$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f73780b7-ec61-3709-a3a5-6e5619154494.roa File: f73780b7-ec61-3709-a3a5-6e5619154494.roa (raw, json) Hash identifier: cf+HxkzezOHlt7K5fv0vSYutERZgCiy81oAfAXCS7/o= Subject key identifier: 62:50:A8:9F:A7:42:58:6B:74:5F:E9:63:57:96:67:1C:13:5B:B0:4F Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B4701623B1D2D5ADDED278D80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f73780b7-ec61-3709-a3a5-6e5619154494.roa Signing time: Mon 22 Sep 2025 08:52:53 +0000 ROA not before: Mon 22 Sep 2025 08:52:53 +0000 ROA not after: Sun 21 Dec 2025 09:52:53 +0000 asID: 9304 IP address blocks: 64.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:01:62:3b:1d:2d:5a:dd:ed:27:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 22 08:52:53 2025 GMT Not After : Dec 21 09:52:53 2025 GMT Subject: CN=15be4923-96db-4c92-b9c8-1f05a7342834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:ae:be:95:fb:e4:b7:3e:05:4d:ac:c6:98: cd:dc:fb:97:dd:1a:bb:53:cc:3f:6a:5b:61:f9:9b: 4f:8a:99:08:e2:21:48:40:11:2a:23:b5:f8:d9:38: 50:33:67:c0:ed:a1:4e:09:51:a2:04:3c:4d:5c:98: 8c:b2:e6:e2:a5:81:47:45:a5:38:d9:ae:29:f4:77: 3a:f5:0c:0b:b4:aa:49:86:a7:87:95:52:83:41:fa: 6f:83:e1:fd:2a:55:5c:0e:f5:4e:17:24:26:b8:da: ae:3f:bf:d9:cd:19:4c:57:0c:03:0e:ae:cc:81:6d: ea:46:68:24:6f:a2:69:de:61:5a:07:0b:6a:4a:db: 9c:b3:5a:5e:09:82:55:02:f4:c1:76:d7:a6:f3:f6: 7e:81:4e:30:d8:07:6a:64:db:cd:da:8c:ec:21:8b: 3d:f8:28:8b:e2:4d:13:2e:e6:4e:63:c4:49:02:47: 1a:30:1a:51:a5:e4:1d:5f:34:41:b9:84:ec:04:18: 91:5c:b3:17:4b:bc:37:31:83:b3:f5:b6:ca:f6:ed: 05:4d:15:ca:da:bb:af:6e:92:c0:e3:56:fe:6e:68: 42:7f:59:48:76:91:ea:55:8d:81:d7:ef:22:31:77: 23:20:b9:05:95:ea:fd:a4:bf:53:03:93:d7:a0:ae: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:A8:9F:A7:42:58:6B:74:5F:E9:63:57:96:67:1C:13:5B:B0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f73780b7-ec61-3709-a3a5-6e5619154494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:25:39:c1:8e:9f:ed:f1:cd:ea:03:eb:ad:2f:16:9d:8b:fb: c6:73:e2:d9:de:95:8b:4d:b5:ff:4b:9a:d6:93:56:7a:42:2e: e1:fc:50:cb:e2:45:42:4e:01:cd:62:5b:35:a5:60:aa:75:64: 28:d9:2f:24:2a:14:26:6e:83:2d:4f:e5:55:a0:26:39:90:7b: 6e:cc:34:bb:2b:d5:f7:6e:26:9a:db:0a:81:aa:ee:eb:eb:fe: ab:5b:89:ad:25:f6:1d:6c:50:16:83:e4:b0:f8:af:ad:1f:51: 26:f1:1b:ed:62:9f:83:7d:ad:8d:29:39:d6:84:6d:1e:10:d0: b0:7d:62:bc:ac:ed:ae:c8:be:95:0f:c2:fa:1c:3d:c5:64:50: 60:b4:7d:7a:3c:4a:81:47:90:fa:01:bb:45:08:82:99:98:97: b1:4b:b2:3a:3d:08:3c:ed:f0:37:d2:87:9d:61:38:f8:de:85: 5c:26:82:c5:34:54:a5:28:cb:8a:f4:83:5b:de:42:f6:94:50: ab:d0:32:c6:93:53:60:f5:98:a7:e9:81:5e:eb:14:b9:77:7c: 01:a5:c9:49:88:c2:be:cd:5f:59:0a:1f:c3:12:a6:0c:e7:3e: 53:6b:9d:4b:83:33:70:42:33:e1:6d:a1:02:58:88:a1:31:c4: 5b:0b:79:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHAWI7HS1a3e0njYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkyMjA4NTI1M1oXDTI1MTIyMTA5NTI1M1owLzEtMCsGA1UEAxMk MTViZTQ5MjMtOTZkYi00YzkyLWI5YzgtMWYwNWE3MzQyODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtSuvpX75Lc+BU2sxpjN3PuX3Rq7U8w/alth +ZtPipkI4iFIQBEqI7X42ThQM2fA7aFOCVGiBDxNXJiMsubipYFHRaU42a4p9Hc6 9QwLtKpJhqeHlVKDQfpvg+H9KlVcDvVOFyQmuNquP7/ZzRlMVwwDDq7MgW3qRmgk b6Jp3mFaBwtqStucs1peCYJVAvTBdtem8/Z+gU4w2AdqZNvN2ozsIYs9+CiL4k0T LuZOY8RJAkcaMBpRpeQdXzRBuYTsBBiRXLMXS7w3MYOz9bbK9u0FTRXK2ruvbpLA 41b+bmhCf1lIdpHqVY2B1+8iMXcjILkFler9pL9TA5PXoK5OkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJQqJ+nQlhrdF/pY1eWZxwTW7BPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZjczNzgwYjctZWM2MS0z NzA5LWEzYTUtNmU1NjE5MTU0NDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGElOcGOn+3xzeoD660vFp2L+8Zz4tnelYtNtf9LmtaTVnpCLuH8UMvi RUJOAc1iWzWlYKp1ZCjZLyQqFCZugy1P5VWgJjmQe27MNLsr1fduJprbCoGq7uvr /qtbia0l9h1sUBaD5LD4r60fUSbxG+1in4N9rY0pOdaEbR4Q0LB9Yrys7a7IvpUP wvocPcVkUGC0fXo8SoFHkPoBu0UIgpmYl7FLsjo9CDzt8DfSh51hOPjehVwmgsU0 VKUoy4r0g1veQvaUUKvQMsaTU2D1mKfpgV7rFLl3fAGlyUmIwr7NX1kKH8MSpgzn PlNrnUuDM3BCM+FtoQJYiKExxFsLeUg= -----END CERTIFICATE-----Generated at Sat Oct 11 14:55:05 2025 by rpki-client