$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa File: 2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa (raw, json) Hash identifier: D0/iQGZBI0qmvvW/3qMDm9H2yr2MCUc5waP0tX3v2wg= Subject key identifier: EC:19:F5:32:BB:B0:4D:E0:2B:6D:DB:1D:71:71:8D:C6:8F:61:4C:9D Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B3F1C60686D87AB098A6905C0 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 64.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:60:68:6d:87:ab:09:8a:69:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=f4fa0c36-f92b-49e2-85d9-e79c1fee1c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:18:1a:5b:da:ac:5e:52:0c:ce:d1:16:87: bb:f9:68:d6:7a:30:bf:8d:bc:f1:db:7e:89:d6:e6: 1c:73:b0:e3:e0:39:30:0b:9d:72:97:89:a6:ad:20: d2:3b:98:54:78:df:74:b9:b8:b4:d2:aa:d4:16:cd: ba:45:f4:3b:f2:d6:1b:18:43:73:8f:62:3d:73:7b: 55:4f:ef:47:20:ed:48:ae:92:f0:9b:6c:bc:8c:7b: 3a:2f:25:1b:fc:9a:e5:82:d0:59:8c:dd:ae:7d:eb: 64:12:81:72:fb:57:dd:a5:47:67:2d:25:be:50:27: 00:d9:db:5f:ab:13:24:cb:61:4a:56:a4:96:fd:90: 3f:d1:b7:7f:1e:49:af:0e:84:0b:44:c6:a1:17:2f: e1:f5:eb:0b:52:f9:ce:77:22:63:f3:c5:16:1b:a9: 31:a0:f2:07:a6:cd:e8:54:11:03:57:7a:be:46:0b: 93:78:47:f8:4e:a4:a3:fa:d7:c4:70:b3:d3:bf:77: 56:24:cf:e3:d8:66:01:91:a8:f0:4a:c1:38:fd:2f: 5b:ba:d8:31:e9:4f:7c:ba:8e:46:1a:0b:2d:6b:7f: 79:74:74:33:6f:1e:f6:ce:07:d4:31:b8:ca:8d:f3: db:50:3b:85:8f:6d:13:2f:d7:50:30:66:72:13:7b: f8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:F5:32:BB:B0:4D:E0:2B:6D:DB:1D:71:71:8D:C6:8F:61:4C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2d:09:28:e5:b0:26:e6:5f:06:17:ca:1a:52:a3:be:81:5f: 9f:d2:da:d7:70:68:fe:e7:65:25:8c:08:df:91:79:39:5a:e2: 2d:cf:5b:47:55:53:46:17:c3:de:5d:16:77:a0:3b:b9:a6:ef: 97:a4:4e:99:6b:03:97:a4:9e:de:08:0a:d3:5f:c4:62:99:5d: 43:ab:d7:f6:fd:70:bd:86:ba:70:0a:b4:f2:30:b0:32:de:c0: e5:17:e7:03:9a:7b:68:00:28:31:bf:ce:18:3f:11:b7:8f:28: b6:d3:c1:38:e6:70:a7:83:0b:47:a5:f7:6d:3a:f9:ae:0b:d4: 8f:2e:15:4c:cb:51:36:06:43:83:1d:60:08:98:91:cb:9a:36: ac:54:7b:01:db:32:82:1f:04:ea:a4:4a:77:08:8f:44:bd:67: d4:70:79:d7:76:20:19:23:1f:3c:b4:2b:cf:c9:1d:aa:bd:64: 08:2f:7e:86:97:c4:45:70:72:21:0d:f4:b4:fd:83:bc:69:07: 95:cb:c2:98:ff:0a:0b:78:7a:65:e9:3f:7e:09:be:27:15:e2: 37:28:70:83:3a:cf:5f:4a:75:3c:78:c0:e4:84:ad:4c:f2:ca: 54:a2:8e:3f:39:83:94:15:f2:57:78:62:91:53:94:1b:b2:7f: d3:53:0c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGBobYerCYppBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk ZjRmYTBjMzYtZjkyYi00OWUyLTg1ZDktZTc5YzFmZWUxYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGcYGlvarF5SDM7RFoe7+WjWejC/jbzx236J 1uYcc7Dj4DkwC51yl4mmrSDSO5hUeN90ubi00qrUFs26RfQ78tYbGENzj2I9c3tV T+9HIO1IrpLwm2y8jHs6LyUb/JrlgtBZjN2ufetkEoFy+1fdpUdnLSW+UCcA2dtf qxMky2FKVqSW/ZA/0bd/HkmvDoQLRMahFy/h9esLUvnOdyJj88UWG6kxoPIHps3o VBEDV3q+RguTeEf4TqSj+tfEcLPTv3dWJM/j2GYBkajwSsE4/S9butgx6U98uo5G Ggsta395dHQzbx72zgfUMbjKjfPbUDuFj20TL9dQMGZyE3v4bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwZ9TK7sE3gK23bHXFxjcaPYUydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMjE2MmFlNTctN2UyOC0z NGNiLWE2ZDEtNGM3ZWJkN2M2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgtCSjlsCbmXwYXyhpSo76BX5/S2tdwaP7nZSWMCN+ReTla4i3PW0dV U0YXw95dFnegO7mm75ekTplrA5eknt4ICtNfxGKZXUOr1/b9cL2GunAKtPIwsDLe wOUX5wOae2gAKDG/zhg/EbePKLbTwTjmcKeDC0el9206+a4L1I8uFUzLUTYGQ4Md YAiYkcuaNqxUewHbMoIfBOqkSncIj0S9Z9Rwedd2IBkjHzy0K8/JHaq9ZAgvfoaX xEVwciEN9LT9g7xpB5XLwpj/Cgt4emXpP34JvicV4jcocIM6z19KdTx4wOSErUzy ylSijj85g5QV8ld4YpFTlBuyf9NTDCA= -----END CERTIFICATE-----Generated at Mon Oct 27 10:04:37 2025 by rpki-client