$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa File: 3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa (raw, json) Hash identifier: k8nDzflTjxguXwQGzSim7GixbY2VAaUn9WELYeGxc18= Subject key identifier: D3:DC:43:52:A8:0D:58:AA:5C:5B:90:8F:EB:7D:85:E6:B2:1A:30:73 Certificate issuer: /CN=0b3e78b3-bf49-4038-b7a9-71936b1370d8 Certificate serial: 010D0C9F4328584B747B1EF7B13FB9593F6C20C0 Authority key identifier: A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa Signing time: Wed 08 Oct 2025 15:49:33 +0000 ROA not before: Wed 08 Oct 2025 15:49:33 +0000 ROA not after: Tue 06 Jan 2026 16:49:33 +0000 asID: 398465 IP address blocks: 64.7.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:7b:1e:f7:b1:3f:b9:59:3f:6c:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b3e78b3-bf49-4038-b7a9-71936b1370d8 Validity Not Before: Oct 8 15:49:33 2025 GMT Not After : Jan 6 16:49:33 2026 GMT Subject: CN=11d15eae-03c8-4cc4-8cbd-0c33e2b440bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:72:d1:38:f1:00:f5:70:aa:bc:e8:ae:10: 9b:d8:f0:4e:c1:32:98:68:c7:f9:df:d0:b3:db:40: 1e:ed:2f:e5:c1:b8:b4:41:03:8a:f3:7e:19:82:f7: e2:a9:db:ed:0e:b9:7e:88:45:43:82:53:23:43:c5: c2:02:43:a5:08:e6:4a:c7:ed:25:b5:c9:43:51:64: 8c:25:24:31:47:f5:93:96:84:6d:a7:af:f0:5c:55: 8e:32:91:9e:ec:71:5a:f5:30:75:91:5d:f6:ba:10: 27:26:db:6b:3e:92:d1:4a:7f:66:c9:b9:ef:6a:2e: 79:95:3e:15:ed:da:85:de:0f:b6:df:4a:fd:80:36: d7:e1:f9:77:b8:68:c8:b9:06:b5:18:f4:30:b5:73: ba:92:f4:3a:c0:2e:c9:dd:db:a4:87:d0:0e:76:ea: 5f:79:11:9c:25:2b:a0:b9:30:84:50:78:a3:39:f2: 8b:b0:b1:2b:76:9a:40:7d:98:51:54:88:f4:b9:32: e5:ba:ac:5e:63:89:34:a7:6c:95:ef:79:db:e9:a8: 3c:d9:38:de:8b:20:5f:98:3c:60:43:87:11:ce:e5: f1:3d:cf:02:9a:a9:93:b4:14:29:2c:29:97:54:40: fb:fa:1d:27:fb:72:b8:1a:3c:59:04:08:ed:32:7c: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DC:43:52:A8:0D:58:AA:5C:5B:90:8F:EB:7D:85:E6:B2:1A:30:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.crl X509v3 Authority Key Identifier: keyid:A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer sbgp-ipAddrBlock: critical IPv4: 64.7.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6f:67:ce:d7:87:3f:54:66:18:0b:c0:1c:25:43:83:73:5a: fc:31:20:1d:ba:96:93:e8:e3:af:cc:27:97:da:5f:0f:c0:4a: 41:90:26:a4:ca:72:c3:87:5f:a9:a4:99:b1:b8:ef:4e:7e:bf: b7:c6:38:e5:8c:6d:00:4f:b0:7d:64:9a:4d:96:3f:86:24:65: df:75:2e:f1:04:ce:57:43:69:ee:12:7a:18:e8:24:39:6f:44: da:86:5d:84:71:1a:ad:af:66:92:13:d8:fd:de:e2:a1:a7:2b: 6f:64:a6:36:76:58:28:74:76:64:9f:7a:ce:43:d0:ab:1e:76: 62:18:c1:91:d2:47:cd:b4:5d:af:e6:9a:dd:2d:5d:61:16:9a: f8:9f:9d:2c:7c:6c:49:18:03:0b:01:c1:15:3a:3e:d3:0f:4d: 95:b9:33:92:52:68:d1:c1:c5:9b:df:d9:3f:f6:3a:a3:aa:5f: 04:c4:bd:f3:2f:de:f6:87:a2:9f:a2:a4:49:82:80:fa:37:61: b2:30:46:8f:7d:54:9b:f4:d5:ed:8d:27:35:14:d5:e8:54:c6: 59:92:8f:aa:94:cf:0a:61:c3:0b:5e:f0:5c:fa:c8:53:89:2d: ed:a4:99:c0:36:ad:9a:0c:93:0c:ad:93:06:1b:e5:7f:2a:21: 77:43:04:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0ex73sT+5WT9sIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIzZTc4YjMtYmY0OS00MDM4LWI3YTktNzE5MzZiMTM3 MGQ4MB4XDTI1MTAwODE1NDkzM1oXDTI2MDEwNjE2NDkzM1owLzEtMCsGA1UEAxMk MTFkMTVlYWUtMDNjOC00Y2M0LThjYmQtMGMzM2UyYjQ0MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR1y0TjxAPVwqrzorhCb2PBOwTKYaMf539Cz 20Ae7S/lwbi0QQOK834ZgvfiqdvtDrl+iEVDglMjQ8XCAkOlCOZKx+0ltclDUWSM JSQxR/WTloRtp6/wXFWOMpGe7HFa9TB1kV32uhAnJttrPpLRSn9mybnvai55lT4V 7dqF3g+230r9gDbX4fl3uGjIuQa1GPQwtXO6kvQ6wC7J3dukh9AOdupfeRGcJSug uTCEUHijOfKLsLErdppAfZhRVIj0uTLluqxeY4k0p2yV73nb6ag82TjeiyBfmDxg Q4cRzuXxPc8CmqmTtBQpLCmXVED7+h0n+3K4GjxZBAjtMnyduQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPcQ1KoDViqXFuQj+t9heayGjBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjNl NzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkzNmIxMzcwZDgvM2U0ZjBjMGItNDI0OC0z ZjZmLWFiMmUtNjc1YzY3MDM3MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGIzZTc4YjMtYmY0OS00MDM4LWI3 YTktNzE5MzZiMTM3MGQ4LzBiM2U3OGIzLWJmNDktNDAzOC1iN2E5LTcxOTM2YjEz NzBkOC5jcmwwHwYDVR0jBBgwFoAUpFuyQ0GHn1gOa0QTvacIFnIr2lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjNlNzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkz NmIxMzcwZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNvZ87Xhz9UZhgLwBwlQ4NzWvwxIB26lpPo46/MJ5faXw/ASkGQJqTK csOHX6mkmbG4705+v7fGOOWMbQBPsH1kmk2WP4YkZd91LvEEzldDae4SehjoJDlv RNqGXYRxGq2vZpIT2P3e4qGnK29kpjZ2WCh0dmSfes5D0KsedmIYwZHSR820Xa/m mt0tXWEWmvifnSx8bEkYAwsBwRU6PtMPTZW5M5JSaNHBxZvf2T/2OqOqXwTEvfMv 3vaHop+ipEmCgPo3YbIwRo99VJv01e2NJzUU1ehUxlmSj6qUzwphwwte8Fz6yFOJ Le2kmcA2rZoMkwytkwYb5X8qIXdDBIg= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:35 2025 by rpki-client