$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/7edd3669-d51a-33a6-a9f6-3898db20d979.roa File: 7edd3669-d51a-33a6-a9f6-3898db20d979.roa (raw, json) Hash identifier: yqbWEMYtJMoyh4J2D8RP7zqPTinGvHX916x/ntJMtu8= Subject key identifier: E1:54:E6:F4:1F:43:3C:96:34:21:C4:56:48:95:A2:9E:6C:3D:9B:60 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584BB88D2ADF3F85CEF47E704B80 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/7edd3669-d51a-33a6-a9f6-3898db20d979.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 62651 IP address blocks: 64.145.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2a:df:3f:85:ce:f4:7e:70:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=70e4ec73-ba2f-425e-9cd0-b559000c840e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9a:2c:b1:66:f1:7e:4a:7b:eb:88:d1:35:dd: c8:40:f1:6c:9a:db:0e:69:46:c6:1d:05:61:8a:58: d5:90:48:d2:75:17:7a:52:55:a2:bb:c4:d6:73:77: 6a:7c:9f:29:b1:8a:e8:e7:fc:fa:f5:2a:34:ee:f6: a1:91:6b:73:33:e2:49:02:ca:44:1c:b4:13:79:04: 6a:7d:6b:0e:43:c6:9f:09:86:18:b1:c2:dd:8d:c0: 9a:b7:8c:00:be:7b:aa:93:3f:06:3e:f6:f5:7c:f7: b1:af:63:72:b9:65:96:2d:1d:fe:f7:fe:9c:8a:bf: 39:28:e7:7e:b5:cf:5e:97:0d:64:fc:c7:df:b5:a1: fd:15:58:df:15:42:2e:2c:37:3f:ec:d6:01:ce:55: 34:24:86:40:c8:7f:51:c6:75:88:18:a8:1f:01:3b: 8b:d0:c5:45:51:b2:b3:db:da:57:c8:af:49:75:99: a4:f4:c8:a2:f7:23:da:38:51:85:50:ca:b0:1b:15: 91:8d:1b:dd:21:ae:eb:2e:b1:28:72:fa:51:6d:dc: 5c:76:aa:99:06:6b:1a:6d:de:4c:67:91:25:99:d7: b8:0a:12:7a:ef:f8:c9:9d:13:9a:78:74:5b:c1:31: 05:b0:39:2c:1f:ab:d1:e6:fc:c4:94:79:87:3d:4f: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:54:E6:F4:1F:43:3C:96:34:21:C4:56:48:95:A2:9E:6C:3D:9B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/7edd3669-d51a-33a6-a9f6-3898db20d979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9e:6a:36:fe:2d:01:55:69:18:14:b9:74:99:e0:40:d8:a9: ec:42:3a:f1:c2:1c:d2:2b:a2:64:96:fa:bc:61:33:dd:5a:8e: 18:ca:a5:77:46:42:f1:a8:3a:1c:9f:c0:5b:db:ef:05:55:c1: 1f:22:a5:6b:72:b8:a6:aa:47:e9:2f:4d:9e:3b:4c:21:d6:61: 26:f4:ec:f6:c8:82:ce:c8:d5:78:52:3c:33:1d:39:af:7e:5f: 2e:30:3e:4f:dc:a5:5b:83:6d:10:91:0d:8f:6c:17:b4:e6:8d: 71:bb:4a:0f:6f:ab:68:a6:07:66:1b:8f:7e:48:2a:62:86:44: 06:26:de:ab:e0:60:0e:d2:a7:e7:32:67:25:ae:09:46:b2:99: bc:c8:82:af:cb:c8:82:e8:cd:89:61:08:1c:88:97:b1:5e:28: a9:ff:4f:20:49:b3:7c:de:b1:e3:f8:fd:6c:c8:ee:52:61:79: 8d:39:5d:a0:b6:0d:dc:36:e2:44:93:9d:b5:3e:c4:88:e1:67: 70:01:41:c1:d5:4f:65:4d:45:2c:81:a9:46:f3:fd:bb:db:53: 52:b3:72:33:73:b4:6b:b7:11:b7:b1:9e:98:d3:ee:01:a1:dd: 6f:98:56:20:4d:bc:f1:c2:34:9b:7e:0a:00:83:bf:18:d2:10: 97:62:cf:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSrfP4XO9H5wS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzBlNGVjNzMtYmEyZi00MjVlLTljZDAtYjU1OTAwMGM4NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZossWbxfkp764jRNd3IQPFsmtsOaUbGHQVh iljVkEjSdRd6UlWiu8TWc3dqfJ8psYro5/z69So07vahkWtzM+JJAspEHLQTeQRq fWsOQ8afCYYYscLdjcCat4wAvnuqkz8GPvb1fPexr2NyuWWWLR3+9/6cir85KOd+ tc9elw1k/MfftaH9FVjfFUIuLDc/7NYBzlU0JIZAyH9RxnWIGKgfATuL0MVFUbKz 29pXyK9JdZmk9Mii9yPaOFGFUMqwGxWRjRvdIa7rLrEocvpRbdxcdqqZBmsabd5M Z5Elmde4ChJ67/jJnROaeHRbwTEFsDksH6vR5vzElHmHPU/j0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFU5vQfQzyWNCHEVkiVop5sPZtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvN2VkZDM2NjktZDUxYS0z M2E2LWE5ZjYtMzg5OGRiMjBkOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGeajb+LQFVaRgUuXSZ4EDYqexCOvHCHNIromSW+rxhM91ajhjKpXdG QvGoOhyfwFvb7wVVwR8ipWtyuKaqR+kvTZ47TCHWYSb07PbIgs7I1XhSPDMdOa9+ Xy4wPk/cpVuDbRCRDY9sF7TmjXG7Sg9vq2imB2Ybj35IKmKGRAYm3qvgYA7Sp+cy ZyWuCUaymbzIgq/LyILozYlhCByIl7FeKKn/TyBJs3zeseP4/WzI7lJheY05XaC2 Ddw24kSTnbU+xIjhZ3ABQcHVT2VNRSyBqUbz/bvbU1KzcjNztGu3EbexnpjT7gGh 3W+YViBNvPHCNJt+CgCDvxjSEJdiz1E= -----END CERTIFICATE-----Generated at Wed Nov 5 02:09:54 2025 by rpki-client