$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ea5bf6f-2072-338d-be2e-833164619395.roa File: 0ea5bf6f-2072-338d-be2e-833164619395.roa (raw, json) Hash identifier: qMSUNJ/sGYqqtPTrfg0SXQUNrcqgOC/zCl2/E/kfrIM= Subject key identifier: 39:D5:8E:02:65:A9:BB:CF:B5:6B:DE:D1:24:A1:08:A7:BF:95:0A:30 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235CF7DB145E543C0C31DBA0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ea5bf6f-2072-338d-be2e-833164619395.roa Signing time: Tue 09 Sep 2025 14:28:19 +0000 ROA not before: Tue 09 Sep 2025 14:28:19 +0000 ROA not after: Mon 08 Dec 2025 15:28:19 +0000 asID: 9304 IP address blocks: 64.81.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5c:f7:db:14:5e:54:3c:0c:31:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:28:19 2025 GMT Not After : Dec 8 15:28:19 2025 GMT Subject: CN=f59a7293-153e-4055-b690-1c50aa77d0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:78:ae:1e:c4:62:0f:fe:66:5d:39:6f:cf: 52:f8:a4:ad:79:29:7d:17:7b:5f:bf:ac:ab:5d:6a: 48:38:72:12:63:c9:d6:6d:a3:78:7d:b9:af:ac:c6: 81:20:89:cc:80:c7:14:88:89:37:c3:3b:5b:ac:e7: e7:bc:a7:b7:a2:ef:e4:63:cc:3a:8e:1f:b8:d7:ec: 11:79:87:52:3e:49:d6:e5:67:19:3c:8a:36:d9:9d: 8b:9c:63:93:2b:1a:22:f6:49:f5:14:b0:ed:1f:7c: 1e:03:3f:55:d4:29:18:e1:6d:77:9a:14:48:df:65: 31:12:06:46:f8:d4:35:11:96:b1:14:e3:32:35:99: 1b:17:fa:0d:22:b5:9d:9b:25:97:8f:ed:1e:71:07: 02:c4:c6:15:ce:61:07:c7:79:5f:d1:a4:78:5a:d1: 15:6e:1f:ba:57:fb:f3:c7:36:b7:e8:ab:02:56:26: 69:f0:80:46:ba:ac:e4:8f:02:5e:99:99:52:61:fe: a4:1d:f5:71:2b:e7:b2:f7:ea:9c:9b:9e:ed:18:f3: c7:6c:09:a8:51:35:d3:e1:75:d0:1e:9d:fa:5e:1a: 27:a5:fc:43:74:ae:4f:ea:48:6c:5d:43:ec:87:49: c2:72:ac:6e:dd:a8:a5:d5:ed:0c:d6:0e:90:54:fe: 34:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D5:8E:02:65:A9:BB:CF:B5:6B:DE:D1:24:A1:08:A7:BF:95:0A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ea5bf6f-2072-338d-be2e-833164619395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1c:68:dd:67:66:55:cb:a3:cc:92:f3:dc:c1:c3:5f:e5:37: 49:19:2d:00:7d:b2:28:bf:c4:90:f8:9e:01:c7:1c:3a:c4:af: a2:61:cc:67:93:68:13:59:04:6a:9c:a0:9e:1a:4c:f0:60:8a: 5c:d3:0e:5c:58:cc:58:af:16:16:43:89:89:49:be:3c:80:e7: 98:91:c7:dd:0b:52:eb:8c:2c:f2:29:67:18:97:3b:2e:29:4a: a9:f4:3d:0b:bd:6d:d6:22:cd:c4:8e:5a:24:21:41:10:8b:3a: dc:c2:b8:9d:8a:40:ad:cb:73:b6:f3:3b:ca:44:7f:2a:13:ba: 5a:06:89:bb:08:7e:d7:4e:6c:62:22:8d:9b:f7:ef:e8:1e:22: 83:ff:4a:b3:f5:c4:05:1d:f2:21:c5:94:f6:dd:6d:29:92:0b: e2:2c:71:f7:9f:03:da:ef:d2:24:ee:1f:96:06:4d:68:03:62: c4:85:5d:7d:ca:ab:c0:6b:62:c0:e7:e9:08:9c:75:dd:48:7a: dc:39:aa:c5:7b:1d:ec:01:65:3c:50:df:d6:c9:96:43:82:f3: a3:14:ce:7b:af:9e:08:1a:36:f0:37:08:18:f4:97:79:18:69: 6e:b3:48:20:7a:e3:fe:87:c6:26:18:8d:f2:f9:94:b4:ef:e1: 08:95:ee:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjXPfbFF5UPAwx26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjgxOVoXDTI1MTIwODE1MjgxOVowLzEtMCsGA1UEAxMk ZjU5YTcyOTMtMTUzZS00MDU1LWI2OTAtMWM1MGFhNzdkMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyth4rh7EYg/+Zl05b89S+KSteSl9F3tfv6yr XWpIOHISY8nWbaN4fbmvrMaBIInMgMcUiIk3wztbrOfnvKe3ou/kY8w6jh+41+wR eYdSPknW5WcZPIo22Z2LnGOTKxoi9kn1FLDtH3weAz9V1CkY4W13mhRI32UxEgZG +NQ1EZaxFOMyNZkbF/oNIrWdmyWXj+0ecQcCxMYVzmEHx3lf0aR4WtEVbh+6V/vz xza36KsCViZp8IBGuqzkjwJemZlSYf6kHfVxK+ey9+qcm57tGPPHbAmoUTXT4XXQ Hp36XhonpfxDdK5P6khsXUPsh0nCcqxu3ail1e0M1g6QVP402QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnVjgJlqbvPtWve0SShCKe/lQowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGVhNWJmNmYtMjA3Mi0z MzhkLWJlMmUtODMzMTY0NjE5Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFGjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMcaN1nZlXLo8yS89zBw1/lN0kZLQB9sii/xJD4ngHHHDrEr6JhzGeT aBNZBGqcoJ4aTPBgilzTDlxYzFivFhZDiYlJvjyA55iRx90LUuuMLPIpZxiXOy4p Sqn0PQu9bdYizcSOWiQhQRCLOtzCuJ2KQK3Lc7bzO8pEfyoTuloGibsIftdObGIi jZv37+geIoP/SrP1xAUd8iHFlPbdbSmSC+IscfefA9rv0iTuH5YGTWgDYsSFXX3K q8BrYsDn6Qicdd1Ietw5qsV7HewBZTxQ39bJlkOC86MUznuvnggaNvA3CBj0l3kY aW6zSCB64/6HxiYYjfL5lLTv4QiV7pY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:36 2025 by rpki-client