$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa File: e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa (raw, json) Hash identifier: jhsOqbcNp9glOAdI6TpWfeMheH5OcW/+3xEov/Wh6vg= Subject key identifier: 4E:CC:DD:A0:6E:B4:7C:FD:C7:EA:BF:74:4A:BB:99:E4:60:17:0A:4D Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584BA9326C18DF0864C8581C6AC0 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 21657 IP address blocks: 64.147.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6c:18:df:08:64:c8:58:1c:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c1f29c71-fbf3-4a2e-9d81-8130810a0033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:68:12:6a:b6:bb:56:55:63:54:5f:36:df: 86:6c:9b:20:e1:7d:1e:95:9b:a3:6b:7a:dc:70:d0: d8:c4:60:c5:4a:70:8c:08:e7:4a:ca:cb:b9:e2:46: 48:e2:3e:a3:ca:b5:f3:69:96:e4:17:f8:58:0a:21: 86:45:ba:12:9c:09:4c:90:c8:c8:f2:5b:33:0a:cc: df:94:5f:fd:e9:2e:7d:79:ad:9b:e3:dd:e3:7d:df: cb:24:58:ff:6a:fc:60:77:ac:d9:84:58:64:06:4a: 3e:dc:14:52:bf:31:d3:96:e3:29:87:56:4d:35:46: f6:d3:af:41:ec:55:9d:cd:69:e9:fe:d3:2e:32:5a: b8:d9:82:5e:b5:9e:ea:8f:f2:e5:cb:3c:e4:f9:87: 2b:bd:ba:9e:75:39:a7:1f:1c:c4:8a:33:57:cb:ba: 4b:56:41:fc:92:f7:98:09:2d:18:99:10:04:cd:b9: 20:83:cb:0f:f5:55:bb:df:65:90:e6:52:f6:ba:42: 45:39:ec:e4:10:4e:1e:13:93:18:23:67:77:7e:94: 07:6d:ed:2f:ed:77:46:72:1f:de:97:45:83:d8:ef: 45:00:ea:3a:30:d6:c9:2c:fc:81:8a:5e:c4:f7:89: 10:ea:6a:9b:b3:8a:8b:aa:e5:cd:11:82:06:01:a1: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CC:DD:A0:6E:B4:7C:FD:C7:EA:BF:74:4A:BB:99:E4:60:17:0A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:18:da:25:20:e9:e5:d6:c2:af:e9:8c:ee:fc:c2:e6:8f:e6: 80:2d:55:16:4e:52:21:d4:d2:3e:99:ac:86:5c:6b:21:e3:15: 09:67:54:ae:fd:90:36:03:22:47:aa:c5:06:c0:5e:40:27:e3: 33:99:9d:e5:9c:34:05:c9:0c:34:5b:c5:8c:8b:fd:01:25:3f: f9:8c:c3:7e:67:ad:0b:56:b1:11:52:51:63:a5:63:37:83:42: e5:32:b4:cf:93:63:78:fd:8b:bd:4d:3a:19:64:db:ac:43:89: e9:eb:e4:78:06:17:7f:e9:a7:d4:78:79:80:1c:5f:be:7b:7d: 69:11:6f:90:df:57:60:1a:99:59:c0:b4:d4:d6:de:ab:6b:cf: aa:fd:91:17:0d:32:dc:af:9f:cc:a9:b3:09:30:cf:46:cb:a3: f2:21:af:bf:ae:89:93:c4:15:1b:4d:9e:f9:73:69:e2:e1:95: 83:16:a9:60:bd:b5:d4:2d:9b:d7:e4:81:fc:07:ca:d3:b5:f3: 30:2b:74:1f:75:2f:0d:6d:53:fd:31:01:8a:f1:4b:a4:bb:24: 64:89:f4:06:ec:c3:1b:02:d8:0c:37:3f:ea:60:e9:d4:9f:51: 6a:e2:eb:2f:b9:2a:38:f3:7b:cf:64:a4:b5:fd:eb:86:33:29: ab:46:4f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmwY3whkyFgcasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YzFmMjljNzEtZmJmMy00YTJlLTlkODEtODEzMDgxMGEwMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmVoEmq2u1ZVY1RfNt+GbJsg4X0elZuja3rc cNDYxGDFSnCMCOdKysu54kZI4j6jyrXzaZbkF/hYCiGGRboSnAlMkMjI8lszCszf lF/96S59ea2b493jfd/LJFj/avxgd6zZhFhkBko+3BRSvzHTluMph1ZNNUb2069B 7FWdzWnp/tMuMlq42YJetZ7qj/Llyzzk+YcrvbqedTmnHxzEijNXy7pLVkH8kveY CS0YmRAEzbkgg8sP9VW732WQ5lL2ukJFOezkEE4eE5MYI2d3fpQHbe0v7XdGch/e l0WD2O9FAOo6MNbJLPyBil7E94kQ6mqbs4qLquXNEYIGAaF5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7M3aButHz9x+q/dEq7meRgFwpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvZTMzZDNhNmItMTZmNy0z YzZlLWJjYjQtYzAyNzM0ODgyMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoY2iUg6eXWwq/pjO78wuaP5oAtVRZOUiHU0j6ZrIZcayHjFQlnVK79 kDYDIkeqxQbAXkAn4zOZneWcNAXJDDRbxYyL/QElP/mMw35nrQtWsRFSUWOlYzeD QuUytM+TY3j9i71NOhlk26xDienr5HgGF3/pp9R4eYAcX757fWkRb5DfV2AamVnA tNTW3qtrz6r9kRcNMtyvn8ypswkwz0bLo/Ihr7+uiZPEFRtNnvlzaeLhlYMWqWC9 tdQtm9fkgfwHytO18zArdB91Lw1tU/0xAYrxS6S7JGSJ9AbswxsC2Aw3P+pg6dSf UWri6y+5Kjjze89kpLX964YzKatGT6s= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:31 2025 by rpki-client