$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa File: cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa (raw, json) Hash identifier: s4nrDQNxuLB/L7yXTDlFFAUVTY4B/Zn0iHTQRSnXB5w= Subject key identifier: A8:30:61:41:F3:38:FE:C1:C4:2C:8A:82:EB:4C:A4:AE:EB:00:2D:A9 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584AF25677B404AF07CB9A092380 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 21949 IP address blocks: 64.137.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:77:b4:04:af:07:cb:9a:09:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=da476a0e-f4d3-4c04-a046-4f6861b7740c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:b6:fa:c7:0a:81:a4:e2:6d:62:71:eb:39: 60:27:35:4c:01:be:3d:13:40:d7:64:4b:6f:67:8c: 19:0b:f4:54:10:32:fb:61:3f:fc:b1:d8:41:2e:1b: f4:bb:43:bc:c2:9b:35:ac:07:1b:9a:39:da:09:59: e2:3d:1f:2f:67:1d:c5:72:3b:1a:a0:f9:58:b0:58: f9:04:81:cc:5c:fe:39:f8:70:b6:64:30:d3:50:4b: f9:3b:a7:ee:fd:40:a2:43:45:e4:d4:70:9d:99:91: e6:d1:2a:51:64:87:d0:c5:c8:66:03:43:8b:09:00: d1:78:a9:62:14:e6:68:3b:70:c0:74:2a:38:0f:fd: 52:bd:99:94:5e:75:ea:bf:68:04:be:1b:2d:64:f1: 14:65:7d:70:78:80:3b:9e:ed:5c:78:da:99:fc:95: 1c:e5:07:47:4c:b6:63:1d:d3:d0:ed:69:c9:ca:2c: dd:89:b8:5a:4a:97:d0:c4:bc:11:49:7d:a7:99:e9: 1e:07:d5:64:f5:3e:96:39:d5:91:8a:c8:7f:46:d5: f1:03:10:21:3a:f5:3a:5f:8a:22:a2:fd:73:36:ff: 40:b3:3f:25:68:c5:a8:2a:fc:b8:63:b3:a8:b5:77: 44:dd:f4:ef:b7:8f:1a:a9:ac:fe:49:a0:e0:96:06: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:30:61:41:F3:38:FE:C1:C4:2C:8A:82:EB:4C:A4:AE:EB:00:2D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.137.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cf:f5:7a:c7:9c:d4:68:2b:16:d7:62:83:b0:20:c1:53:66: 39:c9:f7:7d:b7:f4:39:c0:b0:64:c2:42:0e:62:f2:70:15:36: 9d:e2:38:e8:21:d0:15:71:28:25:a8:1b:e0:28:ce:34:27:21: f2:92:56:c1:f9:20:de:14:a3:21:3c:46:3c:a1:d1:14:24:0e: 43:47:b2:e8:bb:bf:51:5f:62:71:9a:2b:2f:97:4f:27:e6:74: e4:3e:b1:b9:b3:7c:03:e2:84:cb:be:27:74:f6:ae:d4:ed:00: e0:db:b8:a5:12:e1:a5:9a:58:ff:09:28:7a:6e:49:ed:c9:65: ed:bc:32:fb:ba:0e:5d:a6:e1:ff:98:db:eb:2c:1b:3c:fd:86: 2a:59:df:78:e7:8c:4b:09:86:54:de:19:48:1c:4c:01:6d:2d: 7e:56:6b:e0:fc:70:0a:43:99:90:22:e9:55:cc:b5:3c:e7:4c: e7:df:b6:03:e2:d7:c6:4b:a3:59:5d:3b:35:1a:0e:2b:c2:84: a9:d8:3a:c3:fe:a3:71:20:2c:19:73:a0:a6:11:67:8a:4e:02: c0:9b:69:d6:d0:48:2d:2d:0e:a2:4c:9e:9b:3e:dc:34:16:bb: a7:4d:22:75:db:9b:0e:7f:d2:23:a9:fc:43:59:e6:01:f3:42: e6:aa:ca:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVne0BK8Hy5oJI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZGE0NzZhMGUtZjRkMy00YzA0LWEwNDYtNGY2ODYxYjc3NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoS2+scKgaTibWJx6zlgJzVMAb49E0DXZEtv Z4wZC/RUEDL7YT/8sdhBLhv0u0O8wps1rAcbmjnaCVniPR8vZx3FcjsaoPlYsFj5 BIHMXP45+HC2ZDDTUEv5O6fu/UCiQ0Xk1HCdmZHm0SpRZIfQxchmA0OLCQDReKli FOZoO3DAdCo4D/1SvZmUXnXqv2gEvhstZPEUZX1weIA7nu1ceNqZ/JUc5QdHTLZj HdPQ7WnJyizdibhaSpfQxLwRSX2nmekeB9Vk9T6WOdWRish/RtXxAxAhOvU6X4oi ov1zNv9Asz8laMWoKvy4Y7OotXdE3fTvt48aqaz+SaDglgbWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgwYUHzOP7BxCyKgutMpK7rAC2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FmY2VlZTktNjYyMy0z ZGJjLThiN2ItODdiMDNiMWJkNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTP9XrHnNRoKxbXYoOwIMFTZjnJ93239DnAsGTCQg5i8nAVNp3iOOgh 0BVxKCWoG+AozjQnIfKSVsH5IN4UoyE8Rjyh0RQkDkNHsui7v1FfYnGaKy+XTyfm dOQ+sbmzfAPihMu+J3T2rtTtAODbuKUS4aWaWP8JKHpuSe3JZe28Mvu6Dl2m4f+Y 2+ssGzz9hipZ33jnjEsJhlTeGUgcTAFtLX5Wa+D8cApDmZAi6VXMtTznTOfftgPi 18ZLo1ldOzUaDivChKnYOsP+o3EgLBlzoKYRZ4pOAsCbadbQSC0tDqJMnps+3DQW u6dNInXbmw5/0iOp/ENZ5gHzQuaqytQ= -----END CERTIFICATE-----Generated at Sat Nov 1 02:32:23 2025 by rpki-client