$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa File: 8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa (raw, json) Hash identifier: dgvvi5IlmtSAvNg3c8Ddb1lLjA9+laD7lPJEddWrUPg= Subject key identifier: 4E:73:FC:8B:4E:46:3B:5A:E6:E0:03:66:07:BC:E8:9A:AE:78:EB:96 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571CED7806912A366A20300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 64.114.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:ce:d7:80:69:12:a3:66:a2:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=b7e2ab7c-1be4-4de7-b898-16f6ea659ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:17:7e:ad:62:d2:22:c9:35:5c:81:b7:18: 63:b2:7a:d8:9d:77:ec:35:19:65:90:2e:84:85:f4: 11:71:9b:2a:af:f6:9f:6c:0d:d8:a1:e2:8d:ac:e9: 58:72:9a:45:13:06:16:2a:53:87:89:a2:9f:e7:ff: 91:02:65:7c:0a:ee:f8:5b:24:cb:86:62:f8:14:9a: 26:2d:52:e1:45:bf:c1:98:8e:c2:d2:c2:19:38:5d: 90:5f:46:c7:11:26:59:de:55:3b:2f:a7:db:05:f2: 79:cd:ab:01:c7:ca:e5:3e:4d:09:33:7e:47:ad:19: b0:b0:36:43:34:2b:dc:93:bc:d9:d0:5b:22:99:a2: ae:e4:f6:04:3d:28:d6:56:86:05:b9:d3:4f:af:c3: 40:96:04:a1:46:ab:8c:6b:6f:9e:e7:38:53:02:52: 81:96:28:ea:8d:2a:6c:2a:2b:98:da:a5:b2:f7:72: 57:35:e7:a3:99:f5:4b:6d:18:69:5c:0d:c1:69:70: 15:b6:7a:9f:19:d6:a0:28:67:02:81:cc:45:05:ae: b4:1c:13:18:c0:64:bd:db:10:50:60:c8:66:24:ce: 94:eb:c9:c7:3d:10:24:37:66:85:3c:06:27:19:7a: 03:65:f2:34:a2:f3:d1:39:84:09:3e:21:85:3e:69: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:FC:8B:4E:46:3B:5A:E6:E0:03:66:07:BC:E8:9A:AE:78:EB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:96:1a:6f:fb:d5:8d:a4:67:dd:59:e9:20:fc:16:fc:6a:4b: 2a:f7:ec:f2:87:c6:62:a8:75:5f:82:63:28:2a:7f:13:eb:66: 34:8a:d8:4e:38:4b:73:3a:b3:78:fd:9f:d8:96:c7:15:d5:00: 4b:44:56:92:5b:9a:8c:54:1c:39:86:39:5a:17:4c:fd:99:a4: d3:e4:af:6c:be:32:c5:de:62:db:27:76:2a:9d:40:77:23:0b: b7:09:3a:59:49:76:77:50:80:e8:e0:88:bd:83:8c:41:fe:62: 48:7c:b4:7f:d5:2a:ef:ca:d0:e6:05:1a:5a:36:6f:77:ca:43: a8:76:85:b5:2c:45:10:3c:8a:47:66:3e:47:ba:9d:0d:cb:17: 62:28:5a:c6:d2:20:96:24:4b:74:a5:73:29:b9:60:89:93:f4: fa:84:d2:69:dc:5d:1e:68:4e:40:29:5c:8a:33:cd:81:bc:8e: 4a:13:65:af:a2:34:41:2e:ea:d0:d0:24:ba:58:23:b3:59:e7: 1b:7d:ab:92:7c:a2:6b:c2:e4:c4:f9:1f:79:c3:4a:98:19:7a: 43:b4:fb:af:00:88:02:ab:27:72:3b:9c:5e:9d:29:51:f1:d4: 7b:af:bc:73:d1:bb:7d:f5:20:70:fe:56:ea:52:15:7b:cb:6f: cd:08:3a:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcc7XgGkSo2aiAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YjdlMmFiN2MtMWJlNC00ZGU3LWI4OTgtMTZmNmVhNjU5ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpcXfq1i0iLJNVyBtxhjsnrYnXfsNRllkC6E hfQRcZsqr/afbA3YoeKNrOlYcppFEwYWKlOHiaKf5/+RAmV8Cu74WyTLhmL4FJom LVLhRb/BmI7C0sIZOF2QX0bHESZZ3lU7L6fbBfJ5zasBx8rlPk0JM35HrRmwsDZD NCvck7zZ0FsimaKu5PYEPSjWVoYFudNPr8NAlgShRquMa2+e5zhTAlKBlijqjSps KiuY2qWy93JXNeejmfVLbRhpXA3BaXAVtnqfGdagKGcCgcxFBa60HBMYwGS92xBQ YMhmJM6U68nHPRAkN2aFPAYnGXoDZfI0ovPROYQJPiGFPml5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5z/ItORjta5uADZge86JqueOuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGI1NmMzZDUtMTY0MC0z YWYzLWJmZjQtZmQ0ZDY0MTg5ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmWGm/71Y2kZ91Z6SD8FvxqSyr37PKHxmKodV+CYygqfxPrZjSK2E44 S3M6s3j9n9iWxxXVAEtEVpJbmoxUHDmGOVoXTP2ZpNPkr2y+MsXeYtsndiqdQHcj C7cJOllJdndQgOjgiL2DjEH+Ykh8tH/VKu/K0OYFGlo2b3fKQ6h2hbUsRRA8ikdm Pke6nQ3LF2IoWsbSIJYkS3Slcym5YImT9PqE0mncXR5oTkApXIozzYG8jkoTZa+i NEEu6tDQJLpYI7NZ5xt9q5J8omvC5MT5H3nDSpgZekO0+68AiAKrJ3I7nF6dKVHx 1HuvvHPRu331IHD+VupSFXvLb80IOm4= -----END CERTIFICATE-----Generated at Fri Oct 24 08:27:00 2025 by rpki-client