$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa File: 5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa (raw, json) Hash identifier: rxXIvgYRiDRRssf4bAXxNCu5ho77GVOcjmk81Ty9sI8= Subject key identifier: BB:96:5D:EC:28:23:49:BA:52:E3:C0:E1:E4:D7:B8:C8:E1:EC:99:53 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B0B76B5B1F23C88D9B5FD9D80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 64.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b5:b1:f2:3c:88:d9:b5:fd:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=c307c62b-7adc-41fb-97a7-c07ea1dab50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:c4:f6:a4:e2:21:10:9d:a9:f5:8b:73:88: 3e:80:91:bb:59:21:e8:88:a7:8d:c6:3b:6b:9b:2d: 42:1c:22:9c:f4:18:c0:77:16:43:e1:6e:ee:73:2a: e9:b4:94:55:49:34:76:42:e1:94:54:6e:c9:9e:fa: de:37:2c:44:c8:40:43:a5:8f:f6:b8:95:96:3e:44: 91:98:09:9f:7c:c0:f3:ec:a4:9e:ff:0b:84:9f:16: 97:2d:a4:c9:89:32:2b:d6:18:94:db:d6:db:c6:c4: 88:4b:b3:fb:73:e9:02:05:cd:1a:a9:fc:59:38:eb: 30:71:ee:32:61:d0:96:f4:a1:77:d5:68:89:00:6a: 35:c8:8d:cb:9c:fc:ad:23:3a:0b:c3:1b:08:ff:73: 18:59:3e:5d:e2:ee:34:8d:49:b3:54:5e:7d:cb:77: 86:ea:d8:5d:4f:ce:ad:e3:24:fd:8d:b2:69:c2:29: 81:72:2a:ac:77:4a:44:8d:6e:8a:f2:ec:35:fa:06: 25:65:6a:0b:07:f3:c2:b7:01:98:df:ba:6f:04:eb: f5:58:d4:48:23:49:57:7a:de:0f:1c:3b:9e:52:b2: 6e:04:b4:6f:6e:7c:cd:76:75:a8:da:9e:f0:5f:c2: 11:34:70:93:12:bb:cc:01:06:ad:21:7b:93:e3:d3: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:96:5D:EC:28:23:49:BA:52:E3:C0:E1:E4:D7:B8:C8:E1:EC:99:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e7:72:b7:58:d4:a2:a6:ba:3f:4d:c9:23:9f:f0:a6:79:5a: 50:10:b2:7b:9e:15:d3:1c:59:e8:33:c3:67:df:8b:03:a6:2b: 73:ec:9c:af:b2:dd:72:35:9e:58:15:f7:33:c2:d4:7c:03:70: 19:ad:0a:74:ae:16:07:24:82:00:7e:3f:dc:0c:d9:02:03:37: 3f:a1:5c:06:04:ed:cb:21:70:74:1e:d2:04:90:e1:d7:66:7f: ea:e1:42:95:f4:a1:e8:d8:46:c2:0d:5b:20:c0:4f:5d:d6:2c: 25:dc:ea:9f:3b:53:b4:3b:41:7c:f7:af:f2:5a:46:fc:53:06: 2c:15:50:cf:ac:01:a5:f6:3d:2a:7c:74:f3:82:44:ef:e3:a9: 3e:6d:cf:23:63:8b:c9:60:39:10:fd:1e:71:4c:eb:9a:ef:4b: 21:68:1c:d6:bc:7f:7e:5b:3f:27:b2:49:da:df:bd:87:39:35: ca:4d:b1:35:53:b2:ee:89:13:1f:3f:87:31:2d:17:6c:fd:66: b5:b8:c6:f8:1f:b7:5b:3f:69:4d:59:52:27:bc:de:72:0a:fd: 3d:6d:3a:5a:52:3d:0a:6d:fa:55:86:49:bb:c9:39:fd:f0:f2: cc:10:41:86:a0:50:8d:ab:fd:f6:2e:7c:e7:11:0a:19:6a:19: 9b:b4:2e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrWx8jyI2bX9nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YzMwN2M2MmItN2FkYy00MWZiLTk3YTctYzA3ZWExZGFiNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDjE9qTiIRCdqfWLc4g+gJG7WSHoiKeNxjtr my1CHCKc9BjAdxZD4W7ucyrptJRVSTR2QuGUVG7JnvreNyxEyEBDpY/2uJWWPkSR mAmffMDz7KSe/wuEnxaXLaTJiTIr1hiU29bbxsSIS7P7c+kCBc0aqfxZOOswce4y YdCW9KF31WiJAGo1yI3LnPytIzoLwxsI/3MYWT5d4u40jUmzVF59y3eG6thdT86t 4yT9jbJpwimBciqsd0pEjW6K8uw1+gYlZWoLB/PCtwGY37pvBOv1WNRII0lXet4P HDueUrJuBLRvbnzNdnWo2p7wX8IRNHCTErvMAQatIXuT49P3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuWXewoI0m6UuPA4eTXuMjh7JlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNWQ4ZGM0NmEtODMxZC0z OTBiLWFkY2MtM2YxOWEyZmM2MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbncrdY1KKmuj9NySOf8KZ5WlAQsnueFdMcWegzw2ffiwOmK3PsnK+y 3XI1nlgV9zPC1HwDcBmtCnSuFgckggB+P9wM2QIDNz+hXAYE7cshcHQe0gSQ4ddm f+rhQpX0oejYRsINWyDAT13WLCXc6p87U7Q7QXz3r/JaRvxTBiwVUM+sAaX2PSp8 dPOCRO/jqT5tzyNji8lgORD9HnFM65rvSyFoHNa8f35bPyeySdrfvYc5NcpNsTVT su6JEx8/hzEtF2z9ZrW4xvgft1s/aU1ZUie83nIK/T1tOlpSPQpt+lWGSbvJOf3w 8swQQYagUI2r/fYufOcRChlqGZu0Lro= -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:40 2025 by rpki-client