$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b3be3d-5b7d-3a93-a006-758da9aafd95.roa File: 33b3be3d-5b7d-3a93-a006-758da9aafd95.roa (raw, json) Hash identifier: XuISKMRkSMgzhJkmD3F5l2O95VpKvBUNUrGsfa7GuN4= Subject key identifier: E2:A1:78:F8:9C:13:F3:F7:D4:D9:A9:0F:9E:ED:60:3E:81:E9:FC:1C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B28398527E9A7182F17498880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b3be3d-5b7d-3a93-a006-758da9aafd95.roa Signing time: Thu 11 Sep 2025 08:15:56 +0000 ROA not before: Thu 11 Sep 2025 08:15:56 +0000 ROA not after: Wed 10 Dec 2025 09:15:56 +0000 asID: 401776 IP address blocks: 64.6.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:39:85:27:e9:a7:18:2f:17:49:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 11 08:15:56 2025 GMT Not After : Dec 10 09:15:56 2025 GMT Subject: CN=d0f63c7f-45cb-4eac-8225-19e93e21adba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:1e:db:32:2e:96:e4:8a:71:c0:7b:85:66: 3a:f0:74:bb:a3:fc:65:bb:fa:f8:ef:77:38:bf:6d: 58:b0:16:e8:48:e7:0d:47:3b:a9:4f:a0:10:90:bc: f5:54:db:06:a9:dc:23:c2:ea:ce:a7:63:35:a3:fa: 9d:1a:19:a6:4e:7e:2c:ee:b6:45:3b:01:ad:72:c9: 5d:98:ba:b1:86:85:6a:70:33:2e:19:6b:dd:55:d2: bc:5b:7f:e3:3e:bc:ba:b1:40:fb:24:11:30:4d:85: e2:37:24:3e:f5:d7:75:c5:c9:2d:43:0b:66:ef:81: a7:e8:33:5e:c1:51:25:74:6f:30:a3:4f:b9:79:67: bb:64:7b:4b:75:1d:a1:87:96:15:f8:f0:95:d6:76: 1a:c5:2e:b9:cf:ea:c8:ed:0e:65:f7:0b:db:08:4a: 88:a6:20:c7:4c:96:d5:e1:4b:27:62:53:ac:66:39: 52:84:62:91:65:b7:a8:57:7c:08:3e:d9:86:a9:1d: f8:0f:20:89:a2:a3:eb:43:5e:fd:7d:b5:d3:52:41: 35:dc:67:3a:c1:69:d8:c9:78:c6:13:8d:b3:6c:ec: bc:33:72:05:ad:7a:58:56:66:fc:97:f1:82:aa:81: fb:6c:dd:bb:53:d4:08:48:bb:c1:a5:2e:92:82:f6: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:78:F8:9C:13:F3:F7:D4:D9:A9:0F:9E:ED:60:3E:81:E9:FC:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b3be3d-5b7d-3a93-a006-758da9aafd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.6.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:47:a3:cf:94:33:91:30:ff:55:cc:2e:cc:44:ff:5e:cf:5d: dd:b9:18:5b:5e:20:11:08:ca:9f:16:62:f2:03:fd:f5:cb:99: 34:ee:b3:20:aa:3a:db:8c:74:0a:98:3f:2c:99:1a:96:1d:5d: 13:7c:9a:74:63:17:ad:c2:44:9e:4b:b4:35:fe:36:e8:9e:ea: e0:67:b8:8b:20:bd:98:75:b9:73:47:4e:5c:2f:37:23:de:6f: b1:6c:cc:a0:41:25:dd:a7:fb:17:fa:2b:bd:12:e9:57:74:c6: 04:b8:bf:a3:45:f0:4b:52:45:02:d5:38:70:c0:c6:b2:2a:5c: 5c:93:60:c2:e7:44:42:82:c6:d9:9b:b2:9d:cf:7f:72:94:b1: 86:17:e6:87:4e:15:a0:0b:93:c7:23:57:4d:5b:51:13:bf:af: 45:67:98:40:f6:cc:97:a3:19:44:c2:37:9c:70:2a:68:38:f4: fc:0f:d2:d4:78:b2:be:7d:f4:f2:84:c1:84:8b:63:62:b6:a7: e7:0e:18:78:13:53:ea:a9:8d:3b:ce:4d:cd:f8:de:7b:4b:6b: 5c:0b:1c:0c:6b:9a:d9:e4:f1:64:39:bf:7f:3d:79:ce:52:97: fc:d3:d3:92:f5:4f:5c:ee:ac:1d:e6:1a:ef:46:6f:2b:29:ec: ff:91:5e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoOYUn6acYLxdJiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMTA4MTU1NloXDTI1MTIxMDA5MTU1NlowLzEtMCsGA1UEAxMk ZDBmNjNjN2YtNDVjYi00ZWFjLTgyMjUtMTllOTNlMjFhZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZge2zIuluSKccB7hWY68HS7o/xlu/r473c4 v21YsBboSOcNRzupT6AQkLz1VNsGqdwjwurOp2M1o/qdGhmmTn4s7rZFOwGtcsld mLqxhoVqcDMuGWvdVdK8W3/jPry6sUD7JBEwTYXiNyQ+9dd1xcktQwtm74Gn6DNe wVEldG8wo0+5eWe7ZHtLdR2hh5YV+PCV1nYaxS65z+rI7Q5l9wvbCEqIpiDHTJbV 4UsnYlOsZjlShGKRZbeoV3wIPtmGqR34DyCJoqPrQ179fbXTUkE13Gc6wWnYyXjG E42zbOy8M3IFrXpYVmb8l/GCqoH7bN27U9QISLvBpS6SgvZ1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKhePicE/P31NmpD57tYD6B6fwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiM2JlM2QtNWI3ZC0z YTkzLWEwMDYtNzU4ZGE5YWFmZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtHo8+UM5Ew/1XMLsxE/17PXd25GFteIBEIyp8WYvID/fXLmTTusyCq OtuMdAqYPyyZGpYdXRN8mnRjF63CRJ5LtDX+Nuie6uBnuIsgvZh1uXNHTlwvNyPe b7FszKBBJd2n+xf6K70S6Vd0xgS4v6NF8EtSRQLVOHDAxrIqXFyTYMLnREKCxtmb sp3Pf3KUsYYX5odOFaALk8cjV01bURO/r0VnmED2zJejGUTCN5xwKmg49PwP0tR4 sr599PKEwYSLY2K2p+cOGHgTU+qpjTvOTc343ntLa1wLHAxrmtnk8WQ5v389ec5S l/zT05L1T1zurB3mGu9Gbysp7P+RXuY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:25 2025 by rpki-client