$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa File: 4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa (raw, json) Hash identifier: f+zbOhTZ1pECV88qPhR8qSBOTyxngkJM0c4aEW4qU9Q= Subject key identifier: B4:1E:92:C1:4D:E1:16:B1:3E:AC:F5:CC:F8:CF:B8:46:38:E1:8E:26 Certificate issuer: /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Certificate serial: 010D0C9F4328584B1806C2D6FFFEB8D19B914D00 Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 398391 IP address blocks: 64.226.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c2:d6:ff:fe:b8:d1:9b:91:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=40e2512e-75b9-4d47-8a52-bbd2ce30e448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:e0:dc:24:5c:24:cd:af:99:24:ff:c5:d5: 71:5e:3e:2c:cd:0e:16:dc:90:78:b3:03:ae:15:db: 06:c0:47:45:8b:b0:3e:66:dd:b6:42:e9:18:5f:ec: d5:6c:80:36:2b:a3:08:27:85:c7:25:e1:0b:ab:d0: 62:80:62:21:51:56:09:d0:e7:1d:f2:4f:fd:10:d9: 79:15:73:ce:e6:ab:bf:bb:75:8c:cf:60:a3:ed:85: f7:d9:c1:37:88:a7:ab:ad:76:db:de:45:15:26:94: 41:e4:3e:cc:90:c2:f5:ea:96:6a:98:aa:3a:cb:8d: a2:42:8f:55:06:7c:9b:30:d0:20:b3:84:f0:0d:d2: 31:29:db:fd:ee:70:5e:03:87:a4:09:eb:83:12:78: 87:8a:13:cb:54:15:84:24:82:7b:05:e0:2f:b5:2a: 27:d0:0e:d4:83:65:56:30:f4:da:2e:2c:51:78:76: 2f:3b:9b:8e:12:2f:17:ab:65:35:cb:e1:09:9b:17: 88:bf:bc:d4:41:bd:97:ad:df:e7:28:3d:3b:00:5a: 35:64:72:63:27:5f:74:bd:5d:1b:fd:21:c4:77:3d: f8:1b:71:44:64:ad:c0:1f:5e:e6:3f:65:9d:cf:d5: ce:db:97:10:10:56:45:53:e5:88:c1:8b:41:61:e9: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:92:C1:4D:E1:16:B1:3E:AC:F5:CC:F8:CF:B8:46:38:E1:8E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl X509v3 Authority Key Identifier: keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer sbgp-ipAddrBlock: critical IPv4: 64.226.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:79:f6:f1:f9:d9:f7:07:14:14:18:3f:be:8b:bd:47:0d:27: e7:ac:52:22:7c:92:28:c8:ea:32:83:e1:09:f2:97:4b:94:bb: d9:7e:3b:a5:64:b4:9c:39:51:1d:98:36:a6:e0:24:a9:b3:63: 3d:1f:05:b1:43:25:1a:67:62:c8:bb:fb:e5:d9:40:9e:1b:fe: e8:94:06:b0:e1:64:42:b3:55:89:31:e4:0b:bb:85:ca:8b:5f: 9b:6f:64:12:28:8a:2b:46:95:60:33:6d:84:2d:91:16:01:80: 77:3f:b7:51:22:5e:e3:57:86:11:02:9f:0e:59:69:6e:c5:32: 7b:92:b3:12:d8:7c:89:dc:13:05:24:1d:f2:d4:a0:67:bf:09: 07:49:1a:ce:11:44:1b:c7:fa:da:6e:b7:5a:58:ea:17:0d:7d: 11:af:64:52:6e:70:69:d6:53:aa:59:4e:fc:66:7f:15:9b:11: 94:58:4b:b5:1d:49:a8:a1:c9:f7:bf:5c:83:b7:2e:66:4f:eb: bd:4f:26:1f:76:b7:62:8a:73:4c:35:aa:0c:9f:b3:8a:8d:90: 5e:92:57:cc:d8:dc:29:13:34:9f:db:ab:be:3d:af:57:56:8d: 33:f5:e8:34:ab:dc:ae:fe:fc:d2:99:ac:99:bf:57:2b:f6:2d: 78:93:4f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsLW//640ZuRTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5 ZWU5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NDBlMjUxMmUtNzViOS00ZDQ3LThhNTItYmJkMmNlMzBlNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDDg3CRcJM2vmST/xdVxXj4szQ4W3JB4swOu FdsGwEdFi7A+Zt22QukYX+zVbIA2K6MIJ4XHJeELq9BigGIhUVYJ0Ocd8k/9ENl5 FXPO5qu/u3WMz2Cj7YX32cE3iKerrXbb3kUVJpRB5D7MkML16pZqmKo6y42iQo9V BnybMNAgs4TwDdIxKdv97nBeA4ekCeuDEniHihPLVBWEJIJ7BeAvtSon0A7Ug2VW MPTaLixReHYvO5uOEi8Xq2U1y+EJmxeIv7zUQb2Xrd/nKD07AFo1ZHJjJ190vV0b /SHEdz34G3FEZK3AH17mP2Wdz9XO25cQEFZFU+WIwYtBYekviwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQeksFN4RaxPqz1zPjPuEY44Y4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvNGRiNDU4NmItZTJiYi0z YmMwLWE3NTEtMzcyOTg2YzRmOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4 OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB59vH52fcHFBQYP76LvUcNJ+esUiJ8kijI6jKD4Qnyl0uUu9l+O6Vk tJw5UR2YNqbgJKmzYz0fBbFDJRpnYsi7++XZQJ4b/uiUBrDhZEKzVYkx5Au7hcqL X5tvZBIoiitGlWAzbYQtkRYBgHc/t1EiXuNXhhECnw5ZaW7FMnuSsxLYfIncEwUk HfLUoGe/CQdJGs4RRBvH+tput1pY6hcNfRGvZFJucGnWU6pZTvxmfxWbEZRYS7Ud Saihyfe/XIO3LmZP671PJh92t2KKc0w1qgyfs4qNkF6SV8zY3CkTNJ/bq749r1dW jTP16DSr3K7+/NKZrJm/Vyv2LXiTT2o= -----END CERTIFICATE-----Generated at Mon Sep 15 20:18:36 2025 by rpki-client