$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa File: 928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa (raw, json) Hash identifier: rtqbm9eYT0V5Z2M463bTcI37fglpissCo3/AGM0Z6v4= Subject key identifier: 61:89:84:DA:BE:59:82:DE:A7:03:64:14:C4:02:40:9E:A0:C5:96:27 Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584AFC1C03AB88290493E00D39E0 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 212238 IP address blocks: 64.113.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:03:ab:88:29:04:93:e0:0d:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=23675f4f-25df-41b7-8867-92dfb598b5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:57:f5:b1:fa:91:ef:77:d8:17:04:40:2f: 2c:8d:ae:a1:fe:b5:18:83:82:42:34:c2:35:b1:27: 34:a8:a7:51:28:1b:f6:ff:46:a9:8a:4e:23:d0:d4: a1:61:14:1d:54:4b:13:f6:84:09:7f:33:3a:8f:8d: 39:c1:9a:90:21:30:ab:d5:10:01:1b:0c:fd:19:99: 89:32:c1:8f:b6:ac:08:11:03:2a:fe:c8:44:0c:e0: 47:65:d6:a4:62:73:3c:be:ab:ef:9f:49:ce:db:13: 49:6f:30:73:96:1c:6a:b9:e2:5f:ed:a0:ef:c3:31: 76:2d:c8:bc:7c:80:9c:ca:a6:88:05:e7:05:7e:25: e2:aa:b9:45:71:0b:0f:af:31:7a:9e:a7:e6:85:24: 04:90:e8:86:4b:59:b7:c0:25:f3:ed:2b:f0:a8:a9: 34:81:06:09:2b:21:b5:7f:1a:0e:ed:aa:fa:71:ce: 6c:63:3c:43:4b:40:51:58:b9:9a:a6:f7:5a:ad:58: 49:8c:3a:9c:e1:25:25:a4:ed:29:17:25:e2:21:db: 1c:24:48:8c:2c:b0:1c:f3:19:92:27:7b:d2:39:80: dc:e3:71:82:75:ba:2a:07:0d:6f:e3:4a:5c:c3:f6: 09:65:10:43:41:30:60:86:df:ae:24:60:9c:05:96: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:84:DA:BE:59:82:DE:A7:03:64:14:C4:02:40:9E:A0:C5:96:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:60:44:87:ea:fe:07:1e:c6:f6:9b:ac:f9:8f:da:0e:e7:b6: 9d:cf:4b:b4:e6:bf:d4:0f:9e:ef:0c:e0:df:3d:8d:5d:a4:84: 5c:ed:91:25:73:a8:a8:41:ea:7e:49:96:d7:ea:6b:3f:a8:31: 46:38:b9:ab:44:dc:b4:f0:7a:c8:81:be:db:aa:29:2e:bb:2d: af:ab:10:c1:40:80:1b:85:4d:33:bd:02:72:6d:ac:29:d0:6d: 7c:77:cb:35:21:03:c1:61:9d:fd:1e:15:af:cb:ef:9f:48:1c: 76:38:75:19:0c:17:a6:26:b6:78:04:a7:65:06:fb:f4:46:6b: 79:38:98:95:aa:73:0c:cd:67:dc:78:11:db:a1:2a:c2:b4:3f: 0e:a8:de:da:8a:62:8c:11:5f:e0:3c:b4:1c:aa:bf:f5:8f:fd: 30:e4:a2:54:94:2a:dd:16:13:06:45:4f:86:1a:8a:08:d4:e5: 45:c3:a5:34:99:e0:0b:6b:7b:f4:5b:01:56:d1:1b:e1:f5:17: c1:db:0d:5c:5b:94:8f:22:59:b6:ee:e3:62:e9:3b:15:93:41: 6a:93:12:5c:37:a3:80:30:5b:62:a9:20:ef:fd:b5:28:f0:48: fb:3f:f9:b9:8a:fc:b1:e4:78:67:12:e6:25:dc:2f:25:fa:8e: 9d:c7:8d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAOriCkEk+ANOeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjM2NzVmNGYtMjVkZi00MWI3LTg4NjctOTJkZmI1OThiNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY5X9bH6ke932BcEQC8sja6h/rUYg4JCNMI1 sSc0qKdRKBv2/0apik4j0NShYRQdVEsT9oQJfzM6j405wZqQITCr1RABGwz9GZmJ MsGPtqwIEQMq/shEDOBHZdakYnM8vqvvn0nO2xNJbzBzlhxqueJf7aDvwzF2Lci8 fICcyqaIBecFfiXiqrlFcQsPrzF6nqfmhSQEkOiGS1m3wCXz7SvwqKk0gQYJKyG1 fxoO7ar6cc5sYzxDS0BRWLmapvdarVhJjDqc4SUlpO0pFyXiIdscJEiMLLAc8xmS J3vSOYDc43GCdboqBw1v40pcw/YJZRBDQTBght+uJGCcBZZBzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGJhNq+WYLepwNkFMQCQJ6gxZYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvOTI4ZWJhNTQtMjFhNS0z Yzg1LWJkMjEtY2RmYmMzZTQ4MmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpgRIfq/gcexvabrPmP2g7ntp3PS7Tmv9QPnu8M4N89jV2khFztkSVz qKhB6n5Jltfqaz+oMUY4uatE3LTwesiBvtuqKS67La+rEMFAgBuFTTO9AnJtrCnQ bXx3yzUhA8Fhnf0eFa/L759IHHY4dRkMF6YmtngEp2UG+/RGa3k4mJWqcwzNZ9x4 EduhKsK0Pw6o3tqKYowRX+A8tByqv/WP/TDkolSUKt0WEwZFT4YaigjU5UXDpTSZ 4Atre/RbAVbRG+H1F8HbDVxblI8iWbbu42LpOxWTQWqTElw3o4AwW2KpIO/9tSjw SPs/+bmK/LHkeGcS5iXcLyX6jp3Hjb8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:19 2025 by rpki-client