$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/93f77b3e-e8bf-30f5-b407-7273f3c46488.roa File: 93f77b3e-e8bf-30f5-b407-7273f3c46488.roa (raw, json) Hash identifier: RLOu+BYPx8vbPirRvm3XLEkJoI3lDuZwNQHg/i+x3SU= Subject key identifier: 13:31:F1:C9:01:A5:85:59:6A:88:3D:B2:8D:C5:00:03:65:4C:7E:83 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584AF951389ED0CEEB12C0FA4254 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/93f77b3e-e8bf-30f5-b407-7273f3c46488.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 11127 IP address blocks: 64.49.145.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:38:9e:d0:ce:eb:12:c0:fa:42:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=be6164e8-ea6b-4cc0-8599-c9016ea2c651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:d7:a9:73:cd:86:14:1a:31:13:3d:93:35: dc:b0:a3:4e:aa:50:53:a3:17:34:86:a2:82:5e:3e: d5:ef:62:d2:12:4f:6b:1e:76:46:8d:07:53:14:fa: 99:34:1e:48:3f:c7:1a:7a:6a:10:db:6d:72:93:fb: 43:84:4b:ea:cb:16:ec:db:9d:4f:28:5a:55:96:dc: 8d:9e:46:49:62:0e:ab:db:cc:08:19:43:5d:a8:a0: 1f:1d:00:9e:a6:8f:71:af:f4:c2:2e:99:43:b6:d8: 57:70:10:ce:56:c0:8f:cb:18:d7:6a:dd:c9:c6:63: f6:ac:ea:df:fd:4a:20:3a:80:fe:c6:15:b5:0e:9f: d0:97:6a:a5:46:c5:99:ba:dd:ab:8d:d3:34:d1:73: ea:8d:7b:c9:f1:16:5d:8e:bd:a3:15:bc:b3:5c:3c: fc:b2:07:56:b8:00:c1:22:0a:f7:2c:03:b1:3b:73: 21:57:a9:ee:c6:25:42:3c:c5:3c:0e:02:b8:fd:c6: 3a:2a:42:a4:e9:3e:f8:ce:2c:22:c0:a9:be:55:da: 3c:8c:99:5b:b1:bc:95:21:33:cf:11:80:87:46:de: 57:3c:05:7a:6c:55:4a:98:6f:28:95:ce:ec:31:02: 3a:ad:0f:c4:85:9f:1d:bf:c1:40:03:f4:af:ef:77: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:31:F1:C9:01:A5:85:59:6A:88:3D:B2:8D:C5:00:03:65:4C:7E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/93f77b3e-e8bf-30f5-b407-7273f3c46488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:df:02:93:99:14:ad:0e:3d:0e:e8:d4:15:bc:a6:19:75:00: 9f:1a:02:36:73:1e:70:47:37:e0:18:eb:70:fe:ca:cf:26:8a: d7:a4:66:45:8d:69:d4:ea:17:cf:46:be:a8:d6:c7:14:fa:ae: 6e:6a:1c:fe:45:d5:cd:a5:90:c5:d2:c6:de:55:89:cc:c6:8d: 4e:b8:a4:54:ef:4f:52:fe:8d:e7:2a:5e:e0:2e:0d:85:11:25: 4c:3b:53:e0:12:37:57:80:53:32:1a:86:f3:4f:3f:04:04:d6: ec:65:ef:eb:22:40:92:50:93:36:ec:85:69:ae:0f:0d:52:94: d3:51:e4:7b:b5:9b:21:60:ef:d5:24:11:c2:89:57:84:91:fe: 2f:4d:8a:ea:a2:19:55:a7:3b:9f:b7:40:5b:c0:58:82:f2:53: fd:cc:a1:e7:15:88:90:00:bd:c3:62:88:b1:67:f8:ba:0b:b1: 64:8e:c4:c5:5d:fe:b0:48:db:bd:91:18:e0:67:4a:2c:68:7d: 85:13:86:d8:d4:22:1a:57:a5:4a:60:dc:51:86:19:5f:01:d5: 27:fb:da:1d:b6:65:20:56:a4:17:00:df:d2:eb:2b:c3:73:f7: d4:30:c2:32:96:03:9b:e3:c6:8b:ce:42:a8:43:86:8f:3b:c0: 54:ae:95:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UTie0M7rEsD6QlQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmU2MTY0ZTgtZWE2Yi00Y2MwLTg1OTktYzkwMTZlYTJjNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C7XqXPNhhQaMRM9kzXcsKNOqlBToxc0hqKC Xj7V72LSEk9rHnZGjQdTFPqZNB5IP8caemoQ221yk/tDhEvqyxbs251PKFpVltyN nkZJYg6r28wIGUNdqKAfHQCepo9xr/TCLplDtthXcBDOVsCPyxjXat3JxmP2rOrf /UogOoD+xhW1Dp/Ql2qlRsWZut2rjdM00XPqjXvJ8RZdjr2jFbyzXDz8sgdWuADB Igr3LAOxO3MhV6nuxiVCPMU8DgK4/cY6KkKk6T74ziwiwKm+Vdo8jJlbsbyVITPP EYCHRt5XPAV6bFVKmG8olc7sMQI6rQ/EhZ8dv8FAA/Sv73dXeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMx8ckBpYVZaog9so3FAANlTH6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvOTNmNzdiM2UtZThiZi0z MGY1LWI0MDctNzI3M2YzYzQ2NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLfApOZFK0OPQ7o1BW8phl1AJ8aAjZzHnBHN+AY63D+ys8mitekZkWN adTqF89GvqjWxxT6rm5qHP5F1c2lkMXSxt5ViczGjU64pFTvT1L+jecqXuAuDYUR JUw7U+ASN1eAUzIahvNPPwQE1uxl7+siQJJQkzbshWmuDw1SlNNR5Hu1myFg79Uk EcKJV4SR/i9NiuqiGVWnO5+3QFvAWILyU/3MoecViJAAvcNiiLFn+LoLsWSOxMVd /rBI272RGOBnSixofYUThtjUIhpXpUpg3FGGGV8B1Sf72h22ZSBWpBcA39LrK8Nz 99QwwjKWA5vjxovOQqhDho87wFSulWg= -----END CERTIFICATE-----Generated at Wed Sep 10 14:14:14 2025 by rpki-client