$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa File: 31237730-031c-3a34-8009-f2ad063f0d88.roa (raw, json) Hash identifier: e6PoGBPl78GT78stfEC31nwvk/D+V6yEGkMe/Y6NX6s= Subject key identifier: 2A:B0:DA:E1:C2:97:F7:C2:17:26:81:03:45:1B:FF:F0:AC:5A:4F:63 Certificate issuer: /CN=85154141-f81d-4a16-94db-ba21a7f28a12 Certificate serial: 010D0C9F4328584BBE4042DDC1991BB793748980 Authority key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 53464 IP address blocks: 64.20.212.0/22 maxlen: 24 216.38.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:42:dd:c1:99:1b:b7:93:74:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85154141-f81d-4a16-94db-ba21a7f28a12 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=ec4917ed-7693-41e9-85b9-5b1d91bcac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:79:c5:7a:77:30:e3:26:cf:ef:33:44:28:6c: c6:8e:0e:19:a3:e5:19:45:45:c5:9e:42:b1:9a:7a: e1:15:59:97:f0:cc:36:cb:f7:15:c7:73:39:38:37: cc:e6:f1:50:8d:2f:80:ef:5a:dc:46:84:16:5e:a7: 96:11:e0:55:e6:e8:46:3c:72:26:f5:e7:56:c4:86: 16:23:94:07:40:62:7e:f3:7d:27:e8:68:43:8b:b1: 7f:7a:a0:19:77:50:ff:12:bf:96:e7:24:95:04:7f: 28:44:40:c5:92:71:13:ca:92:a9:f5:ae:ff:0b:92: b7:8b:7a:97:ad:4b:5b:2d:42:c0:5e:5b:6c:20:ef: b6:35:fa:ae:f2:fd:46:1f:c3:ea:dc:9b:21:66:b8: 14:ae:24:34:5f:35:80:7d:67:a2:bf:1d:d4:33:ba: e5:6d:eb:1e:29:9f:6e:14:14:ff:0e:00:8a:cc:95: ec:e2:f3:f0:33:2e:66:c8:60:d8:2e:1c:23:9a:1a: 88:fd:cf:82:a4:2a:5c:36:73:99:89:a4:74:74:e6: 89:f3:bd:04:03:67:5b:9c:11:d2:fd:2e:4f:06:fd: c9:ba:19:22:ae:da:5c:e6:62:26:fd:20:89:00:45: d4:28:a7:91:4b:71:90:73:29:9b:1f:10:3a:38:06: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B0:DA:E1:C2:97:F7:C2:17:26:81:03:45:1B:FF:F0:AC:5A:4F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl X509v3 Authority Key Identifier: keyid:48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer sbgp-ipAddrBlock: critical IPv4: 64.20.212.0/22 216.38.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6f:5f:99:62:b2:5b:82:08:d4:5f:e2:07:5d:ab:da:80:bb: af:1c:0e:8d:9e:df:49:cc:75:cc:b2:9d:ac:40:aa:58:89:ba: 48:72:a0:9b:bb:56:fc:37:c2:53:6d:02:04:c1:51:c6:6f:35: 35:50:44:22:c8:dc:a3:de:89:c3:55:a9:eb:f6:c6:b2:26:10: b9:7e:25:f7:02:dd:0d:6c:43:f0:52:8b:c4:86:ca:a7:5d:da: 24:ef:3c:32:0f:4b:fb:28:8f:bd:a2:11:aa:75:dc:1a:0c:e3: f8:e3:e5:d5:2b:a1:ff:c9:8a:98:2d:47:b3:55:13:5c:8f:19: 25:04:34:51:1c:38:37:5a:2b:7a:0c:da:8c:63:99:4c:65:7f: 28:e4:cc:d1:23:14:a4:45:3c:8b:cc:84:fc:3e:65:6a:86:67: 1e:b7:b9:c6:d5:ca:d9:7f:7e:e9:15:01:db:d2:e0:6f:5c:a0: 18:75:79:55:62:90:c1:c3:fb:52:19:ff:25:a8:08:7f:64:bf: 11:93:2c:06:f9:32:58:0b:2d:9f:46:a0:28:74:42:de:93:46: ec:8e:f5:c9:c5:39:70:8e:6f:dc:c8:f3:93:83:d9:86:eb:2c: 1c:cc:67:79:a2:3a:f2:df:74:e4:43:3d:e6:3b:48:6e:70:35: 8e:b5:6e:51 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu+QELdwZkbt5N0iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxNTQxNDEtZjgxZC00YTE2LTk0ZGItYmEyMWE3ZjI4 YTEyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWM0OTE3ZWQtNzY5My00MWU5LTg1YjktNWIxZDkxYmNhYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnnFencw4ybP7zNEKGzGjg4Zo+UZRUXFnkKx mnrhFVmX8Mw2y/cVx3M5ODfM5vFQjS+A71rcRoQWXqeWEeBV5uhGPHIm9edWxIYW I5QHQGJ+830n6GhDi7F/eqAZd1D/Er+W5ySVBH8oREDFknETypKp9a7/C5K3i3qX rUtbLULAXltsIO+2Nfqu8v1GH8Pq3JshZrgUriQ0XzWAfWeivx3UM7rlbeseKZ9u FBT/DgCKzJXs4vPwMy5myGDYLhwjmhqI/c+CpCpcNnOZiaR0dOaJ870EA2dbnBHS /S5PBv3Juhkirtpc5mIm/SCJAEXUKKeRS3GQcymbHxA6OAai/QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCqw2uHCl/fCFyaBA0Ub//CsWk9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NTE1 NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIxYTdmMjhhMTIvMzEyMzc3MzAtMDMxYy0z YTM0LTgwMDktZjJhZDA2M2YwZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODUxNTQxNDEtZjgxZC00YTE2LTk0 ZGItYmEyMWE3ZjI4YTEyLzg1MTU0MTQxLWY4MWQtNGExNi05NGRiLWJhMjFhN2Yy OGExMi5jcmwwHwYDVR0jBBgwFoAUSJaQm6A/PV+UOEHu+QZOSWRDO+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NTE1NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIx YTdmMjhhMTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQBTUAwQC 2CbgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEtvX5lisluCCNRf4gddq9qAu68cDo2e30nMdcyynaxAqliJ ukhyoJu7Vvw3wlNtAgTBUcZvNTVQRCLI3KPeicNVqev2xrImELl+JfcC3Q1sQ/BS i8SGyqdd2iTvPDIPS/soj72iEap13BoM4/jj5dUrof/JipgtR7NVE1yPGSUENFEc ODdaK3oM2oxjmUxlfyjkzNEjFKRFPIvMhPw+ZWqGZx63ucbVytl/fukVAdvS4G9c oBh1eVVikMHD+1IZ/yWoCH9kvxGTLAb5MlgLLZ9GoCh0Qt6TRuyO9cnFOXCOb9zI 85OD2YbrLBzMZ3miOvLfdORDPeY7SG5wNY61blE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:09 2025 by rpki-client