$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json) Hash identifier: O4JO5bRCmVEeSIWGhkp3pANF3KBc4an84kbZkpNSBq4= Subject key identifier: AF:07:E1:30:CA:A4:87:1C:C2:C8:C1:79:E2:4A:DC:8E:B7:FC:0C:A9 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584B7F521467B621818AA2288AE0 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 64.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:14:67:b6:21:81:8a:a2:28:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6c02e473-d0b4-469c-89fc-c8eee2d4898a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:fd:27:67:2e:87:a9:79:03:95:aa:7d:1c: 5a:cc:23:23:b0:2f:c8:d6:1f:b6:1e:44:6d:98:a3: 84:4a:dc:e6:5a:1d:39:67:99:b6:e9:07:f7:f7:cd: 16:b1:2f:f2:c2:85:68:1b:2c:6c:c2:3e:45:e2:6c: 62:d9:47:45:a7:68:b5:03:4e:b5:62:d4:32:b1:b1: 58:ba:ed:0f:a1:e9:e3:ef:dd:5d:09:2e:2a:f0:33: 65:45:63:36:de:44:e6:77:ec:74:27:4e:59:f5:c0: fd:4a:c8:0d:d4:a3:0c:93:5e:fe:68:ec:65:87:b4: a2:58:a7:31:3c:7a:35:f3:cf:c6:df:52:d6:8d:b9: 0d:58:2a:d9:f2:99:71:7e:12:f6:97:e0:fc:1c:96: 8d:a2:69:4c:25:5b:fc:0d:14:70:bc:2f:6b:03:74: 55:f6:f9:08:64:1d:06:f9:2b:80:ed:d6:db:27:90: 5f:07:3f:a7:d4:1c:a1:f8:67:11:95:f3:8b:fd:0f: 47:a4:30:16:d0:58:8e:99:89:6d:dc:49:c3:d9:c9: df:d7:67:78:fc:b4:d6:41:1b:26:96:1a:15:fd:2f: 26:96:89:40:d3:1e:d3:73:c6:f2:1e:8d:59:8e:c8: bd:93:09:71:22:91:18:cc:41:44:5b:11:07:f1:5f: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:07:E1:30:CA:A4:87:1C:C2:C8:C1:79:E2:4A:DC:8E:B7:FC:0C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fb:ee:fc:c1:28:b8:a0:28:8d:c3:7e:56:b4:76:88:54:a3: 2d:41:39:dd:df:9e:2a:54:c6:a4:59:ef:5c:9d:ac:b8:e1:97: 99:3c:9c:23:a3:e4:d2:fb:3b:2c:0d:1c:41:a8:ab:ba:ca:3f: a7:51:3f:d3:9c:fd:bc:f3:d6:a7:73:99:42:32:bd:9b:05:5a: 6b:ec:51:8c:cc:e5:c6:27:8d:74:5f:0b:9a:e6:97:9d:5c:f5: 6a:e9:9c:42:2e:e5:79:e6:3e:07:e0:a4:f6:55:39:eb:70:fd: fe:45:3e:62:37:e5:08:37:ab:2a:ce:86:45:51:30:b3:76:f7: b5:03:44:6c:c3:8f:4d:80:29:60:71:eb:c9:92:88:b9:26:2b: 50:00:3f:13:c1:1a:d7:7c:d3:fb:90:d9:1e:d0:7a:3f:85:15: 08:16:34:79:aa:c8:d2:d5:fe:2c:0f:93:8c:69:b6:58:00:a4: b3:6b:2e:2e:2d:39:4b:fa:f5:17:7d:1a:bb:37:56:35:26:aa: 4b:49:0a:01:ed:1d:4b:65:cc:e9:3e:cd:33:ec:4d:6c:ec:bd: 8d:63:eb:51:cd:02:02:fa:be:5c:60:83:83:66:c4:d2:e9:7a: 4a:52:f4:7d:c1:d8:3b:7c:18:aa:fc:d3:16:89:8e:87:69:2c: 50:9b:f9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhRntiGBiqIoiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NmMwMmU0NzMtZDBiNC00NjljLTg5ZmMtYzhlZWUyZDQ4OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25r9J2cuh6l5A5WqfRxazCMjsC/I1h+2HkRt mKOEStzmWh05Z5m26Qf3980WsS/ywoVoGyxswj5F4mxi2UdFp2i1A061YtQysbFY uu0Poenj791dCS4q8DNlRWM23kTmd+x0J05Z9cD9SsgN1KMMk17+aOxlh7SiWKcx PHo188/G31LWjbkNWCrZ8plxfhL2l+D8HJaNomlMJVv8DRRwvC9rA3RV9vkIZB0G +SuA7dbbJ5BfBz+n1Byh+GcRlfOL/Q9HpDAW0FiOmYlt3EnD2cnf12d4/LTWQRsm lhoV/S8mlolA0x7Tc8byHo1Zjsi9kwlxIpEYzEFEWxEH8V/AywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8H4TDKpIccwsjBeeJK3I63/AypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGE1YjhiMzgtZDRiNy0z YjQ4LWE4YWMtZWYyOTM4YjExOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz77vzBKLigKI3Dfla0dohUoy1BOd3fnipUxqRZ71ydrLjhl5k8nCOj 5NL7OywNHEGoq7rKP6dRP9Oc/bzz1qdzmUIyvZsFWmvsUYzM5cYnjXRfC5rml51c 9WrpnEIu5XnmPgfgpPZVOetw/f5FPmI35Qg3qyrOhkVRMLN297UDRGzDj02AKWBx 68mSiLkmK1AAPxPBGtd80/uQ2R7Qej+FFQgWNHmqyNLV/iwPk4xptlgApLNrLi4t OUv69Rd9Grs3VjUmqktJCgHtHUtlzOk+zTPsTWzsvY1j61HNAgL6vlxgg4NmxNLp ekpS9H3B2Dt8GKr80xaJjodpLFCb+YM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:20 2025 by rpki-client