$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa File: c10be178-41da-38c0-aa71-3d02d08e892d.roa (raw, json) Hash identifier: rKI+nIKloRUZhWs5OVhYhYoXlrsdPujaaevsWXUy2eM= Subject key identifier: 0B:DB:F6:40:6D:07:6D:FA:44:F6:C3:A8:61:21:BD:D5:62:C9:4E:02 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584BA9326C080E6777D7A874DD20 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 21657 IP address blocks: 64.147.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6c:08:0e:67:77:d7:a8:74:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f4788e85-8172-4127-b588-fdabc095bb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:c5:fc:4a:1f:e3:3f:5b:44:59:3a:72:d0: 72:9d:27:74:93:95:b1:98:06:43:41:2d:d9:35:94: 21:e2:cd:28:a4:0b:64:96:b9:a3:82:94:07:08:2f: ac:52:ee:cc:6c:29:a0:97:4c:4b:45:cc:eb:15:30: 01:f3:69:2b:f4:6c:f5:b6:99:aa:03:91:60:a7:09: ba:5c:de:39:9a:44:71:8e:1e:f4:1c:d3:d8:d4:f3: 7c:dc:69:2a:e0:bf:ac:e8:b0:e0:da:08:a7:28:1d: 5a:06:81:61:0a:d3:2f:d7:c8:99:d4:06:02:30:fb: f3:30:06:65:ef:6b:d8:84:de:eb:5f:b0:b1:c1:79: 0f:bc:da:20:22:92:c8:64:69:29:b6:63:d3:02:88: 86:f7:6f:de:95:bd:63:08:2d:ba:f1:ed:a6:26:3f: d1:0b:64:77:2b:c6:2a:8a:b2:e2:af:be:eb:51:4c: 22:88:c5:3f:6a:6d:9d:d7:05:89:d7:27:7d:26:62: 34:b8:e6:67:8d:68:08:d9:09:6a:fc:c5:d8:3e:7c: 58:1b:87:ef:3f:00:65:fd:4b:48:f8:ce:fb:42:05: 7c:d7:a1:bd:c3:4d:d7:41:50:80:ad:64:cf:2b:b8: 7f:b7:88:a5:6f:f1:89:26:e6:d6:d7:c2:1d:df:e5: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DB:F6:40:6D:07:6D:FA:44:F6:C3:A8:61:21:BD:D5:62:C9:4E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1a:15:fd:d0:1c:53:c0:a0:be:92:18:2d:94:d7:5c:38:dd: 8f:7d:9f:8f:20:3a:dd:b7:b3:f9:99:e7:a1:b8:75:cb:07:56: 3a:ea:30:5d:8b:78:a6:fe:86:cc:6f:76:00:ef:e7:b9:27:54: e0:fc:3e:3d:34:1e:73:0f:b6:34:2b:2f:74:33:48:47:8a:dc: 9e:54:2b:78:9b:ff:8d:53:f1:51:be:2f:69:d9:84:6c:13:a0: 01:55:fd:94:fa:d0:48:46:72:e0:d7:c8:39:6e:7e:ff:b4:d5: c4:d6:62:6b:68:0d:90:b9:04:96:7c:15:19:d2:3d:c3:c9:a3: 54:8f:b7:74:e0:2e:7a:92:d9:64:58:a9:61:a3:8f:a3:a3:ff: 47:ee:55:8f:4d:28:4b:24:95:1b:b1:65:46:b9:94:74:63:af: b1:55:07:4f:a2:cc:35:4c:90:3e:6f:15:db:63:81:20:7b:1a: a3:ce:0d:56:88:6b:b5:1a:e5:ef:4b:1e:ab:47:14:2b:d9:9c: 95:82:a9:70:77:e5:99:13:25:cd:1b:69:3e:2a:a0:de:b2:92: 0c:49:ba:e9:24:28:37:72:4e:87:8a:61:48:88:96:70:38:f6: 1f:9f:00:f7:d6:2a:d3:62:69:3f:b7:5a:a5:94:9a:87:65:a3: b1:34:ba:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmwIDmd316h03SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjQ3ODhlODUtODE3Mi00MTI3LWI1ODgtZmRhYmMwOTViYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7XF/Eof4z9bRFk6ctBynSd0k5WxmAZDQS3Z NZQh4s0opAtklrmjgpQHCC+sUu7MbCmgl0xLRczrFTAB82kr9Gz1tpmqA5Fgpwm6 XN45mkRxjh70HNPY1PN83Gkq4L+s6LDg2ginKB1aBoFhCtMv18iZ1AYCMPvzMAZl 72vYhN7rX7CxwXkPvNogIpLIZGkptmPTAoiG92/elb1jCC268e2mJj/RC2R3K8Yq irLir77rUUwiiMU/am2d1wWJ1yd9JmI0uOZnjWgI2Qlq/MXYPnxYG4fvPwBl/UtI +M77QgV816G9w03XQVCArWTPK7h/t4ilb/GJJubW18Id3+UvWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvb9kBtB236RPbDqGEhvdViyU4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYzEwYmUxNzgtNDFkYS0z OGMwLWFhNzEtM2QwMmQwOGU4OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYaFf3QHFPAoL6SGC2U11w43Y99n48gOt23s/mZ56G4dcsHVjrqMF2L eKb+hsxvdgDv57knVOD8Pj00HnMPtjQrL3QzSEeK3J5UK3ib/41T8VG+L2nZhGwT oAFV/ZT60EhGcuDXyDlufv+01cTWYmtoDZC5BJZ8FRnSPcPJo1SPt3TgLnqS2WRY qWGjj6Oj/0fuVY9NKEsklRuxZUa5lHRjr7FVB0+izDVMkD5vFdtjgSB7GqPODVaI a7Ua5e9LHqtHFCvZnJWCqXB35ZkTJc0baT4qoN6ykgxJuukkKDdyToeKYUiIlnA4 9h+fAPfWKtNiaT+3WqWUmodlo7E0uvY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:06 2025 by rpki-client