$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa File: eae38249-949c-338e-a384-9f61ab8838c3.roa (raw, json) Hash identifier: /wzqw6SRpD3wzTTIOYcBHONJXdjjktdV0cAcikR6UYs= Subject key identifier: F4:34:29:51:D2:FB:0D:E5:4B:F8:97:E3:6F:35:5D:CD:F8:F9:9F:FA Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584AFC1BF1ADD668E13E4E0A9BF0 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62856 IP address blocks: 64.207.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f1:ad:d6:68:e1:3e:4e:0a:9b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ec0a63b2-7cff-407f-a09e-c4e80aba5079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:59:8c:39:c4:5b:c4:fa:2f:9e:a3:e7:17: 41:84:35:a3:25:57:43:6e:e5:46:d5:de:e0:14:52: cf:43:f1:e9:98:50:01:c8:b4:43:40:a4:12:44:ad: 23:e0:fe:ff:e3:b6:be:a0:80:fb:85:d5:2a:66:34: 2e:53:58:bb:5a:41:62:9d:b3:98:ef:d7:1c:87:7c: c2:ea:a1:a3:1d:16:bb:6d:9e:f8:7b:46:ab:eb:11: f0:fe:c2:51:97:4b:5e:a7:8d:90:92:bb:89:1c:80: e8:93:cb:72:19:25:3d:df:df:00:ff:62:c1:ec:fe: 2a:d4:8c:f8:fc:66:12:b1:4e:25:12:b1:be:f7:89: 67:ef:91:33:54:84:5e:74:38:e3:a1:80:29:e8:1e: 8b:6b:3c:aa:2c:ba:57:2f:d2:6b:7b:ca:76:e2:55: 6e:39:8e:0a:b8:4e:a0:a9:cf:3d:63:8b:f6:34:e9: ea:cb:bb:d7:27:b0:cd:bc:8d:5f:55:f9:d9:ab:e8: c7:0c:80:3a:e0:a3:e5:f5:d9:c8:41:b5:7a:09:92: eb:1c:71:72:b5:fb:8f:f3:3d:be:5d:7b:d9:8d:4f: 65:f4:0a:52:5c:be:16:dc:e2:d3:bb:59:ec:75:45: 51:8e:88:a0:69:ec:90:b5:8a:0d:d4:73:d5:82:7d: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:34:29:51:D2:FB:0D:E5:4B:F8:97:E3:6F:35:5D:CD:F8:F9:9F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 64.207.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2c:c6:8f:1b:17:2e:9d:06:3c:4b:e9:d8:9f:b7:07:67:4d: e7:27:f1:4c:ad:5c:36:31:b9:88:43:ba:2d:88:76:85:d3:00: 10:14:8a:46:30:85:9c:1f:ec:ff:01:b4:f4:63:f7:1a:b8:ef: 09:6f:e8:fa:9f:ae:17:b4:b1:d3:28:3e:6f:ee:2b:d3:11:5e: 96:ca:15:ce:4d:d5:f8:be:ed:e1:02:32:0a:b6:76:e2:45:c9: d2:00:00:5f:4c:68:62:da:74:d8:92:33:d4:0c:f0:e0:89:8e: d6:d4:d2:8d:6f:2d:fd:2e:58:b7:60:f3:a1:0a:a5:a4:21:a7: 63:1a:06:77:b7:ef:52:f5:c7:12:f0:6d:c4:83:ea:33:ee:a1: cb:0f:c5:6d:cf:f8:ec:40:ab:14:bc:43:cf:f2:63:3e:2c:bb: 29:c4:8e:c0:d5:3e:f2:c5:df:c8:d5:89:e7:94:47:3f:bd:99: db:7c:ad:64:5a:ec:f5:2a:15:9b:40:1d:d9:df:34:39:64:b2: 88:5a:c9:1f:d1:23:6c:e7:80:85:ca:e8:13:93:3a:2a:ff:15: 81:fb:a8:87:dd:75:8e:ff:33:0f:8a:35:80:8b:6f:8c:31:f9: 0e:e8:57:bb:8c:a5:0a:ed:ea:a8:d9:56:1b:36:a6:a9:c2:6a: 46:da:51:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/Gt1mjhPk4Km/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWMwYTYzYjItN2NmZi00MDdmLWEwOWUtYzRlODBhYmE1MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8pZjDnEW8T6L56j5xdBhDWjJVdDbuVG1d7g FFLPQ/HpmFAByLRDQKQSRK0j4P7/47a+oID7hdUqZjQuU1i7WkFinbOY79cch3zC 6qGjHRa7bZ74e0ar6xHw/sJRl0tep42QkruJHIDok8tyGSU9398A/2LB7P4q1Iz4 /GYSsU4lErG+94ln75EzVIRedDjjoYAp6B6LazyqLLpXL9Jre8p24lVuOY4KuE6g qc89Y4v2NOnqy7vXJ7DNvI1fVfnZq+jHDIA64KPl9dnIQbV6CZLrHHFytfuP8z2+ XXvZjU9l9ApSXL4W3OLTu1nsdUVRjoigaeyQtYoN1HPVgn31rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ0KVHS+w3lS/iX4281Xc34+Z/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZWFlMzgyNDktOTQ5Yy0z MzhlLWEzODQtOWY2MWFiODgzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAsxo8bFy6dBjxL6diftwdnTecn8UytXDYxuYhDui2IdoXTABAUikYw hZwf7P8BtPRj9xq47wlv6Pqfrhe0sdMoPm/uK9MRXpbKFc5N1fi+7eECMgq2duJF ydIAAF9MaGLadNiSM9QM8OCJjtbU0o1vLf0uWLdg86EKpaQhp2MaBne371L1xxLw bcSD6jPuocsPxW3P+OxAqxS8Q8/yYz4suynEjsDVPvLF38jVieeURz+9mdt8rWRa 7PUqFZtAHdnfNDlksohayR/RI2zngIXK6BOTOir/FYH7qIfddY7/Mw+KNYCLb4wx +Q7oV7uMpQrt6qjZVhs2pqnCakbaUcc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:34 2025 by rpki-client