$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa File: def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa (raw, json) Hash identifier: cN2Xr1Qy5BFL2fyPC4NHYZJGnZ4y7rBSu/MpP4XImUs= Subject key identifier: C1:07:D0:2A:FC:51:2B:A9:2C:D8:4D:57:9A:07:A5:5B:4F:0D:33:FC Certificate issuer: /CN=4df6cec2-94eb-4439-960f-00719026d770 Certificate serial: 010D0C9F4328584B4D11C749B4F91FECF405AE80 Authority key identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 64.28.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c7:49:b4:f9:1f:ec:f4:05:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df6cec2-94eb-4439-960f-00719026d770 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=c3b89f45-2500-4d45-8f84-a8531e6dc8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ff:be:49:ea:cf:2b:b9:e4:3d:08:7a:e3:4a: 80:b2:cc:3d:39:54:37:f5:0d:a3:14:a8:11:c5:cf: d5:11:73:4f:74:d8:3e:78:33:fe:59:48:30:0e:9a: ec:d0:00:22:7f:50:a2:be:59:f4:31:b4:16:b1:0d: 62:23:27:06:af:c6:d4:81:ca:92:fe:41:94:a4:fe: ce:8b:8c:33:b0:66:7e:5f:85:a5:ed:97:5a:96:ce: e2:04:2f:27:ba:2b:1f:39:09:24:02:59:ef:a9:5b: f8:53:4e:94:a7:54:94:80:da:eb:08:37:87:b7:c4: 1d:6e:0f:4c:15:ad:09:25:79:e7:26:a4:62:a2:25: 73:17:58:25:3f:a5:f0:cd:53:57:e8:6f:64:e8:55: 9e:f0:27:44:bd:b9:fb:10:c6:dc:bf:39:be:1c:86: c7:88:76:13:af:a4:14:10:93:33:f3:9d:76:6f:64: 86:71:04:87:e7:47:d2:8c:54:7e:a9:eb:1e:5a:0a: 54:f8:2a:c2:7f:de:cb:98:77:8b:8b:9f:67:ce:1d: a7:95:bb:ba:7b:37:d2:c5:1e:44:e0:8e:da:15:d0: ce:09:f1:fb:e5:2d:33:66:63:45:fb:f8:83:bd:b2: fc:c6:19:f6:3a:a9:c2:10:c5:43:2d:f4:c8:26:d6: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:07:D0:2A:FC:51:2B:A9:2C:D8:4D:57:9A:07:A5:5B:4F:0D:33:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl X509v3 Authority Key Identifier: keyid:C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer sbgp-ipAddrBlock: critical IPv4: 64.28.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8a:dc:25:8a:8b:ab:cb:fe:02:0b:22:9d:e0:af:e2:ed:2f: 51:f3:c9:aa:5b:6f:a0:6f:60:81:15:bf:99:78:99:30:85:df: af:2f:0c:41:38:13:2f:3d:30:5d:c0:ab:08:54:6f:1e:cd:0a: 66:df:36:3b:7b:c1:88:91:57:79:ef:fe:0a:52:0e:e5:1b:d7: 89:c0:6e:f7:cf:e6:c6:66:56:88:c2:11:58:85:6c:33:39:a6: 06:b3:d8:79:b3:93:e2:2a:b0:e5:e3:c9:23:7d:14:a7:ce:7e: f1:da:40:96:54:5d:7e:5c:b2:88:8b:eb:21:fa:17:1f:99:e7: d0:99:6a:8f:77:13:de:92:68:28:af:68:cc:0c:47:d0:4e:aa: c7:90:f8:93:f6:6a:68:3c:47:34:33:b5:ee:24:26:11:cb:66: 7d:84:db:d5:06:c7:46:4b:3e:68:33:e0:cb:95:54:7b:1f:32: 91:e9:5c:cd:b8:66:1b:6f:19:72:e0:bb:e6:e4:f5:4a:0b:6c: cd:00:78:96:4d:13:91:70:46:5b:db:40:08:11:fd:ff:d4:fa: ca:68:68:14:2b:a6:5a:88:9f:6c:1b:7f:4e:9e:69:7f:53:0d: 4b:2d:62:e0:b2:3a:63:df:a5:56:4d:d6:1c:10:1d:63:36:f4: e3:b3:59:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcdJtPkf7PQFroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmNmNlYzItOTRlYi00NDM5LTk2MGYtMDA3MTkwMjZk NzcwMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YzNiODlmNDUtMjUwMC00ZDQ1LThmODQtYTg1MzFlNmRjOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9P++SerPK7nkPQh640qAssw9OVQ39Q2jFKgR xc/VEXNPdNg+eDP+WUgwDprs0AAif1Civln0MbQWsQ1iIycGr8bUgcqS/kGUpP7O i4wzsGZ+X4Wl7Zdals7iBC8nuisfOQkkAlnvqVv4U06Up1SUgNrrCDeHt8Qdbg9M Fa0JJXnnJqRioiVzF1glP6XwzVNX6G9k6FWe8CdEvbn7EMbcvzm+HIbHiHYTr6QU EJMz8512b2SGcQSH50fSjFR+qeseWgpU+CrCf97LmHeLi59nzh2nlbu6ezfSxR5E 4I7aFdDOCfH75S0zZmNF+/iDvbL8xhn2OqnCEMVDLfTIJtZ5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEH0Cr8USupLNhNV5oHpVtPDTP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2 Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcxOTAyNmQ3NzAvZGVmMmY3MWEtOGIxNS0z MmM5LTkxNjItNjFiNWMyYzNjZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRmNmNlYzItOTRlYi00NDM5LTk2 MGYtMDA3MTkwMjZkNzcwLzRkZjZjZWMyLTk0ZWItNDQzOS05NjBmLTAwNzE5MDI2 ZDc3MC5jcmwwHwYDVR0jBBgwFoAUx50sIXa5BQ5ZNRcvyHH6yeoBtDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcx OTAyNmQ3NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBwrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSK3CWKi6vL/gILIp3gr+LtL1Hzyapbb6BvYIEVv5l4mTCF368vDEE4 Ey89MF3AqwhUbx7NCmbfNjt7wYiRV3nv/gpSDuUb14nAbvfP5sZmVojCEViFbDM5 pgaz2Hmzk+IqsOXjySN9FKfOfvHaQJZUXX5csoiL6yH6Fx+Z59CZao93E96SaCiv aMwMR9BOqseQ+JP2amg8RzQzte4kJhHLZn2E29UGx0ZLPmgz4MuVVHsfMpHpXM24 ZhtvGXLgu+bk9UoLbM0AeJZNE5FwRlvbQAgR/f/U+spoaBQrplqIn2wbf06eaX9T DUstYuCyOmPfpVZN1hwQHWM29OOzWQM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:49 2025 by rpki-client