$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3f2bd787-a305-35bd-95c3-67eb7985d427.roa File: 3f2bd787-a305-35bd-95c3-67eb7985d427.roa (raw, json) Hash identifier: BoILZhCZDNF2VaIjH3RSQYT3g0JeENh01T/pFaz03qA= Subject key identifier: D3:83:79:6C:78:45:EA:17:70:C8:17:96:3B:BD:F7:07:7A:17:00:06 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B0B76AA665B79C27BE8C98DC0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3f2bd787-a305-35bd-95c3-67eb7985d427.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 7018 IP address blocks: 64.22.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:aa:66:5b:79:c2:7b:e8:c9:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=4cec0176-9d4e-414e-ada4-61660755f1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:2c:e7:62:c8:03:2f:74:a7:3a:5f:66:f0: 24:6e:d9:e3:c8:3e:eb:88:6f:15:02:09:aa:2a:6b: 3d:6c:c9:06:ce:47:b8:b3:05:be:c9:d3:8f:26:79: 64:d8:35:32:7c:3b:a1:7e:76:00:4c:19:67:b3:82: 51:ab:9b:79:3f:2d:ac:37:2a:96:9d:ab:ca:60:8c: 36:e4:2c:54:b0:78:9c:35:65:f2:fa:0e:5e:d6:47: fe:b0:d4:64:ea:f9:bc:2b:38:9f:6c:b7:20:ba:38: c8:6e:93:93:30:e5:56:b8:05:83:02:f2:8b:9b:2d: 5f:a6:73:d3:d9:2e:55:f3:14:48:98:77:c6:ce:a2: a4:52:a2:b6:73:0b:af:d6:d1:b8:6a:fa:e2:75:8c: 5d:0c:a6:3c:87:9b:de:aa:88:e2:2d:d9:0f:8a:63: df:18:a4:ae:34:19:a1:a7:df:36:6d:ea:af:c8:95: ab:52:1b:c1:f7:4f:b2:e0:79:bf:b0:c6:1b:2b:23: 12:55:d1:52:c1:4c:b1:03:6c:33:4f:1d:ab:67:b8: d3:71:0e:11:b1:c5:93:af:bc:05:d9:91:34:3b:17: 41:27:d6:84:8d:1c:2a:a1:e7:fa:e2:f9:d7:41:5e: 09:d0:81:be:b8:60:8d:93:39:96:c4:ed:8a:c3:09: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:83:79:6C:78:45:EA:17:70:C8:17:96:3B:BD:F7:07:7A:17:00:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3f2bd787-a305-35bd-95c3-67eb7985d427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:59:2b:00:43:b6:83:95:91:eb:b3:79:3d:52:84:32:d9:3a: 70:d5:3c:64:54:7a:68:99:14:2f:60:44:f4:c9:65:e9:ab:13: f0:95:30:ed:44:05:97:21:ca:ce:14:ef:83:1a:5d:27:16:30: 29:32:0f:2b:6f:58:6f:bf:84:c2:f7:9e:2f:5b:f9:fb:07:35: d7:11:61:1a:16:a8:6d:68:be:ef:99:cc:0e:23:5c:14:b2:74: 04:4d:26:ba:6a:2b:f6:f0:b1:fc:f5:19:cd:4a:ca:ca:49:a3: b9:5c:07:b4:76:9b:f9:ac:f4:36:3c:b5:47:ea:b2:15:99:32: 78:bf:ae:35:10:33:a6:89:97:90:a1:a0:0a:53:01:ce:fa:c2: 4c:49:ac:35:58:e2:51:77:8a:4c:14:7f:5a:e3:48:57:30:d6: 43:c8:9c:41:7f:df:5b:01:a5:c2:9e:9a:ea:37:2b:fe:98:90: 3c:74:56:6b:cd:d1:92:9c:7f:e4:9d:75:3f:c1:67:ad:ba:18: 01:66:a1:b1:27:41:4c:6b:1e:9d:4c:59:62:60:79:87:ec:15: f3:87:db:94:0b:b9:9a:ea:0a:19:56:04:28:a9:37:af:d6:e9: 19:a1:f0:44:80:26:ea:52:fd:e3:b2:c1:f3:13:d4:05:4d:19: c8:86:85:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqpmW3nCe+jJjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NGNlYzAxNzYtOWQ0ZS00MTRlLWFkYTQtNjE2NjA3NTVmMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV8s52LIAy90pzpfZvAkbtnjyD7riG8VAgmq Kms9bMkGzke4swW+ydOPJnlk2DUyfDuhfnYATBlns4JRq5t5Py2sNyqWnavKYIw2 5CxUsHicNWXy+g5e1kf+sNRk6vm8KzifbLcgujjIbpOTMOVWuAWDAvKLmy1fpnPT 2S5V8xRImHfGzqKkUqK2cwuv1tG4avridYxdDKY8h5veqojiLdkPimPfGKSuNBmh p982beqvyJWrUhvB90+y4Hm/sMYbKyMSVdFSwUyxA2wzTx2rZ7jTcQ4RscWTr7wF 2ZE0OxdBJ9aEjRwqoef64vnXQV4J0IG+uGCNkzmWxO2KwwnFAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNODeWx4ReoXcMgXlju99wd6FwAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvM2YyYmQ3ODctYTMwNS0z NWJkLTk1YzMtNjdlYjc5ODVkNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJZKwBDtoOVkeuzeT1ShDLZOnDVPGRUemiZFC9gRPTJZemrE/CVMO1E BZchys4U74MaXScWMCkyDytvWG+/hML3ni9b+fsHNdcRYRoWqG1ovu+ZzA4jXBSy dARNJrpqK/bwsfz1Gc1KyspJo7lcB7R2m/ms9DY8tUfqshWZMni/rjUQM6aJl5Ch oApTAc76wkxJrDVY4lF3ikwUf1rjSFcw1kPInEF/31sBpcKemuo3K/6YkDx0VmvN 0ZKcf+SddT/BZ626GAFmobEnQUxrHp1MWWJgeYfsFfOH25QLuZrqChlWBCipN6/W 6Rmh8ESAJupS/eOywfMT1AVNGciGhc0= -----END CERTIFICATE-----Generated at Sat Oct 11 14:57:08 2025 by rpki-client