$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa File: 65cdfa75-652e-3198-9d41-4b83dc5660e1.roa (raw, json) Hash identifier: kRXobOo2VMcJup+ljiTYcq27Gv5muSfkTyIUpZ1jM8A= Subject key identifier: E1:53:4D:34:9F:E5:64:90:7B:9D:11:30:02:69:BA:FC:69:DA:69:AC Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5 Certificate serial: 010D0C9F4328584B62020ADE213C4F4BA7464800 Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 8075 IP address blocks: 168.137.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0a:de:21:3c:4f:4b:a7:46:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2fe7e8b8-eea0-4fd6-ad49-de86536060cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:62:44:3b:03:47:53:bd:63:14:1a:bf:fd:98: f6:db:53:31:82:0b:62:c2:65:db:ce:75:44:49:0c: 66:55:66:37:f9:2b:05:c0:aa:c4:c3:bb:65:f8:50: e2:54:14:26:d9:a6:e0:d9:2d:44:b4:9f:41:f2:0e: 89:93:86:b3:cf:a7:a1:07:a9:9a:9e:fd:55:4b:e1: d1:30:66:d4:fc:7d:ec:1b:44:24:92:50:ef:9f:14: bd:ce:b8:37:02:d6:3f:d5:42:42:82:83:86:f8:0d: 2e:65:d9:69:ff:53:81:35:8c:1a:7a:67:b3:8f:ce: 9f:e7:3c:94:82:88:28:d5:cd:06:e8:9b:9a:10:42: 25:b5:78:10:a0:20:4e:7a:61:77:fc:17:09:af:0e: b4:72:d4:5b:30:1f:f6:b2:49:8a:b4:17:d2:a7:1f: 67:ee:25:37:e7:75:57:26:60:06:01:ad:89:1c:2d: 2e:df:b2:04:9a:8d:7d:ce:fc:9a:a7:54:bd:98:12: 7e:25:8e:90:63:59:5c:0a:79:47:d0:dc:0d:07:9d: b9:c1:62:fc:44:ad:f1:48:ca:70:40:30:02:81:43: 65:69:fa:f2:f3:7c:b2:d0:f7:34:70:fb:cc:cb:36: 8f:87:e9:fd:20:c2:0b:18:15:da:dd:eb:10:22:60: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:53:4D:34:9F:E5:64:90:7B:9D:11:30:02:69:BA:FC:69:DA:69:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl X509v3 Authority Key Identifier: keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer sbgp-ipAddrBlock: critical IPv4: 168.137.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5c:56:4b:66:d5:00:b1:52:46:87:c6:06:94:55:fa:ca:a0: bc:ab:5e:26:e9:28:83:63:09:b8:03:e9:68:e3:df:d6:c9:c2: 92:38:65:fa:99:33:df:9b:6b:7b:88:67:52:dd:43:44:a0:61: 31:d4:46:e0:87:b8:6e:08:89:a1:70:13:d4:36:4d:43:bf:9c: fe:f2:27:ec:71:66:bb:9c:cd:b3:f5:75:d6:f6:ab:4f:ad:1b: 9e:9e:75:01:3c:89:eb:5e:65:10:69:08:1a:c8:a9:17:7e:c0: fc:54:b2:c8:ce:10:0b:2e:55:cf:31:ea:28:40:bf:70:5a:21: 21:42:b8:80:66:b3:7d:12:8d:b4:85:b5:d3:92:aa:77:8d:8e: d6:f0:5a:cd:4a:23:a7:09:b1:f6:ca:e8:cd:89:29:7e:49:30: 03:cf:77:e5:e9:c6:6a:21:1e:ae:c6:29:ae:07:e0:0a:53:ea: 87:20:51:36:ce:dc:be:e9:3e:28:69:42:dd:bd:7e:86:42:4f: a8:f6:8e:e3:a9:28:06:dd:9e:19:09:ff:49:e3:3b:3b:b5:26: 9b:0b:30:a7:ac:24:0a:4c:8b:17:ba:cf:73:ce:ac:56:54:81: 05:a6:a8:b5:c9:c9:e7:3d:3d:7a:97:42:bc:0b:ab:16:43:71: da:98:34:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgreITxPS6dGSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRlMzk0MTctZTkzMS00NTE0LTg5ZGMtYTQyYjViNDU4 ZmI1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmZlN2U4YjgtZWVhMC00ZmQ2LWFkNDktZGU4NjUzNjA2MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52JEOwNHU71jFBq//Zj221MxggtiwmXbznVE SQxmVWY3+SsFwKrEw7tl+FDiVBQm2abg2S1EtJ9B8g6Jk4azz6ehB6manv1VS+HR MGbU/H3sG0QkklDvnxS9zrg3AtY/1UJCgoOG+A0uZdlp/1OBNYwaemezj86f5zyU gogo1c0G6JuaEEIltXgQoCBOemF3/BcJrw60ctRbMB/2skmKtBfSpx9n7iU353VX JmAGAa2JHC0u37IEmo19zvyap1S9mBJ+JY6QY1lcCnlH0NwNB525wWL8RK3xSMpw QDACgUNlafry83yy0Pc0cPvMyzaPh+n9IMILGBXa3esQImDGZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFTTTSf5WSQe50RMAJpuvxp2mmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NGUz OTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJiNWI0NThmYjUvNjVjZGZhNzUtNjUyZS0z MTk4LTlkNDEtNGI4M2RjNTY2MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDRlMzk0MTctZTkzMS00NTE0LTg5 ZGMtYTQyYjViNDU4ZmI1LzQ0ZTM5NDE3LWU5MzEtNDUxNC04OWRjLWE0MmI1YjQ1 OGZiNS5jcmwwHwYDVR0jBBgwFoAURJ2ytRzKTIx3RJxmd0dmhKLGX/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NGUzOTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJi NWI0NThmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFcVktm1QCxUkaHxgaUVfrKoLyrXibpKINjCbgD6Wjj39bJwpI4ZfqZ M9+ba3uIZ1LdQ0SgYTHURuCHuG4IiaFwE9Q2TUO/nP7yJ+xxZruczbP1ddb2q0+t G56edQE8ieteZRBpCBrIqRd+wPxUssjOEAsuVc8x6ihAv3BaISFCuIBms30SjbSF tdOSqneNjtbwWs1KI6cJsfbK6M2JKX5JMAPPd+XpxmohHq7GKa4H4ApT6ocgUTbO 3L7pPihpQt29foZCT6j2juOpKAbdnhkJ/0njOzu1JpsLMKesJApMixe6z3POrFZU gQWmqLXJyec9PXqXQrwLqxZDcdqYNMU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:11 2025 by rpki-client