$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa File: bfd3961a-a871-3f89-902e-5f5403f87c57.roa (raw, json) Hash identifier: VCH4PvZyvnelMclx9tuohxMd7vXWrtUvTwbGHiDqUdM= Subject key identifier: 5F:AD:26:33:20:0D:41:C6:AE:35:21:7E:AE:52:CA:4F:57:2A:E5:F4 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584B0746BD3CD71949BA04DB4480 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 393878 IP address blocks: 64.18.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bd:3c:d7:19:49:ba:04:db:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=4edfd16a-7497-4f15-b168-c80447cee83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:0a:f7:3f:b8:cb:51:de:00:cd:67:20:2a: 67:74:a7:eb:db:42:35:10:ca:94:e4:e9:32:db:34: 73:8b:02:98:90:b2:f0:e1:74:d9:c2:2d:e3:b6:b7: c0:89:10:13:b5:fc:40:93:0e:75:7f:40:df:34:af: 1e:9f:ec:dd:17:a0:1b:2f:e3:ce:21:7a:e6:26:9f: 5c:58:d4:6f:02:13:8d:e7:92:f2:9f:96:90:ae:74: 0e:c6:e9:6a:88:b8:95:b3:9d:0e:a3:23:f3:e6:63: 6e:2c:ba:48:95:a4:b1:19:42:ef:32:26:9c:69:f9: 15:4a:a5:24:70:26:b2:ef:da:e3:fe:0c:15:0b:1b: 5a:7d:da:92:99:98:89:80:5e:ad:50:fb:d2:f8:ea: b9:22:07:cd:c9:6b:c0:18:9c:51:63:3c:3e:45:c2: 6d:e4:07:0e:38:7f:eb:16:2b:24:b3:84:39:48:5a: d6:88:87:d0:13:c8:94:23:11:42:2b:41:7c:1b:8d: 09:88:9c:a7:87:2a:2a:f4:ab:59:e8:ee:ef:a1:66: 9d:a6:33:e8:54:63:af:1b:45:c1:05:82:a0:5a:55: 3e:00:55:c3:f7:04:d4:d6:d1:51:c3:f4:24:b6:e0: 4a:50:a9:ad:1a:a2:da:55:fd:7e:3e:2b:b7:ae:80: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AD:26:33:20:0D:41:C6:AE:35:21:7E:AE:52:CA:4F:57:2A:E5:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 64.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d3:3a:fa:3f:ed:9f:0d:f0:79:6f:fb:16:18:1a:04:ac:11: c5:c7:6a:19:dc:0c:80:ad:20:8c:d0:81:52:7c:8e:dd:51:6d: b1:46:07:a5:6d:04:ae:a3:3d:3c:d6:fe:8f:43:6e:34:76:f0: ae:ca:43:36:26:c1:fc:bf:8d:5c:f7:28:80:a6:b4:ef:e4:79: 5b:e8:69:c8:38:9f:75:d7:64:65:16:1a:78:1f:4d:66:d8:57: 6c:6a:73:87:5a:dd:83:51:28:fd:5c:be:64:57:e6:28:28:2d: 2b:0e:b9:b1:a6:d0:50:3e:4c:93:65:c7:0f:a6:78:6e:86:cb: 91:5f:db:bd:92:9f:54:50:08:d0:f7:ff:83:a9:85:2d:cf:1a: 1b:0f:6a:c4:46:94:7a:05:cd:23:88:68:21:bc:dd:4f:b9:81: c0:f7:81:99:55:44:a0:7d:87:f2:3a:fc:c5:9c:d2:1c:fc:ba: 82:4c:bf:0c:a1:df:11:da:d4:2e:a0:7b:cf:f1:3d:56:41:93: 6f:51:72:29:aa:4e:79:de:69:fe:cb:dd:85:92:09:58:54:2a: 22:eb:67:21:d5:e6:28:8e:6c:42:a4:0e:e8:59:c7:2e:c9:f7: 34:a3:07:02:a5:d3:48:9d:19:29:ee:b4:43:29:3f:37:ef:a3: 85:b1:e2:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRr081xlJugTbRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NGVkZmQxNmEtNzQ5Ny00ZjE1LWIxNjgtYzgwNDQ3Y2VlODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsncK9z+4y1HeAM1nICpndKfr20I1EMqU5Oky 2zRziwKYkLLw4XTZwi3jtrfAiRATtfxAkw51f0DfNK8en+zdF6AbL+POIXrmJp9c WNRvAhON55Lyn5aQrnQOxulqiLiVs50OoyPz5mNuLLpIlaSxGULvMiacafkVSqUk cCay79rj/gwVCxtafdqSmZiJgF6tUPvS+Oq5IgfNyWvAGJxRYzw+RcJt5AcOOH/r Fisks4Q5SFrWiIfQE8iUIxFCK0F8G40JiJynhyoq9KtZ6O7voWadpjPoVGOvG0XB BYKgWlU+AFXD9wTU1tFRw/QktuBKUKmtGqLaVf1+Piu3roBD2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+tJjMgDUHGrjUhfq5Syk9XKuX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYmZkMzk2MWEtYTg3MS0z Zjg5LTkwMmUtNWY1NDAzZjg3YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnTOvo/7Z8N8Hlv+xYYGgSsEcXHahncDICtIIzQgVJ8jt1RbbFGB6Vt BK6jPTzW/o9DbjR28K7KQzYmwfy/jVz3KICmtO/keVvoacg4n3XXZGUWGngfTWbY V2xqc4da3YNRKP1cvmRX5igoLSsOubGm0FA+TJNlxw+meG6Gy5Ff272Sn1RQCND3 /4OphS3PGhsPasRGlHoFzSOIaCG83U+5gcD3gZlVRKB9h/I6/MWc0hz8uoJMvwyh 3xHa1C6ge8/xPVZBk29RcimqTnneaf7L3YWSCVhUKiLrZyHV5iiObEKkDuhZxy7J 9zSjBwKl00idGSnutEMpPzfvo4Wx4lM= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:06 2025 by rpki-client