$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa File: fddd2413-252f-3060-ab9b-3fffedf3f396.roa (raw, json) Hash identifier: UGzAlMHrQEyA51u0g8w6YSHJvNSio8mQoP66mQ9pqtI= Subject key identifier: 77:16:BA:EC:4E:3D:90:9F:96:05:E8:0E:7E:CD:43:79:5B:D3:03:A0 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BA39CF57231DA7BB57D18C0A0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 40139 IP address blocks: 64.192.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f5:72:31:da:7b:b5:7d:18:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9ea14985-282c-42cb-b94f-5c70b1028b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:e6:22:b2:d4:76:d0:74:0a:12:91:c5:64: f2:20:f8:4a:2f:84:9c:60:87:3e:68:65:bc:0f:9a: 31:d5:42:fc:0a:7e:a0:5b:40:2a:58:a4:2b:b9:ab: c9:5e:60:e3:44:a4:85:31:66:33:04:33:aa:1a:c7: b4:40:ad:f5:d2:55:00:62:ad:fc:40:c4:ec:e1:90: 55:7d:b3:c6:ed:14:83:f0:59:dc:54:1d:bf:7c:e2: d4:91:ed:eb:d3:1a:ef:d5:31:b6:d5:10:2e:12:fb: 09:f2:94:9a:6d:36:ca:96:82:6b:25:55:54:f5:37: 11:e0:81:47:09:4a:d0:e0:e7:b6:ef:8e:f6:0d:91: b4:0e:9e:2d:f4:f6:4c:3c:80:8c:ce:dc:69:84:fb: 02:fe:f0:74:6f:20:39:ec:e4:18:8b:d1:51:c4:43: 22:92:5e:1c:25:84:7e:bf:cd:7e:64:49:54:0f:d8: f9:1f:1f:b7:06:29:89:9b:a9:22:8a:38:4d:a3:7d: 1a:4a:51:56:a3:83:e2:48:58:03:3d:84:3c:cf:aa: 5e:57:db:39:c6:a7:a4:5e:79:6d:e3:73:3d:d0:03: 1a:9c:77:e7:e2:52:cf:a3:cb:35:29:36:bc:5f:5d: db:e1:38:67:e4:ba:b0:7c:ce:20:22:38:81:65:db: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:16:BA:EC:4E:3D:90:9F:96:05:E8:0E:7E:CD:43:79:5B:D3:03:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.192.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:bf:90:bc:b3:9a:b7:f0:db:bd:7b:09:fb:0f:b3:c0:f0:81: f8:c3:3d:59:28:c0:37:e6:8a:17:60:84:ba:62:43:4c:61:38: 02:10:aa:cd:0d:76:b6:4e:60:8e:65:5e:07:b2:c5:79:e0:22: 03:bc:29:99:8c:b3:02:ef:6a:7a:77:42:87:17:61:cf:c5:9f: c3:09:49:e0:74:35:17:a6:04:af:05:11:1c:ee:71:ca:33:98: 26:17:52:11:23:f4:1d:e2:11:fe:dc:67:c1:91:6e:91:15:13: de:dd:96:62:24:f6:96:b8:56:e0:5f:3c:3d:be:d2:70:68:45: 0d:cb:9f:01:20:9a:b2:4d:92:86:7d:80:ff:32:bc:f9:81:7f: f5:16:55:4d:8e:99:16:14:cc:95:14:43:b9:08:16:28:2c:c2: 8f:49:1e:4e:a8:ad:8f:6c:95:37:7d:d1:8c:a8:08:bb:48:d1: c7:8d:22:e4:1a:1e:67:1e:e4:7b:4b:20:72:9d:d4:05:2f:0d: fe:01:26:54:f7:72:0b:eb:6e:ee:cb:c8:0c:28:f2:c3:d1:6e: c7:1e:1c:8d:0e:cc:02:43:e3:ec:3b:8a:a7:a0:f7:13:b9:c3: 4c:39:5c:f0:50:9b:75:19:1b:33:0d:7b:96:d7:05:2a:03:ed: 7a:f9:af:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPVyMdp7tX0YwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OWVhMTQ5ODUtMjgyYy00MmNiLWI5NGYtNWM3MGIxMDI4YjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ/mIrLUdtB0ChKRxWTyIPhKL4ScYIc+aGW8 D5ox1UL8Cn6gW0AqWKQruavJXmDjRKSFMWYzBDOqGse0QK310lUAYq38QMTs4ZBV fbPG7RSD8FncVB2/fOLUke3r0xrv1TG21RAuEvsJ8pSabTbKloJrJVVU9TcR4IFH CUrQ4Oe27472DZG0Dp4t9PZMPICMztxphPsC/vB0byA57OQYi9FRxEMikl4cJYR+ v81+ZElUD9j5Hx+3BimJm6kiijhNo30aSlFWo4PiSFgDPYQ8z6peV9s5xqekXnlt 43M90AManHfn4lLPo8s1KTa8X13b4Thn5LqwfM4gIjiBZdtRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcWuuxOPZCflgXoDn7NQ3lb0wOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmRkZDI0MTMtMjUyZi0z MDYwLWFiOWItM2ZmZmVkZjNmMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq/kLyzmrfw2717CfsPs8DwgfjDPVkowDfmihdghLpiQ0xhOAIQqs0N drZOYI5lXgeyxXngIgO8KZmMswLvanp3QocXYc/Fn8MJSeB0NRemBK8FERzuccoz mCYXUhEj9B3iEf7cZ8GRbpEVE97dlmIk9pa4VuBfPD2+0nBoRQ3LnwEgmrJNkoZ9 gP8yvPmBf/UWVU2OmRYUzJUUQ7kIFigswo9JHk6orY9slTd90YyoCLtI0ceNIuQa Hmce5HtLIHKd1AUvDf4BJlT3cgvrbu7LyAwo8sPRbsceHI0OzAJD4+w7iqeg9xO5 w0w5XPBQm3UZGzMNe5bXBSoD7Xr5rx4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:16 2025 by rpki-client