$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa File: ccea40b6-6b8b-3260-8acb-11e182c16519.roa (raw, json) Hash identifier: +BjTc7foR60fzKD9TG+KoJiurHd+/z2dK6iJv+n76ig= Subject key identifier: 1D:4E:8B:1A:AF:87:61:E6:EE:33:C1:10:C5:4F:24:80:84:5C:FD:94 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584BA9326C29A930BF5038CA1430 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 21657 IP address blocks: 64.147.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6c:29:a9:30:bf:50:38:ca:14:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=6a833b61-75bf-45d9-8d5e-17caca6ee3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:00:05:73:22:09:c4:5d:e8:10:53:c2:33: 1b:5f:2d:af:aa:3d:72:a7:07:8a:5d:02:a8:ac:4a: 96:ac:5a:46:84:52:86:6f:62:d8:a4:f0:f2:df:2f: 29:38:95:d7:18:10:52:14:13:ca:a5:f3:52:54:7a: fe:36:e5:4d:7b:57:c1:b5:ef:94:38:f2:fd:7a:c8: 81:4a:c7:07:26:06:38:cc:99:95:79:de:8a:b4:de: 3e:b7:b9:6b:26:a6:36:86:98:15:ec:a0:8d:cf:2e: 7c:ec:ae:83:12:94:72:71:85:d5:b3:cb:26:31:da: 2b:0b:c2:00:36:af:cb:04:9f:00:3d:79:b3:a3:0d: 31:b9:ba:23:45:b5:ed:6f:30:00:ed:8c:0b:df:b0: 73:89:d6:ea:6a:b1:cf:db:f3:98:31:b8:cf:40:71: 2e:fd:39:d2:27:cf:40:98:37:78:6f:5e:7d:c9:ca: 63:a3:b4:f3:3f:29:53:8b:32:28:4a:81:9e:b9:f6: be:ef:fd:51:9d:77:7a:9d:71:92:8c:20:ef:05:c9: 55:f7:6b:5b:73:52:3a:92:55:83:d4:52:b3:dc:c7: 4e:66:b2:80:34:2c:83:28:88:0a:bf:b6:7e:a1:c7: 16:59:db:a4:62:61:ce:d9:b9:f6:38:24:e8:aa:28: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4E:8B:1A:AF:87:61:E6:EE:33:C1:10:C5:4F:24:80:84:5C:FD:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:65:b7:ec:3e:c6:f5:fd:df:7c:04:09:00:c6:4b:6c:9b:21: 22:fe:47:2e:e0:26:30:ac:08:e4:eb:67:5e:c4:75:f2:70:dc: 29:83:ed:1b:64:17:c8:a7:f6:cd:b5:5d:4d:f4:70:9a:76:c3: c6:11:c5:38:8a:cd:22:31:b0:84:de:d2:67:8b:6e:25:17:07: 60:62:2d:de:dd:bd:e1:a1:32:9a:ff:05:31:f4:2d:88:6d:75: 04:59:91:e8:a9:22:1c:8d:12:86:3b:29:76:ae:08:f0:93:1e: e3:97:f4:dc:09:7c:b4:f1:d4:18:14:c2:fe:8c:08:f7:a4:38: f0:15:2b:c5:09:7d:6d:2f:2b:c3:fb:a8:4c:de:06:ae:4b:66: b8:62:fd:de:8f:76:3c:a2:14:64:a3:9d:5a:fb:7e:c9:ab:f8: d3:81:b4:73:c2:cd:8f:51:79:aa:4d:94:9a:9f:83:ee:15:44: 44:21:9f:8e:d1:ee:40:94:54:6b:75:e0:c4:e7:f4:ab:b5:aa: c7:21:ff:90:ff:d5:cc:0c:55:6c:7f:bb:75:15:65:49:59:87: 69:7f:74:52:82:cf:5f:9f:34:a5:b5:aa:86:8f:c2:3b:2e:e0: bf:d0:11:d0:d8:d4:95:e0:f1:ea:6e:72:7f:71:0a:93:8e:12: 3c:c5:a2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmwpqTC/UDjKFDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NmE4MzNiNjEtNzViZi00NWQ5LThkNWUtMTdjYWNhNmVlM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYwABXMiCcRd6BBTwjMbXy2vqj1ypweKXQKo rEqWrFpGhFKGb2LYpPDy3y8pOJXXGBBSFBPKpfNSVHr+NuVNe1fBte+UOPL9esiB SscHJgY4zJmVed6KtN4+t7lrJqY2hpgV7KCNzy587K6DEpRycYXVs8smMdorC8IA Nq/LBJ8APXmzow0xubojRbXtbzAA7YwL37BzidbqarHP2/OYMbjPQHEu/TnSJ89A mDd4b159ycpjo7TzPylTizIoSoGeufa+7/1RnXd6nXGSjCDvBclV92tbc1I6klWD 1FKz3MdOZrKANCyDKIgKv7Z+occWWdukYmHO2bn2OCToqijUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1Oixqvh2Hm7jPBEMVPJICEXP2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvY2NlYTQwYjYtNmI4Yi0z MjYwLThhY2ItMTFlMTgyYzE2NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBlt+w+xvX933wECQDGS2ybISL+Ry7gJjCsCOTrZ17EdfJw3CmD7Rtk F8in9s21XU30cJp2w8YRxTiKzSIxsITe0meLbiUXB2BiLd7dveGhMpr/BTH0LYht dQRZkeipIhyNEoY7KXauCPCTHuOX9NwJfLTx1BgUwv6MCPekOPAVK8UJfW0vK8P7 qEzeBq5LZrhi/d6PdjyiFGSjnVr7fsmr+NOBtHPCzY9ReapNlJqfg+4VREQhn47R 7kCUVGt14MTn9Ku1qsch/5D/1cwMVWx/u3UVZUlZh2l/dFKCz1+fNKW1qoaPwjsu 4L/QEdDY1JXg8epucn9xCpOOEjzFotE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:21 2025 by rpki-client