$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa File: 1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa (raw, json) Hash identifier: RYPzgKmt1J31qq7eN4vByL5smwtFdapKf3x/A1hMDs4= Subject key identifier: B9:4A:10:6F:CF:CD:02:04:9D:2F:05:D6:ED:CE:34:FD:21:BB:CA:B5 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584B8EACEAE51D28661772A28480 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13638 IP address blocks: 64.186.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ea:e5:1d:28:66:17:72:a2:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=995c421d-7fd5-4dc2-b2e0-8ea654fea218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:33:f5:33:3d:f1:db:4f:a8:e7:11:42:1a: be:65:77:a4:2d:a4:0f:03:d4:2d:d7:4b:51:24:b1: 21:12:ec:e7:cc:ee:0b:ae:a5:ba:3b:db:c0:6b:a6: 9c:51:18:3d:85:81:77:65:ca:06:ed:b9:ce:3a:37: 58:d6:99:94:77:32:df:0e:d2:26:9b:ef:f0:31:f3: 19:a9:0b:34:93:24:b0:8a:32:30:0f:cd:31:65:fe: b3:b2:5b:f8:aa:e5:11:82:97:f1:70:f6:fd:85:d3: 81:a9:2e:82:3e:4d:02:b5:fc:a5:bf:4d:b7:42:57: 12:a7:00:6a:ce:9c:ca:20:5f:65:3c:6f:c9:7a:bd: 6a:6e:c8:8b:c5:91:3d:44:84:5c:26:d0:91:f4:b0: f1:40:d3:d3:04:df:18:13:b9:51:8e:8f:c7:a7:40: 8d:d8:9b:43:83:c4:71:8e:df:c4:3e:41:39:ef:1f: 25:04:7f:a3:7f:ec:43:e4:2a:24:76:ec:8a:7e:71: 99:98:06:a0:f1:04:15:5e:8a:2e:89:e2:0e:83:d3: 45:df:93:2f:1d:17:08:fb:04:a4:fe:1a:26:b0:5e: b7:a8:10:fa:60:65:ca:28:a2:34:72:76:48:71:dd: 01:53:97:48:87:a0:d4:29:e8:b0:c0:08:62:c8:e2: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:10:6F:CF:CD:02:04:9D:2F:05:D6:ED:CE:34:FD:21:BB:CA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 64.186.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0d:09:dc:cd:28:4b:54:57:ac:37:4e:2f:ec:17:0f:c6:8b: b5:07:ae:cb:9d:c6:3d:72:32:0a:73:46:83:89:2b:06:f0:e8: ba:5f:bd:85:12:29:21:6b:8b:f2:a3:bf:b0:d4:f9:5f:df:fd: 78:5b:d0:8e:e9:6e:17:a2:10:96:49:7c:27:fc:ff:01:4b:2a: b7:8d:ef:02:e1:ff:f8:05:32:b7:06:91:63:15:4e:4b:a5:a2: 90:20:55:10:65:61:57:51:3f:0b:e3:ed:dd:6d:8b:23:e5:98: e8:50:cf:86:05:93:0e:18:65:a3:df:60:78:b4:3e:03:26:e1: 6d:40:78:c8:e2:42:ba:0e:4a:e5:ed:d7:ad:02:5d:1f:35:43: 49:0b:6f:92:e6:18:22:be:91:91:7a:97:a5:9f:b7:a8:cc:f5: 72:df:fc:df:45:b9:e5:7b:c1:8c:8e:5a:6b:0b:8c:1c:06:7d: 5c:1b:05:44:f4:4c:5f:15:c0:98:cb:ee:6a:28:10:c4:10:15: c6:8f:a8:de:04:6d:a7:41:19:b6:42:e4:36:4f:5d:a8:95:bc: e8:0e:25:16:63:d3:0f:45:66:33:ba:fc:a7:0d:5b:3a:0d:df: 1d:eb:44:77:f5:9a:7d:71:8f:24:9a:2c:95:ef:81:92:9b:b2: 20:b6:48:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOrlHShmF3KihIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTk1YzQyMWQtN2ZkNS00ZGMyLWIyZTAtOGVhNjU0ZmVhMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA0z9TM98dtPqOcRQhq+ZXekLaQPA9Qt10tR JLEhEuznzO4LrqW6O9vAa6acURg9hYF3ZcoG7bnOOjdY1pmUdzLfDtImm+/wMfMZ qQs0kySwijIwD80xZf6zslv4quURgpfxcPb9hdOBqS6CPk0Ctfylv023QlcSpwBq zpzKIF9lPG/Jer1qbsiLxZE9RIRcJtCR9LDxQNPTBN8YE7lRjo/Hp0CN2JtDg8Rx jt/EPkE57x8lBH+jf+xD5CokduyKfnGZmAag8QQVXoouieIOg9NF35MvHRcI+wSk /homsF63qBD6YGXKKKI0cnZIcd0BU5dIh6DUKeiwwAhiyOJEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlKEG/PzQIEnS8F1u3ONP0hu8q1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvMWY0NDExOWQtYWZiMi0z MWViLTg0MTktOWVkZTMwYTdmYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0NCdzNKEtUV6w3Ti/sFw/Gi7UHrsudxj1yMgpzRoOJKwbw6LpfvYUS KSFri/Kjv7DU+V/f/Xhb0I7pbheiEJZJfCf8/wFLKreN7wLh//gFMrcGkWMVTkul opAgVRBlYVdRPwvj7d1tiyPlmOhQz4YFkw4YZaPfYHi0PgMm4W1AeMjiQroOSuXt 160CXR81Q0kLb5LmGCK+kZF6l6Wft6jM9XLf/N9FueV7wYyOWmsLjBwGfVwbBUT0 TF8VwJjL7mooEMQQFcaPqN4EbadBGbZC5DZPXaiVvOgOJRZj0w9FZjO6/KcNWzoN 3x3rRHf1mn1xjySaLJXvgZKbsiC2SGo= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:58 2025 by rpki-client