$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24b45f21-ce78-3e71-a7dc-9b66f3bd3318.roa File: 24b45f21-ce78-3e71-a7dc-9b66f3bd3318.roa (raw, json) Hash identifier: SdfpNvrzEss0zTzFl6qifrpGyk3LRAc3nZM3uu0dhOQ= Subject key identifier: 3B:45:7E:64:68:1E:7A:9A:41:23:80:A4:33:CD:A9:C4:05:67:07:5F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B35DF0900D80D07DE7D024100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24b45f21-ce78-3e71-a7dc-9b66f3bd3318.roa Signing time: Tue 16 Sep 2025 05:34:56 +0000 ROA not before: Tue 16 Sep 2025 05:34:56 +0000 ROA not after: Mon 15 Dec 2025 06:34:56 +0000 asID: 3257 IP address blocks: 64.144.18.0/23 maxlen: 24 64.144.20.0/23 maxlen: 24 64.144.22.0/23 maxlen: 24 64.144.24.0/23 maxlen: 24 64.144.26.0/23 maxlen: 24 64.144.224.0/23 maxlen: 24 64.144.228.0/23 maxlen: 24 64.144.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:df:09:00:d8:0d:07:de:7d:02:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 05:34:56 2025 GMT Not After : Dec 15 06:34:56 2025 GMT Subject: CN=a025f27c-009d-4864-ad62-64766e11e3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:ca:83:a5:87:a1:9f:1c:bd:89:bf:8f:be: 6e:27:8d:32:1a:cd:34:27:40:71:45:21:27:c4:0f: 48:34:0f:15:77:ac:b4:6c:72:7d:8c:b6:5d:1a:b3: 68:d2:9d:09:40:68:cf:e3:7d:7d:e2:b2:a4:40:2d: 9d:30:7d:6b:09:7b:dc:0e:4e:26:83:95:06:f6:19: f5:e3:2b:32:57:53:82:e7:95:0f:de:a0:bc:60:6c: fd:b9:fc:4d:ec:8b:ed:a5:52:55:93:52:9b:95:a6: bf:e0:0a:6e:af:02:20:b2:c8:71:c8:e8:11:08:8a: 1a:65:8a:f0:98:4a:ff:ef:10:f6:ba:b4:64:1e:18: 08:34:a1:5c:18:79:66:b6:a7:dd:82:3c:79:30:f1: 27:ef:3b:c2:6f:db:f9:0b:f6:68:38:2e:02:70:d0: ba:0d:b7:8e:bf:dd:43:ca:c9:ca:8b:20:0f:5e:0f: 52:0a:a5:b4:c0:34:6c:d7:ca:70:57:4d:20:f6:14: c6:58:d6:bf:1c:89:62:d0:35:ff:d4:a3:cf:df:65: e8:a0:75:fb:6c:a9:5b:d2:50:6e:f3:e9:91:37:5a: 62:a9:81:9e:ec:c9:3d:8e:94:2a:43:32:86:6f:23: 4f:ca:38:9c:11:8b:5c:0e:a9:b8:10:5a:ad:60:4c: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:45:7E:64:68:1E:7A:9A:41:23:80:A4:33:CD:A9:C4:05:67:07:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24b45f21-ce78-3e71-a7dc-9b66f3bd3318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.144.18.0-64.144.27.255 64.144.224.0/23 64.144.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:21:dd:21:67:ad:fc:4a:9f:53:7a:e8:3a:7c:95:19:07:f4: 62:20:76:d0:7e:53:29:a9:ae:94:9e:b1:7c:8b:06:d8:f0:05: cd:d4:05:cc:b7:05:95:cf:3c:e3:89:e8:a3:41:fb:b2:70:ad: 57:c8:e5:c7:25:c9:a2:8b:f3:ba:0a:04:4b:ca:bd:6b:bb:0f: 45:e7:fe:4b:0c:6a:96:43:a5:cb:84:fe:f8:29:7c:38:66:79: 58:10:76:42:9b:19:ab:34:64:23:9a:21:fa:3b:e0:81:66:19: 62:95:d9:55:42:c1:72:f4:17:de:56:16:42:b7:ec:4d:21:17: 60:36:86:db:8a:fc:02:f8:a6:c2:ea:30:38:a5:66:13:b4:ce: 36:bf:6e:f3:34:95:ff:26:d8:a5:fe:f4:30:a8:22:c5:4a:57: b9:e2:e4:1c:0e:93:a4:88:8e:84:83:84:06:64:cd:30:1f:90: 85:f9:0c:46:eb:fa:16:1b:7d:d4:e9:d5:42:1e:25:98:b4:78: da:43:73:18:2b:cc:17:4c:66:8c:dd:c9:a8:eb:b7:9b:28:61: cd:20:ac:f3:37:0a:92:0f:cd:fb:68:85:6d:c8:59:53:1e:f1: 32:d0:46:cc:2b:ef:15:8c:38:9b:45:3c:03:64:2f:5d:81:62: 7a:9e:d8:37 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEs13wkA2A0H3n0CQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNjA1MzQ1NloXDTI1MTIxNTA2MzQ1NlowLzEtMCsGA1UEAxMk YTAyNWYyN2MtMDA5ZC00ODY0LWFkNjItNjQ3NjZlMTFlM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RHKg6WHoZ8cvYm/j75uJ40yGs00J0BxRSEn xA9INA8Vd6y0bHJ9jLZdGrNo0p0JQGjP43194rKkQC2dMH1rCXvcDk4mg5UG9hn1 4ysyV1OC55UP3qC8YGz9ufxN7IvtpVJVk1Kblaa/4ApurwIgsshxyOgRCIoaZYrw mEr/7xD2urRkHhgINKFcGHlmtqfdgjx5MPEn7zvCb9v5C/ZoOC4CcNC6DbeOv91D ysnKiyAPXg9SCqW0wDRs18pwV00g9hTGWNa/HIli0DX/1KPP32XooHX7bKlb0lBu 8+mRN1piqYGe7Mk9jpQqQzKGbyNPyjicEYtcDqm4EFqtYExyOQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFDtFfmRoHnqaQSOApDPNqcQFZwdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjRiNDVmMjEtY2U3OC0z ZTcxLWE3ZGMtOWI2NmYzYmQzMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFAkBID BAJAkBgDBAFAkOADBAJAkOQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcCHdIWet/EqfU3roOnyVGQf0YiB2 0H5TKamulJ6xfIsG2PAFzdQFzLcFlc8844noo0H7snCtV8jlxyXJoovzugoES8q9 a7sPRef+SwxqlkOly4T++Cl8OGZ5WBB2QpsZqzRkI5oh+jvggWYZYpXZVULBcvQX 3lYWQrfsTSEXYDaG24r8AvimwuowOKVmE7TONr9u8zSV/ybYpf70MKgixUpXueLk HA6TpIiOhIOEBmTNMB+QhfkMRuv6Fht91OnVQh4lmLR42kNzGCvMF0xmjN3JqOu3 myhhzSCs8zcKkg/N+2iFbchZUx7xMtBGzCvvFYw4m0U8A2QvXYFiep7YNw== -----END CERTIFICATE-----Generated at Fri Sep 19 11:05:03 2025 by rpki-client