$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa File: 963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (raw, json) Hash identifier: SAPhk28cPlJgpwWyPOLq7MDcxOYCQJDfTawyeu0hCRE= Subject key identifier: 2B:72:9A:1C:CC:9B:38:2B:83:55:C2:19:95:17:EE:22:54:A7:59:7A Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584B13D6C3882821BBDAEFF15F40 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 64.57.33.0/24 maxlen: 24 64.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c3:88:28:21:bb:da:ef:f1:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=053f5f2f-858b-4cf4-8c87-e1a95720ac30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:66:0f:95:f4:68:db:0a:c4:5b:06:56:41: 18:a6:fc:d0:23:6f:f9:a2:85:fc:a6:3b:f8:d6:23: bf:27:a8:74:b6:76:a1:9c:41:5c:55:09:1f:e0:32: 34:5c:55:08:d2:52:b1:a2:a8:04:49:6b:12:5c:f1: f7:3d:7e:cc:17:d4:ba:a6:c1:86:61:8c:6e:c9:08: 26:2b:4e:6e:ee:e4:2c:c9:40:55:68:5f:c9:b9:f0: 35:72:af:64:87:93:88:45:45:53:6d:7b:da:d4:9b: 5d:db:20:35:e9:8c:d7:cc:7e:d4:05:38:75:75:71: 94:38:4b:2e:1d:19:c5:51:3e:18:8a:71:d2:5b:04: 23:12:b4:11:cc:29:2c:cf:25:1c:2a:40:17:ab:88: 52:dd:ad:73:ae:da:d5:57:46:63:67:d6:ca:3a:ce: df:e7:49:16:0d:43:3c:b1:26:59:f0:55:f9:af:f9: ed:4d:96:8b:77:00:0c:5f:88:25:9c:4d:2c:f0:69: 82:fc:43:33:98:74:10:72:bb:56:2b:af:ce:bc:cd: 19:bb:01:61:c0:65:ed:31:9e:07:20:da:f4:64:40: e9:38:70:f5:d4:11:92:81:4d:de:d0:77:02:82:5e: ea:c9:cd:9e:7e:4f:f1:b7:23:41:1b:7f:47:81:75: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:9A:1C:CC:9B:38:2B:83:55:C2:19:95:17:EE:22:54:A7:59:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.33.0-64.57.34.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:03:17:0d:17:d5:9e:22:7e:83:18:bc:0f:66:f7:45:ca:b7: 8a:d9:bd:04:e8:37:e1:33:de:22:74:3b:0d:fd:3d:c8:12:bf: 31:c4:e2:6b:d2:29:b1:d9:d3:1c:82:38:65:df:e0:d9:b7:23: f2:a6:32:16:d8:1e:a6:05:5d:01:67:28:78:66:ed:c8:3e:2e: 0e:2b:9d:70:0e:15:ef:53:c1:33:1a:85:af:38:62:f7:f3:50: 58:dc:3e:94:44:ec:45:ed:64:56:8b:6a:12:13:00:d0:7d:a5: 57:82:ed:c3:2d:78:ea:60:5a:a4:49:d1:8a:8c:4c:ea:d6:cc: fc:de:8b:c8:b9:57:36:ad:02:02:d7:7a:1f:ad:4c:a3:83:c3: b8:ac:9e:d6:6c:85:b9:54:ca:10:55:d5:35:c7:d9:7c:5d:46: d0:9d:51:3c:d4:68:68:33:48:f6:f9:c2:21:48:02:5f:1f:b1: 2d:3d:c1:d8:6d:e4:79:0c:9b:2f:77:9a:79:40:09:9f:72:39: 4d:3f:b8:25:41:b7:4d:eb:dc:41:46:6b:f8:88:e0:31:de:4e: f6:71:9f:23:24:d6:6e:76:5e:6b:ac:4e:5b:7c:8f:d1:49:2e: 0b:e4:c7:dc:39:bc:7e:4f:0b:b3:f6:1f:08:c4:35:63:5a:11: 8e:e3:dd:55 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsT1sOIKCG72u/xX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MDUzZjVmMmYtODU4Yi00Y2Y0LThjODctZTFhOTU3MjBhYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBlmD5X0aNsKxFsGVkEYpvzQI2/5ooX8pjv4 1iO/J6h0tnahnEFcVQkf4DI0XFUI0lKxoqgESWsSXPH3PX7MF9S6psGGYYxuyQgm K05u7uQsyUBVaF/JufA1cq9kh5OIRUVTbXva1Jtd2yA16YzXzH7UBTh1dXGUOEsu HRnFUT4YinHSWwQjErQRzCkszyUcKkAXq4hS3a1zrtrVV0ZjZ9bKOs7f50kWDUM8 sSZZ8FX5r/ntTZaLdwAMX4glnE0s8GmC/EMzmHQQcrtWK6/OvM0ZuwFhwGXtMZ4H INr0ZEDpOHD11BGSgU3e0HcCgl7qyc2efk/xtyNBG39HgXX1XwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCtymhzMmzgrg1XCGZUX7iJUp1l6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTYzZDM4MzktNDAxNS0z NWE3LWIzOGItYjFjMzFiNGE0ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPQMXDRfVniJ+gxi8D2b3Rcq3itm9BOg34TPeInQ7Df09 yBK/McTia9IpsdnTHII4Zd/g2bcj8qYyFtgepgVdAWcoeGbtyD4uDiudcA4V71PB MxqFrzhi9/NQWNw+lETsRe1kVotqEhMA0H2lV4Ltwy146mBapEnRioxM6tbM/N6L yLlXNq0CAtd6H61Mo4PDuKye1myFuVTKEFXVNcfZfF1G0J1RPNRoaDNI9vnCIUgC Xx+xLT3B2G3keQybL3eaeUAJn3I5TT+4JUG3TevcQUZr+IjgMd5O9nGfIyTWbnZe a6xOW3yP0UkuC+TH3Dm8fk8Ls/YfCMQ1Y1oRjuPdVQ== -----END CERTIFICATE-----Generated at Wed Oct 8 23:35:54 2025 by rpki-client