$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa File: 2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa (raw, json) Hash identifier: 8FGCsXi5pciBvF8LRopnPEKnGLfSkDn4lhfCuXkANPc= Subject key identifier: D9:EE:31:8B:B2:7A:AE:72:97:B1:07:30:D0:C2:DC:0C:B0:7C:77:08 Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Certificate serial: 010D0C9F4328584B3DB7043A184A18FFA9112300 Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 64.95.199.48/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:04:3a:18:4a:18:ff:a9:11:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=7ec8ac7f-acb1-463e-bb80-4d68889bbef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:ab:8a:e7:af:1a:7f:6c:fd:55:46:30:8a: 26:a5:cf:48:ed:82:69:3c:27:5c:87:a4:f6:96:19: 50:66:58:4e:0a:5e:ab:64:c5:af:fe:9a:dd:34:e0: ae:5b:f1:d5:dc:41:b4:b9:b4:16:4e:65:9e:bb:8b: f9:42:45:69:2c:a2:41:8a:08:16:a2:69:e2:97:99: a5:07:65:1f:1b:83:11:ca:7a:f2:4d:2e:36:ea:8f: ad:09:b6:22:db:72:67:a1:8c:60:bf:a4:5c:10:8e: 45:0f:73:a6:b4:d6:47:2f:12:26:26:a1:3f:df:7a: d1:a1:c7:fd:0c:a5:7a:23:9d:b6:e7:de:59:cf:d4: 85:cf:d7:85:75:29:7f:6b:e2:97:0d:03:58:c2:57: 52:ad:e1:26:e6:0b:f9:7a:80:98:af:a6:49:a3:bb: 54:91:b9:1a:60:44:d3:1e:98:f9:cf:89:2f:0b:99: 69:84:a4:2f:51:a2:b9:dc:c9:e6:33:76:49:a8:d6: 30:5d:06:f3:c1:e7:ea:55:ba:4c:2b:bf:39:76:2e: 4c:c6:13:c4:0b:a2:b7:26:a7:b5:e2:91:7b:ae:e9: 10:36:dd:73:cb:8c:7f:63:df:68:1c:50:3d:33:68: cd:de:0e:26:6d:80:65:d0:6f:4d:f6:08:01:23:54: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:31:8B:B2:7A:AE:72:97:B1:07:30:D0:C2:DC:0C:B0:7C:77:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2ea41de4-2808-3ddb-96dd-9c277c38dec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl X509v3 Authority Key Identifier: keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer sbgp-ipAddrBlock: critical IPv4: 64.95.199.48/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5f:55:00:86:d0:40:6a:df:78:ec:cd:8a:e7:b5:bc:33:3e: be:a8:4d:25:21:39:48:08:2e:8d:5b:57:24:f6:b3:9b:e4:96: 6e:45:e8:e2:3f:d9:fa:16:0f:10:2d:9a:22:0d:f9:c2:75:82: d0:ee:8c:2c:56:74:12:97:a0:92:da:6c:97:f2:8d:58:b3:3b: cc:56:ab:72:ce:12:0a:c1:ab:c1:4a:2b:2f:19:09:cb:84:e5: bf:0d:b7:2b:8b:12:26:46:c8:b1:1d:c8:91:dc:83:94:ae:fa: 5f:99:01:1c:cb:c7:ea:04:84:62:eb:e4:99:51:75:75:df:1e: 8b:63:c9:33:09:b6:ba:ac:2f:24:bf:7a:bf:9e:71:6f:49:de: ef:31:3e:13:c0:0a:a3:09:c3:a3:c7:af:60:67:a6:3c:ec:c1: aa:90:f7:f7:c1:a0:36:0d:30:d1:fc:09:6e:b2:26:0d:45:15: 9a:9f:47:af:51:41:5b:f6:5c:cd:df:38:64:84:09:d2:2d:52: 21:b0:dc:2e:6c:b6:09:0a:3c:c1:5b:bf:4e:ca:8f:11:c4:22: fd:29:7c:d2:b1:9f:76:4c:35:cc:a0:68:23:94:05:b6:70:4f: 62:98:74:fc:1c:b0:8d:cc:15:b1:96:db:41:41:a1:84:3b:89: 4a:84:05:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs9twQ6GEoY/6kRIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk OTFkMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk N2VjOGFjN2YtYWNiMS00NjNlLWJiODAtNGQ2ODg4OWJiZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoWriuevGn9s/VVGMIompc9I7YJpPCdch6T2 lhlQZlhOCl6rZMWv/prdNOCuW/HV3EG0ubQWTmWeu4v5QkVpLKJBiggWomnil5ml B2UfG4MRynryTS426o+tCbYi23JnoYxgv6RcEI5FD3OmtNZHLxImJqE/33rRocf9 DKV6I522595Zz9SFz9eFdSl/a+KXDQNYwldSreEm5gv5eoCYr6ZJo7tUkbkaYETT Hpj5z4kvC5lphKQvUaK53MnmM3ZJqNYwXQbzwefqVbpMK785di5MxhPEC6K3Jqe1 4pF7rukQNt1zy4x/Y99oHFA9M2jN3g4mbYBl0G9N9ggBI1S1FwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNnuMYuyeq5yl7EHMNDC3AywfHcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvMmVhNDFkZTQtMjgwOC0z ZGRiLTk2ZGQtOWMyNzdjMzhkZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm NWI3MWQ5MWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEQF/HMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkX1UAhtBAat947M2K57W8Mz6+qE0lITlICC6NW1ck9rOb5JZuReji P9n6Fg8QLZoiDfnCdYLQ7owsVnQSl6CS2myX8o1YszvMVqtyzhIKwavBSisvGQnL hOW/DbcrixImRsixHciR3IOUrvpfmQEcy8fqBIRi6+SZUXV13x6LY8kzCba6rC8k v3q/nnFvSd7vMT4TwAqjCcOjx69gZ6Y87MGqkPf3waA2DTDR/AlusiYNRRWan0ev UUFb9lzN3zhkhAnSLVIhsNwubLYJCjzBW79Oyo8RxCL9KXzSsZ92TDXMoGgjlAW2 cE9imHT8HLCNzBWxlttBQaGEO4lKhAVd -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:24 2025 by rpki-client