8c:38:a8:78:11:96:8b:c0:13:21:df:6a: 77:3c:00:3b:5d:a4:c2:59:3b:82:89:17:26:55:1e: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DE:D1:C4:98:D9:45:F0:CF:91:39:72:18:30:16:E2:F0:E5:55:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.33.0-64.57.34.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a0:3d:e3:01:78:43:cd:96:07:e9:36:f3:df:21:f2:a1:16: a1:01:d0:2b:9d:a3:32:6f:66:4b:07:2d:58:8a:1a:fa:f3:21: a7:76:53:99:79:37:a3:2f:53:44:27:98:f8:33:7d:85:a5:47: 02:d2:fe:17:35:d2:30:c4:40:f2:2b:3c:25:b8:04:48:a7:ea: b2:70:4e:56:29:02:a3:93:d1:2f:e0:81:4f:91:31:d7:dd:31: e8:71:22:a9:cb:8f:ab:fc:49:8b:5e:fa:9e:b1:89:3b:38:06: 67:f2:35:a4:bd:31:60:64:c1:a7:86:ea:c6:2a:0f:91:04:9e: 8d:0e:e7:38:9c:6c:81:57:7f:4d:53:2a:6c:2e:ee:a7:19:5a: cf:05:72:5f:0e:66:e7:b4:d0:df:ad:04:93:52:73:e9:6c:ea: 73:0c:0b:2c:d6:99:4e:95:eb:31:86:73:e8:7b:5f:26:d4:5f: 5a:3b:8b:65:80:30:c4:f4:78:6d:9a:70:bb:ba:08:16:57:5e: 42:3f:cc:5d:63:80:83:2c:07:60:06:d7:6a:84:09:a4:da:ad: 39:46:e3:ee:bd:40:18:48:6f:47:e0:9d:5b:3a:b1:fe:11:92: 22:a9:6c:98:3d:13:17:68:c1:c7:57:9c:eb:f3:ad:42:32:46: 01:2c:0e:f2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsT1sN0o/snEiI7mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MGZiYTE4MjAtZDBhZS00ZTU4LTlhYjctYjA3ZTY3YTZlZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjnjiTIqgYiDCKg/yYhxWS+azy5n/cdOPYyz b9sC7qukXqb4Vv1YrUo7n/2uZoZ3vwlZGCvhPiswk1MdM13Ofmv5nwW9BpGc4bTv w6O6ZslyIv0vzxlVhFnPdoFiuyOlHFCDjStHFlFuEnwJ+TlFXkxJBY2/sT2spRQD aTWzbWLHmeVBiR6WK/2+mkNjakLiZkgqCmWW6pTdsdPodKjfHbmdJ8gsogKa01Qm tag2qgzev/Gbm760Zmrn7KXoyVliomsgC14I/g/1DwhJre8DEwhVQmHIX2JcGhkw PQaFG4Nzx7GMOKh4EZaLwBMh32p3PAA7XaTCWTuCiRcmVR5U6wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPre0cSY2UXwz5E5chgwFuLw5VW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvODQyZWNkYTAtMTgyZi0z ODQzLWFkYWItNGJkZGE4NGQ2ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAA6A94wF4Q82WB+k2898h8qEWoQHQK52jMm9mSwctWIoa +vMhp3ZTmXk3oy9TRCeY+DN9haVHAtL+FzXSMMRA8is8JbgESKfqsnBOVikCo5PR L+CBT5Ex190x6HEiqcuPq/xJi176nrGJOzgGZ/I1pL0xYGTBp4bqxioPkQSejQ7n OJxsgVd/TVMqbC7upxlazwVyXw5m57TQ360Ek1Jz6WzqcwwLLNaZTpXrMYZz6Htf JtRfWjuLZYAwxPR4bZpwu7oIFldeQj/MXWOAgywHYAbXaoQJpNqtOUbj7r1AGEhv R+CdWzqx/hGSIqlsmD0TF2jBx1ec6/OtQjJGASwO8g== -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:24 2025 by rpki-client