$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa File: a8d50708-183d-32fa-8e34-b0e93ebefc17.roa (raw, json) Hash identifier: tK34fy4rwpltpmd1gD9So9hrUs4tPUcyJ6CCOXdUH58= Subject key identifier: 4B:59:CA:EC:72:F3:EF:A0:FF:58:F0:8F:DF:52:FF:D6:58:6F:BA:7F Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584BA9326C3CA185E27500154EE8 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 394111 IP address blocks: 64.147.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6c:3c:a1:85:e2:75:00:15:4e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=330be879-e95c-4eff-bbe4-c5c75307354f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:89:77:ba:14:3d:bb:09:02:30:97:88:eb: c9:f6:db:d3:e6:9e:e9:c1:74:4e:e4:20:b0:d4:f6: 10:fd:5b:17:7c:a5:dc:a2:c6:e8:e9:0e:ce:24:e8: 68:92:eb:9b:8e:53:76:d3:92:68:d4:2c:3c:2e:6b: 5e:6c:9f:bb:b6:51:31:9d:54:da:6b:59:01:d3:50: 18:ef:cf:f1:8d:d7:54:19:f7:12:86:7b:52:b3:86: b1:a8:b1:06:e6:10:26:a1:de:ed:11:de:64:28:e0: 8a:20:1a:32:bf:b4:98:1d:e6:bb:70:c4:16:e6:f3: 86:d9:f9:8c:07:aa:ba:7f:ff:b9:9c:7c:88:57:64: 35:5e:83:90:f6:91:5d:e5:1b:61:ab:03:7c:df:45: 79:d3:de:72:7c:d1:ac:55:e1:db:e4:41:04:4c:b8: 4c:09:12:11:fc:1e:3d:f2:2c:5f:44:db:1e:75:0e: fc:2f:b3:48:b5:c0:f7:41:2e:61:92:42:79:8b:dc: bf:95:47:6c:8c:a9:7d:0b:28:87:13:7a:72:e6:c8: 91:bc:87:de:e8:6a:63:10:ed:b5:76:7d:19:35:a2: c4:e7:30:8c:65:83:b0:32:32:4f:ed:38:e4:2d:33: 98:3e:0a:41:d2:6c:43:27:3c:50:80:9f:cf:53:e3: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:CA:EC:72:F3:EF:A0:FF:58:F0:8F:DF:52:FF:D6:58:6F:BA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8a:40:34:3b:8d:05:d4:7a:6c:42:13:24:30:f4:37:2d:43: 6c:54:93:4b:af:34:a9:00:e2:43:82:a5:4c:1f:61:3e:ae:84: f5:dd:04:8a:db:00:5f:18:58:64:43:27:dd:54:76:41:96:14: fb:4a:6f:e7:ca:4b:20:e8:d5:2d:7c:14:bf:88:93:d4:32:f8: 72:30:c0:09:81:b6:6c:bc:9a:c7:9f:e8:45:4e:94:9e:3f:84: 80:2c:38:12:ea:01:c2:34:79:79:f4:0d:c7:c8:d5:41:af:11: a7:dc:36:84:9f:e5:9a:4d:f5:2b:34:79:14:29:8d:82:b0:2b: 86:46:0b:a5:af:ad:55:86:09:07:28:96:1a:2f:ad:24:bc:aa: 58:a1:53:1d:5b:fa:3d:9b:5f:a2:19:e9:e4:59:f8:55:cb:bb: 1f:54:40:0d:6f:88:f9:25:4a:d9:c4:fc:fb:bf:af:e6:c0:4b: 58:f7:ce:c1:2b:0b:66:b5:d4:ca:82:a8:12:80:8e:06:54:65: dd:ca:ac:2b:06:78:53:f3:89:44:7c:9d:f3:e1:ba:a7:6a:1b: 84:95:b7:32:64:e5:a4:10:4e:4c:88:45:e7:a6:05:93:86:09: ef:c1:58:59:68:5e:14:52:2e:1b:87:5f:22:d9:5e:ed:39:0e: 81:99:39:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmw8oYXidQAVTugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MzMwYmU4NzktZTk1Yy00ZWZmLWJiZTQtYzVjNzUzMDczNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gWJd7oUPbsJAjCXiOvJ9tvT5p7pwXRO5CCw 1PYQ/VsXfKXcosbo6Q7OJOhokuubjlN205Jo1Cw8LmtebJ+7tlExnVTaa1kB01AY 78/xjddUGfcShntSs4axqLEG5hAmod7tEd5kKOCKIBoyv7SYHea7cMQW5vOG2fmM B6q6f/+5nHyIV2Q1XoOQ9pFd5RthqwN830V5095yfNGsVeHb5EEETLhMCRIR/B49 8ixfRNsedQ78L7NItcD3QS5hkkJ5i9y/lUdsjKl9CyiHE3py5siRvIfe6GpjEO21 dn0ZNaLE5zCMZYOwMjJP7TjkLTOYPgpB0mxDJzxQgJ/PU+MVEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtZyuxy8++g/1jwj99S/9ZYb7p/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYThkNTA3MDgtMTgzZC0z MmZhLThlMzQtYjBlOTNlYmVmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSKQDQ7jQXUemxCEyQw9DctQ2xUk0uvNKkA4kOCpUwfYT6uhPXdBIrb AF8YWGRDJ91UdkGWFPtKb+fKSyDo1S18FL+Ik9Qy+HIwwAmBtmy8msef6EVOlJ4/ hIAsOBLqAcI0eXn0DcfI1UGvEafcNoSf5ZpN9Ss0eRQpjYKwK4ZGC6WvrVWGCQco lhovrSS8qlihUx1b+j2bX6IZ6eRZ+FXLux9UQA1viPklStnE/Pu/r+bAS1j3zsEr C2a11MqCqBKAjgZUZd3KrCsGeFPziUR8nfPhuqdqG4SVtzJk5aQQTkyIReemBZOG Ce/BWFloXhRSLhuHXyLZXu05DoGZOU0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:19 2025 by rpki-client