$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa File: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (raw, json) Hash identifier: j3IdCjH38RHGg1L7wqJOkXGixuWVLCEnXM9iX1/hKFs= Subject key identifier: D7:CE:7B:D3:7F:CA:4B:EE:7B:B1:82:17:B1:8A:79:BD:68:D0:2C:86 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584B98723DBD70DB451BF1617200 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 23316 IP address blocks: 64.136.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3d:bd:70:db:45:1b:f1:61:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8fc04461-74f8-4e67-b9bd-39800f43c9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:f5:23:f8:57:e0:00:b5:20:1f:e5:07:55: f9:f3:64:ec:c4:28:88:23:43:4e:2e:e7:92:2a:68: ff:d6:6a:1c:96:e6:2d:16:e6:73:8f:e6:d4:9a:25: 46:ea:12:58:ef:8c:7e:6b:ee:cf:63:cc:c8:44:6a: d6:96:ad:07:87:33:c5:35:33:4a:69:75:58:2c:65: c7:7e:68:53:dd:6e:ae:14:fe:a1:7a:4f:9e:1e:b1: 82:e4:12:fe:cc:2c:20:15:3b:e2:0c:9d:52:df:b3: 4f:12:cd:a8:45:75:1c:43:5f:d8:fb:4d:0a:a2:df: 19:e0:95:1a:a7:7f:90:eb:a4:85:71:20:c0:e4:44: 15:42:cf:8d:e7:85:16:0c:7d:6e:96:5c:3a:4e:60: c2:2e:e3:7e:d8:ac:ff:31:ae:7a:01:a0:85:e9:f3: 08:8d:80:06:18:c6:fd:80:c5:3b:83:b9:00:0e:bc: 2e:3e:5b:50:6d:88:87:65:47:e4:8a:00:d9:8a:8f: 05:3f:44:3c:63:29:b5:82:dc:ed:5a:2b:8d:29:2f: 29:69:45:47:d2:c2:92:65:38:98:d5:f9:5b:68:65: 3b:74:ef:3b:2b:29:60:b6:ae:5e:5d:73:1b:e4:12: bb:39:b8:53:fa:68:3b:b0:1f:e2:6e:a7:9b:cb:ab: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:7B:D3:7F:CA:4B:EE:7B:B1:82:17:B1:8A:79:BD:68:D0:2C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 64.136.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a3:91:65:31:05:5d:45:b2:6e:6e:cf:c9:a4:97:4c:7a:1a: a1:05:27:e3:91:84:60:b6:85:18:64:27:5e:aa:9b:62:fb:dc: b9:14:76:9c:e7:09:bf:17:11:cf:40:5b:20:eb:ce:54:c8:54: 64:15:b2:06:1b:d0:8b:22:f1:f9:9e:dc:c3:ed:d2:86:f4:96: 16:bd:ce:33:2b:5d:00:d3:32:77:f0:93:ef:93:c9:77:d8:04: de:46:50:a5:78:24:51:6e:fc:b5:3a:85:0c:b1:8b:ba:50:ec: 81:e2:2e:40:3f:7c:eb:5d:af:b4:45:c3:a3:20:2c:43:2a:90: 83:85:28:97:39:69:b4:92:c8:6b:b2:0c:9c:16:af:30:04:c2: b8:9a:18:a2:99:98:f8:8c:e1:4b:c1:0f:1d:1e:39:86:6a:fe: d5:ce:1b:c0:9a:7e:a1:cf:96:ac:44:e9:27:a6:28:52:73:a5: 3b:fb:d0:48:87:de:ca:26:d4:bb:95:d0:f8:4a:42:18:e3:e7: 9d:cf:12:18:5a:81:b2:08:28:02:c9:f6:4d:69:62:da:a3:6a: d6:af:76:5d:6a:a7:34:a9:8e:72:0a:4c:bb:74:ff:b6:71:f2: 2d:a9:7b:e7:fc:ee:84:ea:22:d3:f8:fb:6b:cb:b2:5a:4d:cb: 84:68:3d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcj29cNtFG/FhcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGZjMDQ0NjEtNzRmOC00ZTY3LWI5YmQtMzk4MDBmNDNjOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk31I/hX4AC1IB/lB1X582TsxCiII0NOLueS Kmj/1mocluYtFuZzj+bUmiVG6hJY74x+a+7PY8zIRGrWlq0HhzPFNTNKaXVYLGXH fmhT3W6uFP6hek+eHrGC5BL+zCwgFTviDJ1S37NPEs2oRXUcQ1/Y+00Kot8Z4JUa p3+Q66SFcSDA5EQVQs+N54UWDH1ullw6TmDCLuN+2Kz/Ma56AaCF6fMIjYAGGMb9 gMU7g7kADrwuPltQbYiHZUfkigDZio8FP0Q8Yym1gtztWiuNKS8paUVH0sKSZTiY 1flbaGU7dO87Kylgtq5eXXMb5BK7ObhT+mg7sB/ibqeby6scnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfOe9N/ykvue7GCF7GKeb1o0CyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMzVjNjhkYjEtYjI3Zi0z NDI4LWIzMTItYzAzZDg2ZTRmOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQIiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJujkWUxBV1Fsm5uz8mkl0x6GqEFJ+ORhGC2hRhkJ16qm2L73LkUdpzn Cb8XEc9AWyDrzlTIVGQVsgYb0Isi8fme3MPt0ob0lha9zjMrXQDTMnfwk++TyXfY BN5GUKV4JFFu/LU6hQyxi7pQ7IHiLkA/fOtdr7RFw6MgLEMqkIOFKJc5abSSyGuy DJwWrzAEwriaGKKZmPiM4UvBDx0eOYZq/tXOG8CafqHPlqxE6SemKFJzpTv70EiH 3som1LuV0PhKQhjj553PEhhagbIIKALJ9k1pYtqjatavdl1qpzSpjnIKTLt0/7Zx 8i2pe+f87oTqItP4+2vLslpNy4RoPc0= -----END CERTIFICATE-----Generated at Wed Oct 29 11:03:47 2025 by rpki-client