$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa File: 4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa (raw, json) Hash identifier: BeIu+RNQRXxbIqroVCYBHkgkouNAybFKHcP2Wi4ZmOI= Subject key identifier: 8E:1A:3E:F5:1D:0F:98:7E:E5:9B:0F:38:94:9E:47:2C:72:AE:34:B1 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584B2FC1BABCAB9D1B3C4E46D740 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 26967 IP address blocks: 64.136.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ba:bc:ab:9d:1b:3c:4e:46:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=4801ca6d-aec1-4230-8ba2-19c520f4570e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ab:c9:a0:11:5e:72:1f:7a:c6:22:8f:70:6c: 0d:23:97:bc:20:d2:6a:4d:cd:a3:0d:d2:d3:e6:85: 11:1f:05:d8:25:60:18:ef:89:f1:0a:bc:bc:84:00: 69:90:97:76:1a:d2:73:1f:92:b3:66:d2:5d:17:9d: b2:35:9d:f8:73:7b:19:66:30:b4:01:74:48:54:a4: 81:14:10:04:7f:21:17:5d:6e:55:78:80:d1:98:bc: 6d:b9:8c:36:26:bc:3b:0e:62:ad:c7:37:31:8f:b8: 3e:63:d2:f1:77:06:03:34:19:a7:78:0b:da:e4:a8: db:39:70:b2:85:5b:ce:11:04:3e:92:f2:ca:2f:b6: de:d4:0a:cb:91:76:ea:64:50:99:8a:e3:e1:da:29: e0:a2:9e:64:03:e5:17:81:62:ba:d5:14:a4:66:98: 18:77:a0:02:bd:1f:36:12:b2:57:fb:40:04:bd:d3: 0b:37:d2:e5:18:91:c5:4e:6e:7a:6a:3d:e6:80:8d: 83:86:86:89:20:e4:58:27:6e:b1:30:dd:7d:bf:c7: 0e:56:e5:20:a9:79:0e:0c:f0:99:09:bb:ec:55:c8: ba:f7:60:75:a1:2e:9a:93:92:76:1c:0f:78:76:2f: e0:93:b1:38:cd:f5:85:8a:5d:41:74:8d:6d:97:e1: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:3E:F5:1D:0F:98:7E:E5:9B:0F:38:94:9E:47:2C:72:AE:34:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f1:26:d9:3f:ef:76:1b:0a:4b:8d:a7:4b:b7:c5:2e:c4:d7: 60:e7:2d:90:d2:b4:d9:0f:c7:63:1f:05:26:9c:18:19:e9:9f: 0f:3a:5c:6b:8e:f4:3d:cb:7f:69:7a:23:64:70:a8:7a:7e:78: 52:10:d5:6f:89:25:da:2c:bd:ea:27:e8:5d:37:fb:83:11:81: 9f:24:76:73:82:68:51:00:ca:1c:5c:0d:25:78:9f:81:ef:35: bb:c5:cd:1f:36:cd:38:30:cc:db:b6:15:3d:c0:98:37:13:03: 22:b5:0b:27:e2:06:52:d8:43:c5:bd:32:24:a6:98:93:9b:bb: e3:fd:d1:5d:14:60:2e:da:d6:29:1f:46:ea:d1:3b:1d:f9:e9: 87:27:7a:6a:fe:d5:2b:ee:97:de:21:64:74:03:e5:38:57:a0: 54:9f:f9:b4:7d:48:72:86:ec:26:e1:70:34:67:7d:05:df:80: 90:f8:f1:ca:e3:13:93:52:63:64:25:b9:4b:92:65:24:d8:c9: e0:57:5a:d5:45:73:38:a7:1a:56:57:8f:31:44:12:9d:db:81: b8:2b:e4:17:92:99:99:d6:17:00:e9:8c:f9:d1:5c:f7:c0:aa: 93:c2:db:04:07:b5:c5:f5:2f:f8:c4:83:83:a8:d8:d0:ee:9b: bd:ec:58:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbq8q50bPE5G10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NDgwMWNhNmQtYWVjMS00MjMwLThiYTItMTljNTIwZjQ1NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46vJoBFech96xiKPcGwNI5e8INJqTc2jDdLT 5oURHwXYJWAY74nxCry8hABpkJd2GtJzH5KzZtJdF52yNZ34c3sZZjC0AXRIVKSB FBAEfyEXXW5VeIDRmLxtuYw2Jrw7DmKtxzcxj7g+Y9LxdwYDNBmneAva5KjbOXCy hVvOEQQ+kvLKL7be1ArLkXbqZFCZiuPh2ingop5kA+UXgWK61RSkZpgYd6ACvR82 ErJX+0AEvdMLN9LlGJHFTm56aj3mgI2DhoaJIORYJ26xMN19v8cOVuUgqXkODPCZ CbvsVci692B1oS6ak5J2HA94di/gk7E4zfWFil1BdI1tl+EPeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4aPvUdD5h+5ZsPOJSeRyxyrjSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNDU4OWU3MmQtZjVmYi0z NjMwLWFiZmYtNmVlZThkMjFkOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPxJtk/73YbCkuNp0u3xS7E12DnLZDStNkPx2MfBSacGBnpnw86XGuO 9D3Lf2l6I2RwqHp+eFIQ1W+JJdosveon6F03+4MRgZ8kdnOCaFEAyhxcDSV4n4Hv NbvFzR82zTgwzNu2FT3AmDcTAyK1CyfiBlLYQ8W9MiSmmJObu+P90V0UYC7a1ikf RurROx356Ycnemr+1Svul94hZHQD5ThXoFSf+bR9SHKG7CbhcDRnfQXfgJD48crj E5NSY2QluUuSZSTYyeBXWtVFczinGlZXjzFEEp3bgbgr5BeSmZnWFwDpjPnRXPfA qpPC2wQHtcX1L/jEg4Oo2NDum73sWPY= -----END CERTIFICATE-----Generated at Sun Nov 2 21:29:41 2025 by rpki-client