$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c1c3b086-bdf8-344c-8165-2f692d632047.roa File: c1c3b086-bdf8-344c-8165-2f692d632047.roa (raw, json) Hash identifier: 6xD/nGzMt4z0oknmkZjRhngqYhmHlLD4i4Oft7rhfkY= Subject key identifier: E9:7A:D3:E4:B9:BE:B6:68:F8:6E:9B:4B:28:10:8F:CC:5E:F1:AB:AC Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B230F1827FF1458893419E880 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c1c3b086-bdf8-344c-8165-2f692d632047.roa Signing time: Tue 09 Sep 2025 11:51:24 +0000 ROA not before: Tue 09 Sep 2025 11:51:24 +0000 ROA not after: Mon 08 Dec 2025 12:51:24 +0000 asID: 6939 IP address blocks: 64.64.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:0f:18:27:ff:14:58:89:34:19:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 9 11:51:24 2025 GMT Not After : Dec 8 12:51:24 2025 GMT Subject: CN=e2b9a32a-292b-4a4f-8ade-96745945a070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:e0:93:34:d5:d2:2d:07:f1:72:12:6e:aa: 3b:bb:71:07:97:58:3d:60:f2:03:6a:92:6b:a7:50: 44:ad:53:76:1d:96:b1:f6:4e:3a:9f:04:b4:96:7b: 2a:4d:9e:0d:2f:e1:2a:c5:b8:6d:ca:ce:44:09:7c: 52:5b:d2:1f:41:9b:80:5f:ca:9f:35:5b:09:18:2f: a9:73:52:ef:f4:e0:b0:b5:6c:f5:b9:44:c0:70:8d: 2e:44:de:29:4f:75:a9:3f:99:06:d0:61:75:77:df: 1c:a3:6f:ba:ff:9e:0e:ac:bd:de:21:a2:b6:9a:7d: 25:04:14:44:7b:8c:59:3d:4e:74:be:76:61:63:65: 68:c3:e0:00:a8:85:24:f2:72:2d:ce:af:31:db:eb: 86:08:46:0b:ea:4d:9c:ed:43:2d:36:10:63:fd:8c: e6:7d:e4:9e:05:13:84:b8:c3:c7:71:ef:6b:9d:1c: fb:5c:23:83:95:18:5b:13:5a:a3:22:c4:ee:6d:d4: 47:17:7b:46:d8:e4:b5:99:bf:a1:5f:47:30:2b:ac: fc:53:69:0d:84:c3:28:61:3e:4a:6d:b0:03:c8:a9: 88:65:bc:4b:80:2e:6f:4a:20:ff:00:b7:c2:e7:6e: 5a:80:f5:85:9d:20:70:06:b4:02:74:4c:c9:97:ee: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:D3:E4:B9:BE:B6:68:F8:6E:9B:4B:28:10:8F:CC:5E:F1:AB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c1c3b086-bdf8-344c-8165-2f692d632047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 64.64.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:51:7b:d8:85:cb:74:ff:d7:89:1c:6b:34:c6:df:9e:00:86: 71:a9:f3:c1:a5:70:3a:8b:c2:c2:be:9d:6c:56:6b:05:8f:9e: 52:29:9e:72:79:3c:4f:7c:54:91:5d:b2:96:a9:ba:20:e1:d8: 4f:63:59:6f:42:dc:52:ea:9a:8c:32:c9:a1:b1:e6:47:18:4b: 76:dd:42:91:77:76:2e:65:50:4d:f5:a3:99:b2:1a:a2:a3:11: 3f:0b:17:e0:9a:09:c3:ab:37:f7:16:f2:9f:75:18:06:4a:3b: 8c:29:29:df:7c:67:9a:cf:a6:1c:b4:57:ec:3c:fc:b3:e0:ec: fd:0c:34:ec:fc:8e:ed:90:b1:a4:6c:1b:97:cb:c9:90:8c:2d: 85:59:01:f4:2b:3e:73:2c:50:07:c1:34:c4:99:35:9d:5c:c4: eb:bd:92:39:99:97:09:2f:eb:5e:82:cb:fe:86:bf:72:8b:b2: 6e:12:92:19:13:5d:14:c2:9e:8e:8c:36:be:2f:0c:13:ce:88: f7:82:dd:49:b7:dc:62:77:9b:19:ba:3e:5a:e3:83:96:0a:03: e5:9e:43:f6:1e:a0:d5:e6:0f:ab:c8:13:d4:2a:81:4e:dc:a8: 65:2f:73:4f:f4:97:be:3d:26:1f:c1:aa:95:e3:a2:85:19:66: d2:49:d0:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjDxgn/xRYiTQZ6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkwOTExNTEyNFoXDTI1MTIwODEyNTEyNFowLzEtMCsGA1UEAxMk ZTJiOWEzMmEtMjkyYi00YTRmLThhZGUtOTY3NDU5NDVhMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFrgkzTV0i0H8XISbqo7u3EHl1g9YPIDapJr p1BErVN2HZax9k46nwS0lnsqTZ4NL+Eqxbhtys5ECXxSW9IfQZuAX8qfNVsJGC+p c1Lv9OCwtWz1uUTAcI0uRN4pT3WpP5kG0GF1d98co2+6/54OrL3eIaK2mn0lBBRE e4xZPU50vnZhY2Vow+AAqIUk8nItzq8x2+uGCEYL6k2c7UMtNhBj/YzmfeSeBROE uMPHce9rnRz7XCODlRhbE1qjIsTubdRHF3tG2OS1mb+hX0cwK6z8U2kNhMMoYT5K bbADyKmIZbxLgC5vSiD/ALfC525agPWFnSBwBrQCdEzJl+7iEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl60+S5vrZo+G6bSygQj8xe8ausMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzFjM2IwODYtYmRmOC0z NDRjLTgxNjUtMmY2OTJkNjMyMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEBlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlRe9iFy3T/14kcazTG354AhnGp88GlcDqLwsK+nWxWawWPnlIpnnJ5 PE98VJFdspapuiDh2E9jWW9C3FLqmowyyaGx5kcYS3bdQpF3di5lUE31o5myGqKj ET8LF+CaCcOrN/cW8p91GAZKO4wpKd98Z5rPphy0V+w8/LPg7P0MNOz8ju2QsaRs G5fLyZCMLYVZAfQrPnMsUAfBNMSZNZ1cxOu9kjmZlwkv616Cy/6Gv3KLsm4SkhkT XRTCno6MNr4vDBPOiPeC3Um33GJ3mxm6Plrjg5YKA+WeQ/YeoNXmD6vIE9QqgU7c qGUvc0/0l749Jh/BqpXjooUZZtJJ0Is= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:28 2025 by rpki-client