$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa File: efafb3e1-c5fc-3111-b4db-21000f90654c.roa (raw, json) Hash identifier: MF9KkQf2pImV3WK+NUEapbaXCMOBikcwHlg6ZWhU8CA= Subject key identifier: 93:8F:20:70:33:F4:A8:46:49:C8:70:6E:10:CA:62:0B:8E:E9:41:52 Certificate issuer: /CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Certificate serial: 010D0C9F4328584B4B37BE52DDE3BE55C3E4F9A0 Authority key identifier: 7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa Signing time: Tue 23 Sep 2025 21:05:39 +0000 ROA not before: Tue 23 Sep 2025 21:05:39 +0000 ROA not after: Mon 22 Dec 2025 22:05:39 +0000 asID: 401834 IP address blocks: 64.89.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:37:be:52:dd:e3:be:55:c3:e4:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Validity Not Before: Sep 23 21:05:39 2025 GMT Not After : Dec 22 22:05:39 2025 GMT Subject: CN=cb3973c3-00d3-475a-a96a-a6816a7ff133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:5e:60:00:25:18:12:6c:55:18:c9:4c:23: 33:34:b7:b6:7c:18:c2:8e:83:d6:7b:df:40:1e:61: c2:31:73:ec:ee:f9:55:83:9d:9e:b1:dc:ef:d3:48: 27:50:e8:3c:10:96:80:e2:d7:d6:f1:b4:e5:e3:ca: c4:fe:7f:ea:b2:ae:16:45:39:50:47:f3:48:89:bb: 8a:57:2b:61:14:a5:77:e8:63:70:e2:5d:e4:08:53: a8:8c:4f:24:9f:c4:63:e4:98:81:67:eb:57:f2:65: 1c:46:a6:a0:77:2c:ea:90:7f:ca:b1:f4:14:22:68: 0a:4b:4a:2c:2b:dc:e1:10:70:1c:fb:aa:42:f3:b8: 18:43:ac:12:3c:a8:63:31:60:9d:e4:73:9d:9b:70: 68:04:84:86:c3:0b:16:e1:f0:44:b7:b5:83:f9:ad: c6:3f:0b:1d:1f:ad:43:d8:3f:67:33:50:f8:cc:49: de:b0:fc:c9:26:9b:cd:2e:15:08:12:c6:34:d0:2a: 2f:03:42:5b:4d:ac:64:04:da:d5:72:85:95:64:ee: 73:e3:51:2d:5f:27:98:47:e8:65:f3:51:2b:36:8a: 0c:c9:55:2a:18:e6:8a:35:a2:17:43:54:91:5d:e2: a6:8e:05:63:93:46:d7:4b:5c:c2:20:6d:da:00:1c: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8F:20:70:33:F4:A8:46:49:C8:70:6E:10:CA:62:0B:8E:E9:41:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl X509v3 Authority Key Identifier: keyid:7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer sbgp-ipAddrBlock: critical IPv4: 64.89.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8c:fd:f0:02:3f:4d:e3:6c:63:17:0c:d3:fe:ef:3a:b1:d2: 6c:c9:09:43:03:ad:4f:12:9d:8e:e1:e5:55:4b:62:d6:30:ab: 8e:f8:82:b5:e2:d0:fc:de:f1:1a:7d:0f:90:38:f3:60:45:71: 51:30:a9:b7:9e:40:40:43:43:77:e4:6e:f0:04:ea:17:da:e9: 2e:e0:c8:43:31:bd:bd:ee:c2:d5:60:cf:90:e9:bf:78:db:ef: 50:a1:45:89:51:fb:b6:72:9e:1c:00:8d:16:31:09:12:3c:17: ea:cb:3f:16:1c:bb:43:33:18:86:73:35:97:f2:59:6a:be:92: f2:02:26:7e:eb:ff:89:e8:de:c4:49:fd:6f:74:21:bb:6d:f3: 2b:f8:db:1d:9d:1d:1d:3a:5e:8a:29:53:3d:0a:ac:08:50:c5: 38:de:c3:fe:ef:a3:f9:04:3e:43:3b:bd:34:8a:32:7b:10:6c: c3:cb:14:41:4c:2f:e6:c8:01:41:fe:96:ef:85:8b:ab:ce:b6: c0:ae:82:88:75:24:08:7c:82:69:4a:97:30:15:33:bd:54:27: e2:18:79:6f:c3:4a:e1:d1:e5:72:9d:16:a2:f5:02:61:6d:01: 48:f5:f4:44:e8:90:50:11:54:5b:f4:ea:19:6d:48:01:34:70: 4f:cc:a1:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLN75S3eO+VcPk+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJhMWYxNDktYmMwYy00ZjZjLTlmYjUtZTY1NjUxNWQx OTdiMB4XDTI1MDkyMzIxMDUzOVoXDTI1MTIyMjIyMDUzOVowLzEtMCsGA1UEAxMk Y2IzOTczYzMtMDBkMy00NzVhLWE5NmEtYTY4MTZhN2ZmMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojdeYAAlGBJsVRjJTCMzNLe2fBjCjoPWe99A HmHCMXPs7vlVg52esdzv00gnUOg8EJaA4tfW8bTl48rE/n/qsq4WRTlQR/NIibuK VythFKV36GNw4l3kCFOojE8kn8Rj5JiBZ+tX8mUcRqagdyzqkH/KsfQUImgKS0os K9zhEHAc+6pC87gYQ6wSPKhjMWCd5HOdm3BoBISGwwsW4fBEt7WD+a3GPwsdH61D 2D9nM1D4zEnesPzJJpvNLhUIEsY00CovA0JbTaxkBNrVcoWVZO5z41EtXyeYR+hl 81ErNooMyVUqGOaKNaIXQ1SRXeKmjgVjk0bXS1zCIG3aAByghwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOPIHAz9KhGSchwbhDKYguO6UFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMmEx ZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2NTE1ZDE5N2IvZWZhZmIzZTEtYzVmYy0z MTExLWI0ZGItMjEwMDBmOTA2NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjJhMWYxNDktYmMwYy00ZjZjLTlm YjUtZTY1NjUxNWQxOTdiL2YyYTFmMTQ5LWJjMGMtNGY2Yy05ZmI1LWU2NTY1MTVk MTk3Yi5jcmwwHwYDVR0jBBgwFoAUf71LL1xCRG0Mx1o/IOzDdoz1MtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMmExZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2 NTE1ZDE5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiM/fACP03jbGMXDNP+7zqx0mzJCUMDrU8SnY7h5VVLYtYwq474grXi 0Pze8Rp9D5A482BFcVEwqbeeQEBDQ3fkbvAE6hfa6S7gyEMxvb3uwtVgz5Dpv3jb 71ChRYlR+7ZynhwAjRYxCRI8F+rLPxYcu0MzGIZzNZfyWWq+kvICJn7r/4no3sRJ /W90Ibtt8yv42x2dHR06XoopUz0KrAhQxTjew/7vo/kEPkM7vTSKMnsQbMPLFEFM L+bIAUH+lu+Fi6vOtsCugoh1JAh8gmlKlzAVM71UJ+IYeW/DSuHR5XKdFqL1AmFt AUj19ETokFARVFv06hltSAE0cE/MoRk= -----END CERTIFICATE-----Generated at Thu Oct 9 03:07:24 2025 by rpki-client