$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0171baa4-f162-3ec4-a851-dbe3365ea1e9.roa File: 0171baa4-f162-3ec4-a851-dbe3365ea1e9.roa (raw, json) Hash identifier: tk9TDgPoescdAzRwThGOJGEw7fet8IrFJMT5Rtgm8cg= Subject key identifier: 63:82:D7:A5:22:79:5F:EA:5B:60:86:49:35:CE:00:5D:DF:B7:00:45 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BB289B095451D575DCDAE2880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0171baa4-f162-3ec4-a851-dbe3365ea1e9.roa Signing time: Thu 30 Oct 2025 21:19:01 +0000 ROA not before: Thu 30 Oct 2025 21:19:01 +0000 ROA not after: Wed 28 Jan 2026 22:19:01 +0000 asID: 215607 IP address blocks: 64.204.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:89:b0:95:45:1d:57:5d:cd:ae:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 30 21:19:01 2025 GMT Not After : Jan 28 22:19:01 2026 GMT Subject: CN=a2030b26-6d11-4ebb-a038-48ec184b6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:8c:d0:50:5d:02:65:15:25:67:02:3e:ae: 83:ff:39:d6:27:e5:36:b9:f3:5f:12:9c:95:3b:d0: 43:43:db:36:d7:cf:3d:18:7c:e5:24:99:a6:c7:f5: ac:e2:29:6d:d9:c0:18:14:55:9a:04:4d:b0:f3:b9: 23:66:3e:f0:26:10:32:92:4e:e1:bb:26:4d:6d:08: 57:97:e3:0e:d5:e8:99:6a:2f:da:31:8a:0b:45:c6: 2c:71:86:e0:6e:7c:3e:dd:4c:50:35:74:01:ef:12: 45:86:b5:67:35:23:a6:0a:7a:5a:21:59:37:cf:41: 2a:0a:1e:dd:50:16:74:bb:53:ec:ad:3b:bf:da:5a: 1b:d4:60:e3:2e:6d:4a:23:da:de:11:a1:39:5e:a1: ba:25:e0:95:12:28:bc:e8:ba:ed:9f:47:76:0b:b1: 2e:89:40:54:74:3f:6a:9c:69:2d:8f:f3:07:72:08: 26:19:c2:48:57:15:15:36:05:72:ae:53:1a:2b:9b: 99:46:2d:6a:16:b6:95:bb:9f:39:4a:ad:5e:37:fd: 31:7f:fb:c6:ed:8b:84:ad:fe:be:af:10:52:be:c4: 46:ea:2e:e7:17:1c:95:b1:f5:09:13:16:04:3c:97: 09:2e:7b:d8:63:b2:7e:d6:f0:76:a0:4e:a2:70:3d: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:82:D7:A5:22:79:5F:EA:5B:60:86:49:35:CE:00:5D:DF:B7:00:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0171baa4-f162-3ec4-a851-dbe3365ea1e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:15:64:f0:ab:99:8c:93:0c:d1:00:51:15:7b:14:51:78:31: 80:cb:92:4f:45:88:6a:bd:44:5f:6e:31:0e:14:1a:01:78:78: 0f:8e:e9:b9:98:c8:d0:33:91:e4:0a:45:d3:7a:bb:97:52:79: 5d:40:85:08:5a:65:35:dc:74:d9:83:c9:85:8a:f7:4a:0a:92: 9c:29:d6:e1:0b:12:89:60:ce:67:ab:a5:5b:45:1f:f1:3f:c5: be:63:fc:ba:e2:d4:85:27:8b:83:97:9f:01:e0:a5:44:0d:a4: 31:7e:ec:6d:5c:dc:85:6f:f5:eb:39:1e:ee:c2:e6:af:61:08: 90:5f:08:cc:8a:66:36:88:ac:0f:76:ec:fa:b2:2b:9e:8e:96: d8:dc:21:4f:32:7b:99:02:ad:21:98:9d:64:1b:59:b2:fe:de: e6:b5:23:68:ea:ec:43:8f:b0:37:12:1b:21:f4:49:d5:cf:48: 19:ba:ee:fb:4b:ba:07:7b:e9:db:c6:a2:aa:a9:30:22:ff:d7: 51:0f:6e:16:e9:26:fb:e9:71:af:ee:1c:1a:66:1b:0b:cf:f9: 93:f3:d6:fe:e2:ef:67:60:9b:55:a0:8e:7a:af:e9:db:9d:5d: ac:9a:cf:03:6f:7b:d5:e4:e6:cb:66:fe:fc:ca:21:85:2b:eb: 3e:b3:dd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuyibCVRR1XXc2uKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAzMDIxMTkwMVoXDTI2MDEyODIyMTkwMVowLzEtMCsGA1UEAxMk YTIwMzBiMjYtNmQxMS00ZWJiLWEwMzgtNDhlYzE4NGI2NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS+M0FBdAmUVJWcCPq6D/znWJ+U2ufNfEpyV O9BDQ9s21889GHzlJJmmx/Ws4ilt2cAYFFWaBE2w87kjZj7wJhAykk7huyZNbQhX l+MO1eiZai/aMYoLRcYscYbgbnw+3UxQNXQB7xJFhrVnNSOmCnpaIVk3z0EqCh7d UBZ0u1PsrTu/2lob1GDjLm1KI9reEaE5XqG6JeCVEii86Lrtn0d2C7EuiUBUdD9q nGktj/MHcggmGcJIVxUVNgVyrlMaK5uZRi1qFraVu585Sq1eN/0xf/vG7YuErf6+ rxBSvsRG6i7nFxyVsfUJExYEPJcJLnvYY7J+1vB2oE6icD3JNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOC16UieV/qW2CGSTXOAF3ftwBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDE3MWJhYTQtZjE2Mi0z ZWM0LWE4NTEtZGJlMzM2NWVhMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8VZPCrmYyTDNEAURV7FFF4MYDLkk9FiGq9RF9uMQ4UGgF4eA+O6bmY yNAzkeQKRdN6u5dSeV1AhQhaZTXcdNmDyYWK90oKkpwp1uELEolgzmerpVtFH/E/ xb5j/Lri1IUni4OXnwHgpUQNpDF+7G1c3IVv9es5Hu7C5q9hCJBfCMyKZjaIrA92 7PqyK56OltjcIU8ye5kCrSGYnWQbWbL+3ua1I2jq7EOPsDcSGyH0SdXPSBm67vtL ugd76dvGoqqpMCL/11EPbhbpJvvpca/uHBpmGwvP+ZPz1v7i72dgm1Wgjnqv6dud XayazwNve9Xk5stm/vzKIYUr6z6z3TQ= -----END CERTIFICATE-----Generated at Thu Nov 6 23:01:13 2025 by rpki-client