$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/c94833e2-0b44-31e2-8156-8ab40893b376.roa File: c94833e2-0b44-31e2-8156-8ab40893b376.roa (raw, json) Hash identifier: XSb5t1YpfKXGf4g8cAfLM0/+T9/qUDacxZWmnO916gw= Subject key identifier: 95:F6:C0:84:77:91:67:5D:5E:F3:8C:F6:52:41:9A:23:36:3D:2F:17 Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584BBB758E235067CA6CD4B4FC80 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/c94833e2-0b44-31e2-8156-8ab40893b376.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 211192 IP address blocks: 64.113.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8e:23:50:67:ca:6c:d4:b4:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=fa52d81a-fca4-4836-a231-4809696a463d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:39:1c:5c:db:8c:6e:84:0a:76:84:02:d9:14: 94:33:b3:d2:48:d7:8f:a8:19:ee:98:b5:27:97:5b: 62:e6:d0:43:b6:e5:e7:d0:d5:d4:b4:8d:5b:d9:a2: 73:67:27:5e:51:e0:0d:9e:b9:1b:4b:77:a9:2a:be: c3:49:11:c9:ca:e3:70:90:18:03:5c:4f:8f:3a:56: e6:9b:f1:4d:d7:2e:b7:0c:d8:3d:ac:08:d5:d6:de: e0:ba:2b:8c:95:3f:b6:9f:06:c0:91:92:5d:fb:02: e0:a5:90:a0:a9:09:11:fe:fe:32:4b:9d:bf:29:12: de:63:d0:56:71:2d:2a:36:d5:be:77:79:9c:6e:8b: 26:e6:6f:8e:79:8c:22:f8:9a:41:d0:ef:cf:c7:05: 3a:05:f4:29:8c:5b:fe:e2:2a:db:f1:5a:56:75:5f: a0:bd:d0:3d:c2:00:ff:58:2b:87:12:2f:eb:5f:48: bf:0e:10:5a:ba:ba:53:28:64:64:f6:b5:5b:88:be: be:cb:c0:4f:40:c3:20:ee:d8:67:69:59:6d:17:35: fb:8c:f0:0a:41:6c:7b:24:8a:77:1b:19:57:26:67: 02:85:63:35:43:66:fb:d9:12:c6:ce:c0:55:bb:b7: 39:ca:24:3e:8f:04:a0:5c:d3:42:b2:d0:6c:e5:77: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:C0:84:77:91:67:5D:5E:F3:8C:F6:52:41:9A:23:36:3D:2F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/c94833e2-0b44-31e2-8156-8ab40893b376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:de:28:03:6a:d5:3c:45:d1:cb:73:25:6d:0b:01:01:8d:09: c5:92:97:80:62:53:e5:8e:48:3a:b2:a5:57:57:8d:bb:e5:94: b8:fc:ba:c1:a3:80:fb:4f:21:a2:dc:36:f1:11:53:0e:65:85: 36:a9:df:a0:30:5a:ce:ad:31:ab:18:3b:cf:ed:c8:a7:3a:db: be:ae:07:df:46:db:16:1a:a2:c8:23:08:41:57:29:0f:6a:97: 40:fd:06:fe:5a:b1:4b:cc:4d:16:fa:c5:ca:60:81:a3:d4:a9: d9:76:e1:35:f1:fd:6c:9b:91:bc:ca:8e:37:7a:0f:4d:cb:23: f9:be:2d:31:c0:90:54:82:6a:4b:43:88:97:9e:81:19:fb:2e: 49:5e:8b:71:7e:43:a0:ec:4b:3e:05:44:0c:b1:ba:73:e1:08: 61:3a:18:e2:cc:58:c6:a4:02:c2:b0:5d:be:15:43:7e:4f:80: 8e:eb:9b:f9:ec:39:d6:83:1b:86:97:05:85:b8:a0:0b:02:b2: 2f:a8:6f:ac:4b:b5:92:5f:25:23:3c:1a:5d:e8:b6:97:3c:e6: 40:b5:1b:f8:92:6a:f8:b7:bd:06:b1:1b:2c:65:b5:90:61:e5: 23:50:62:39:1f:00:65:b8:ec:54:51:45:fc:ea:39:6c:f5:3f: 66:bb:34:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dY4jUGfKbNS0/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmE1MmQ4MWEtZmNhNC00ODM2LWEyMzEtNDgwOTY5NmE0NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzkcXNuMboQKdoQC2RSUM7PSSNePqBnumLUn l1ti5tBDtuXn0NXUtI1b2aJzZydeUeANnrkbS3epKr7DSRHJyuNwkBgDXE+POlbm m/FN1y63DNg9rAjV1t7guiuMlT+2nwbAkZJd+wLgpZCgqQkR/v4yS52/KRLeY9BW cS0qNtW+d3mcbosm5m+OeYwi+JpB0O/PxwU6BfQpjFv+4irb8VpWdV+gvdA9wgD/ WCuHEi/rX0i/DhBaurpTKGRk9rVbiL6+y8BPQMMg7thnaVltFzX7jPAKQWx7JIp3 GxlXJmcChWM1Q2b72RLGzsBVu7c5yiQ+jwSgXNNCstBs5XdgCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX2wIR3kWddXvOM9lJBmiM2PS8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvYzk0ODMzZTItMGI0NC0z MWUyLTgxNTYtOGFiNDA4OTNiMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPeKANq1TxF0ctzJW0LAQGNCcWSl4BiU+WOSDqypVdXjbvllLj8usGj gPtPIaLcNvERUw5lhTap36AwWs6tMasYO8/tyKc6276uB99G2xYaosgjCEFXKQ9q l0D9Bv5asUvMTRb6xcpggaPUqdl24TXx/WybkbzKjjd6D03LI/m+LTHAkFSCaktD iJeegRn7Lklei3F+Q6DsSz4FRAyxunPhCGE6GOLMWMakAsKwXb4VQ35PgI7rm/ns OdaDG4aXBYW4oAsCsi+ob6xLtZJfJSM8Gl3otpc85kC1G/iSavi3vQaxGyxltZBh 5SNQYjkfAGW47FRRRfzqOWz1P2a7NMI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:55 2025 by rpki-client