$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json) Hash identifier: 6GKIzphzywLn0f2QZSOs+aGYZEIVeK+JXIy5zli6cKo= Subject key identifier: 38:16:3C:28:48:79:E1:BC:2E:80:65:7F:81:AD:52:14:72:F1:37:67 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584BA39D231DB1B947381932A580 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 396998 IP address blocks: 64.68.193.0/24 maxlen: 24 2620:49:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:23:1d:b1:b9:47:38:19:32:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=dd47b721-891d-464f-a58b-1fcd032a1caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:b9:92:17:21:8b:d6:6f:87:5b:a6:5e:9e: 33:b1:fc:62:f9:6e:ae:e7:49:f5:f0:42:c1:36:f6: 67:19:f0:65:18:e9:77:1e:8b:a3:d8:82:f6:9e:15: c5:92:f5:45:24:76:a1:1a:87:b8:77:87:fb:a6:28: 2c:15:a0:ad:c3:96:c3:05:64:27:03:b3:e1:1c:57: 41:59:81:5c:4f:8c:04:03:34:7a:f0:d1:59:df:62: f3:19:08:1e:05:57:d7:f2:6b:96:9b:1c:33:2c:b4: cb:ef:23:1f:52:17:3d:1a:e2:52:3f:eb:07:73:94: 08:bf:e3:46:75:54:d6:a1:39:41:e0:a7:24:6f:ba: 45:68:64:7d:bc:69:59:22:33:ad:b8:5a:dd:f2:c3: 8b:7f:d5:3c:df:2d:1b:ac:97:4e:5c:bd:70:9f:40: f3:69:cb:91:48:89:c2:1a:8b:52:34:26:48:46:af: d7:5e:46:54:fa:69:5c:fe:57:62:bb:41:80:45:c2: ae:a5:cf:5a:09:df:d4:53:ec:0d:89:a3:8d:6e:05: 54:c2:f2:b1:ae:8f:d1:02:c9:e9:c0:d0:b3:f5:f3: a3:5a:b8:b0:62:5f:d1:d5:ea:cd:98:1a:37:19:e4: 1b:0b:5f:97:4b:73:6e:49:a6:1b:9e:4d:91:be:f2: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:3C:28:48:79:E1:BC:2E:80:65:7F:81:AD:52:14:72:F1:37:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.193.0/24 IPv6: 2620:49:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:37:b7:6e:5f:62:3d:73:90:77:35:a0:38:9b:cf:86:d9:23: 25:cf:e0:49:04:92:dc:e3:42:8e:c2:a9:8c:02:a0:25:67:51: 1a:c4:83:b1:9c:b1:87:6d:1c:b0:ba:89:fc:6f:6e:ff:69:f1: 1d:97:64:01:85:3a:c5:6c:a7:b5:ac:92:c2:78:e5:01:b1:ff: 62:08:0b:46:3a:4b:49:a6:04:69:18:bf:d1:b0:93:e0:4f:68: 35:96:d7:79:92:d0:dd:29:51:d1:74:6d:dd:f4:71:64:c2:38: ca:d3:8f:4f:51:2f:cd:36:6f:d3:a7:60:a9:97:5f:f6:67:7b: e3:a3:86:7a:11:fa:dd:6b:1b:39:9d:09:d8:8f:62:5c:c1:ad: 89:aa:f8:df:86:b0:91:0b:8a:dc:cc:e1:50:0f:c4:0f:36:28: 13:e6:ed:a3:cf:ac:25:64:5b:9b:35:81:f0:29:db:11:35:32: 53:5c:9f:68:da:77:eb:55:47:a6:e8:df:5f:bd:71:5a:92:e6: 42:1f:71:d4:54:ff:7e:c2:d1:cc:86:37:95:be:aa:70:b0:35: e8:07:26:f9:7f:36:28:7b:31:17:01:1a:0e:ce:df:9f:85:a7: 05:65:5b:77:d1:40:ed:2c:32:bc:49:ea:a2:f9:96:43:42:44: 5a:40:95:5f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEujnSMdsblHOBkypYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGQ0N2I3MjEtODkxZC00NjRmLWE1OGItMWZjZDAzMmExY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIm5khchi9Zvh1umXp4zsfxi+W6u50n18ELB NvZnGfBlGOl3Houj2IL2nhXFkvVFJHahGoe4d4f7pigsFaCtw5bDBWQnA7PhHFdB WYFcT4wEAzR68NFZ32LzGQgeBVfX8muWmxwzLLTL7yMfUhc9GuJSP+sHc5QIv+NG dVTWoTlB4Kckb7pFaGR9vGlZIjOtuFrd8sOLf9U83y0brJdOXL1wn0DzacuRSInC GotSNCZIRq/XXkZU+mlc/ldiu0GARcKupc9aCd/UU+wNiaONbgVUwvKxro/RAsnp wNCz9fOjWriwYl/R1erNmBo3GeQbC1+XS3NuSaYbnk2RvvL/7wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDgWPChIeeG8LoBlf4GtUhRy8TdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAODe3bl9iPXOQdzWgOJvPhtkjJc/gSQSS 3ONCjsKpjAKgJWdRGsSDsZyxh20csLqJ/G9u/2nxHZdkAYU6xWyntaySwnjlAbH/ YggLRjpLSaYEaRi/0bCT4E9oNZbXeZLQ3SlR0XRt3fRxZMI4ytOPT1EvzTZv06dg qZdf9md746OGehH63WsbOZ0J2I9iXMGtiar434awkQuK3MzhUA/EDzYoE+bto8+s JWRbmzWB8CnbETUyU1yfaNp361VHpujfX71xWpLmQh9x1FT/fsLRzIY3lb6qcLA1 6Acm+X82KHsxFwEaDs7fn4WnBWVbd9FA7SwyvEnqovmWQ0JEWkCVXw== -----END CERTIFICATE-----Generated at Mon Oct 27 21:36:57 2025 by rpki-client