$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa File: 982f6e65-bd39-36a1-a90d-3b469a869a64.roa (raw, json) Hash identifier: NOEFv8GyiHCPZoXP4eycqGBhMymVgB9+nOhHH6gru3c= Subject key identifier: 21:60:70:BB:79:64:E9:DE:47:2E:E9:A8:64:90:35:DE:D5:32:65:1C Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B9B3CE1F6B5CEEBFEB29C24A0 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 397873 IP address blocks: 64.20.208.0/24 maxlen: 24 66.248.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e1:f6:b5:ce:eb:fe:b2:9c:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=734ce73a-6d93-4253-8309-f2896fe0068a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:84:99:84:52:cd:e8:33:60:93:4a:7c:98: ca:91:db:4e:a3:a1:0a:b0:fe:5a:3e:79:c9:8c:5c: 85:96:3c:54:c9:e9:d9:1e:e6:fb:52:92:2d:3e:99: 0b:1b:5b:f0:44:19:40:c1:72:f9:73:8e:fd:fd:d6: 70:d3:67:27:72:fa:b2:23:a5:95:a5:17:56:1d:f0: d3:e6:b0:c2:c3:b9:45:cd:c9:69:74:41:5e:85:33: 55:89:45:6a:ad:67:28:b8:70:77:65:d8:49:42:6f: b3:f7:15:b1:62:f6:e4:ff:5b:48:ee:af:0d:40:4d: 59:7e:c2:76:8b:48:67:6e:ff:ad:77:ab:83:d9:53: a5:bb:e5:83:d9:68:72:14:8b:cc:2c:15:04:0b:cd: 5b:1e:2e:2c:3b:6e:4c:ac:b8:53:50:f6:7b:64:f6: cf:85:63:9a:af:74:c0:0a:19:92:7b:7a:00:6d:8f: 84:7e:d6:f2:63:0f:45:02:13:86:1f:5a:7a:ab:c2: bd:19:ed:c9:7b:3b:a6:79:72:3a:60:14:84:c9:94: c1:4f:1a:09:1c:14:86:f0:02:52:5b:d2:52:c7:3d: 37:50:d9:17:6e:af:dd:6e:56:26:17:fa:5c:da:e4: 63:5d:db:9a:6e:aa:52:dc:b5:48:0d:71:16:9e:d9: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:70:BB:79:64:E9:DE:47:2E:E9:A8:64:90:35:DE:D5:32:65:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.208.0/24 66.248.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bf:0e:7e:0d:24:b1:da:38:28:c3:39:6b:9f:cf:ff:c7:fa: 30:f5:5a:74:7a:fa:c5:71:7c:7c:b6:7c:0f:12:38:f1:6c:e3: d6:fa:f6:ba:4a:c1:2f:2b:c5:01:b7:80:c3:7e:7c:7f:e3:48: 43:2d:08:f1:b8:1a:7a:c7:1d:9c:ef:3c:6c:9e:ae:6d:22:7a: da:85:ab:09:0b:1b:2c:6e:16:ab:10:31:e4:b0:58:97:b2:ee: c0:db:57:e0:27:16:b9:52:35:0b:9c:cb:f3:8b:21:fc:dc:91: a8:d3:45:2e:6b:a0:2f:a0:ff:fa:51:38:95:b2:59:af:bc:84: df:35:49:98:82:2f:6c:44:48:59:03:87:f0:bf:44:3b:05:09: 65:30:a8:09:3f:24:41:0d:59:d2:84:db:f3:df:3d:47:d1:25: 8b:c8:72:5d:4d:8e:dd:df:b1:0b:7e:b4:b5:73:8c:b0:fc:62: f9:78:97:3e:ab:d0:74:22:7c:a2:32:13:ca:3e:b6:ab:61:ab: ab:cf:88:d3:e2:75:4b:15:5f:91:7d:04:44:75:10:1b:c8:81: 1f:2a:e9:d7:19:39:b9:d5:de:12:0a:fd:ef:45:d4:ba:fd:26: 61:0f:3f:68:64:13:f0:a1:5c:79:a4:6a:a8:a2:34:ee:eb:b4: 69:82:c6:23 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEubPOH2tc7r/rKcJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NzM0Y2U3M2EtNmQ5My00MjUzLTgzMDktZjI4OTZmZTAwNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyiEmYRSzegzYJNKfJjKkdtOo6EKsP5aPnnJ jFyFljxUyenZHub7UpItPpkLG1vwRBlAwXL5c479/dZw02cncvqyI6WVpRdWHfDT 5rDCw7lFzclpdEFehTNViUVqrWcouHB3ZdhJQm+z9xWxYvbk/1tI7q8NQE1ZfsJ2 i0hnbv+td6uD2VOlu+WD2WhyFIvMLBUEC81bHi4sO25MrLhTUPZ7ZPbPhWOar3TA ChmSe3oAbY+EftbyYw9FAhOGH1p6q8K9Ge3JezumeXI6YBSEyZTBTxoJHBSG8AJS W9JSxz03UNkXbq/dblYmF/pc2uRjXduabqpS3LVIDXEWntljmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCFgcLt5ZOneRy7pqGSQNd7VMmUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOTgyZjZlNjUtYmQzOS0z NmExLWE5MGQtM2I0NjlhODY5YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBTQAwQA QvjwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADu/Dn4NJLHaOCjDOWufz//H+jD1WnR6+sVxfHy2fA8SOPFs 49b69rpKwS8rxQG3gMN+fH/jSEMtCPG4GnrHHZzvPGyerm0ietqFqwkLGyxuFqsQ MeSwWJey7sDbV+AnFrlSNQucy/OLIfzckajTRS5roC+g//pROJWyWa+8hN81SZiC L2xESFkDh/C/RDsFCWUwqAk/JEENWdKE2/PfPUfRJYvIcl1Njt3fsQt+tLVzjLD8 Yvl4lz6r0HQifKIyE8o+tqthq6vPiNPidUsVX5F9BER1EBvIgR8q6dcZObnV3hIK /e9F1Lr9JmEPP2hkE/ChXHmkaqiiNO7rtGmCxiM= -----END CERTIFICATE-----Generated at Mon Oct 27 10:00:57 2025 by rpki-client