$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/143a534e-3ab2-36ac-a5de-84793e4d7ca5.roa File: 143a534e-3ab2-36ac-a5de-84793e4d7ca5.roa (raw, json) Hash identifier: s7ZuxQd8f6UUtK/yvZo6k31J5U7zfjESX7hOcGveLG0= Subject key identifier: 86:F3:FC:2E:B1:54:9E:7A:4A:CB:4D:58:82:0E:0F:45:02:38:60:95 Certificate issuer: /CN=12de60db-ef00-4011-ac2b-057362ea0602 Certificate serial: 010D0C9F4328584B44B1C3370BDA43E610089B84 Authority key identifier: 34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/143a534e-3ab2-36ac-a5de-84793e4d7ca5.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 36849 IP address blocks: 64.65.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c3:37:0b:da:43:e6:10:08:9b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12de60db-ef00-4011-ac2b-057362ea0602 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=0e896d33-0965-48f6-990e-554cae591db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:11:c4:11:d8:e3:0c:3e:ae:46:46:61:21: b6:66:7b:b3:05:0b:ca:8c:31:99:82:b9:40:9a:83: 79:60:40:72:a4:d3:49:48:df:25:be:15:7b:b1:54: f7:d9:f2:e1:fd:d1:03:fa:a2:c1:be:44:c7:8c:64: a2:2a:e1:4d:2e:c4:71:ae:16:87:b6:97:37:a0:7d: 05:5c:ff:27:0e:61:32:11:23:1e:26:9f:85:81:b5: 22:9d:bf:82:f4:5e:13:4a:95:1f:c1:2c:35:a9:aa: 19:08:75:59:b1:4a:3c:5e:00:d7:8e:6e:d4:62:20: cc:d6:b8:a5:a3:97:0f:92:67:9b:a0:cc:94:ac:ae: e2:5a:f7:ee:83:72:ef:ad:aa:8a:59:8a:49:5b:cb: 3f:f0:68:6c:73:09:c9:68:c5:52:a4:37:1c:65:b1: 8f:73:bb:79:74:69:6a:b4:47:46:d5:bd:a7:51:fe: e5:90:ad:73:a6:e0:80:42:6e:51:ac:98:31:07:89: 3b:29:b8:6c:c8:c3:2e:c3:8a:3a:05:94:d4:a1:9f: 82:fb:f5:24:a3:01:e0:66:0f:67:18:1a:ab:58:fc: 56:6e:dc:c9:6d:e4:98:7e:1d:52:86:d7:ae:15:10: 3e:37:f2:da:19:ec:c2:60:ad:23:0d:e8:29:52:02: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F3:FC:2E:B1:54:9E:7A:4A:CB:4D:58:82:0E:0F:45:02:38:60:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/143a534e-3ab2-36ac-a5de-84793e4d7ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl X509v3 Authority Key Identifier: keyid:34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer sbgp-ipAddrBlock: critical IPv4: 64.65.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6a:7e:c4:33:e6:11:77:49:2b:71:f1:10:9f:07:6e:4d:ca: 98:7a:95:46:49:0c:62:7e:ed:0e:92:49:74:ba:e8:26:c2:4a: 2b:cc:2a:75:fd:4f:c0:35:51:4b:de:83:f0:b7:b0:b9:00:5b: 16:0c:35:a4:51:44:0a:1c:cc:26:2d:89:24:09:14:26:d8:b1: d1:c8:66:34:07:c6:4f:3c:db:da:ff:27:6e:e4:b7:69:74:32: 5c:76:09:48:29:4e:24:b9:13:15:14:e9:66:04:ba:d7:19:10: 83:4c:ac:0c:31:21:f4:38:e0:1b:d2:3b:e0:e0:09:c0:ff:2f: dc:38:de:7c:c1:aa:a8:a3:56:f8:b8:c0:ae:d7:20:a3:0f:a6: ee:c6:6b:46:4a:a4:a9:2b:91:6a:36:24:27:7b:95:4d:b4:c7: 10:bc:26:b4:a3:f5:37:85:d4:e1:28:36:70:a8:58:df:1e:80: 65:c6:16:12:70:c5:8e:fb:23:c1:70:ec:5b:29:64:d9:cf:09: 08:27:f7:dc:67:ea:55:fd:07:2b:ff:09:28:3c:4a:b9:d7:30: f5:f3:ce:05:79:9c:4b:d2:82:9d:86:3c:27:17:37:4e:fa:21: ce:12:1c:43:12:94:fb:3c:8d:f2:34:3c:84:48:d0:45:b7:b8: 7e:5a:48:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscM3C9pD5hAIm4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJkZTYwZGItZWYwMC00MDExLWFjMmItMDU3MzYyZWEw NjAyMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MGU4OTZkMzMtMDk2NS00OGY2LTk5MGUtNTU0Y2FlNTkxZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3oRxBHY4ww+rkZGYSG2ZnuzBQvKjDGZgrlA moN5YEBypNNJSN8lvhV7sVT32fLh/dED+qLBvkTHjGSiKuFNLsRxrhaHtpc3oH0F XP8nDmEyESMeJp+FgbUinb+C9F4TSpUfwSw1qaoZCHVZsUo8XgDXjm7UYiDM1ril o5cPkmeboMyUrK7iWvfug3LvraqKWYpJW8s/8GhscwnJaMVSpDccZbGPc7t5dGlq tEdG1b2nUf7lkK1zpuCAQm5RrJgxB4k7KbhsyMMuw4o6BZTUoZ+C+/UkowHgZg9n GBqrWPxWbtzJbeSYfh1ShteuFRA+N/LaGezCYK0jDegpUgLDAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbz/C6xVJ56SstNWIIOD0UCOGCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMmRl NjBkYi1lZjAwLTQwMTEtYWMyYi0wNTczNjJlYTA2MDIvMTQzYTUzNGUtM2FiMi0z NmFjLWE1ZGUtODQ3OTNlNGQ3Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTJkZTYwZGItZWYwMC00MDExLWFj MmItMDU3MzYyZWEwNjAyLzEyZGU2MGRiLWVmMDAtNDAxMS1hYzJiLTA1NzM2MmVh MDYwMi5jcmwwHwYDVR0jBBgwFoAUNO2lGPcXDoqeCqs0cB5HzQBQtHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMmRlNjBkYi1lZjAwLTQwMTEtYWMyYi0wNTcz NjJlYTA2MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpqfsQz5hF3SStx8RCfB25Nyph6lUZJDGJ+7Q6SSXS66CbCSivMKnX9 T8A1UUveg/C3sLkAWxYMNaRRRAoczCYtiSQJFCbYsdHIZjQHxk8829r/J27kt2l0 Mlx2CUgpTiS5ExUU6WYEutcZEINMrAwxIfQ44BvSO+DgCcD/L9w43nzBqqijVvi4 wK7XIKMPpu7Ga0ZKpKkrkWo2JCd7lU20xxC8JrSj9TeF1OEoNnCoWN8egGXGFhJw xY77I8Fw7FspZNnPCQgn99xn6lX9Byv/CSg8SrnXMPXzzgV5nEvSgp2GPCcXN076 Ic4SHEMSlPs8jfI0PIRI0EW3uH5aSNA= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:22 2025 by rpki-client