$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa File: d8d06444-9d5b-387b-a943-41304f3a690f.roa (raw, json) Hash identifier: P6oJPT/31k1hwHbA0Pp5Ac9vm6Q2yBXlf0Btu5wNAuM= Subject key identifier: B5:7A:0B:A8:E5:44:32:ED:43:5E:BD:F3:9D:D4:D9:6B:E7:7B:D3:5A Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584BA7CCF76D2AAE6636BD2EE400 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 36832 IP address blocks: 64.112.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:f7:6d:2a:ae:66:36:bd:2e:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=a1a32f10-a93c-4e0f-9771-da1228208f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:3b:85:5c:41:f8:96:0d:98:59:11:e9:c4: e8:45:ab:79:71:f8:a4:06:b3:6a:00:0e:4b:34:9d: e8:a8:6f:b2:c1:75:2e:74:1b:c5:43:bb:c9:44:d4: 6f:6a:15:1c:32:31:84:04:d6:d4:4a:82:30:b8:19: 83:f8:5c:6f:04:4f:64:f4:c7:2c:12:8d:d2:23:5e: 00:ac:7f:78:b4:73:da:58:cf:48:9d:c0:e7:22:62: b7:51:18:46:4c:76:3a:59:9a:d0:57:bf:2e:f8:27: d9:05:67:25:7a:46:fc:96:46:73:ec:92:62:c8:0f: 35:b1:51:69:bf:9f:db:90:b5:39:62:e5:84:ab:f5: 7c:b9:24:71:cb:ce:02:3a:35:32:ae:c9:6c:3f:cd: 1c:6c:d9:b7:b1:4c:ae:35:20:35:f8:05:38:64:f5: 6a:e5:87:87:bc:5a:7c:89:e0:74:54:93:af:42:d3: d1:6f:bf:8b:fe:9a:59:c9:4b:bc:54:e3:05:1b:10: b3:67:dd:54:f9:24:63:40:6a:f5:2e:72:5a:73:60: 87:bc:ff:d8:51:6c:42:0f:a6:65:4b:43:18:02:68: 3b:95:0b:da:63:8c:c8:14:20:6a:1e:47:48:5f:d3: 5b:9d:88:88:71:d4:84:da:5c:51:3a:f8:44:62:88: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7A:0B:A8:E5:44:32:ED:43:5E:BD:F3:9D:D4:D9:6B:E7:7B:D3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:18:93:e1:91:28:e8:f8:9b:0d:76:69:58:5a:4f:04:50:2b: 2a:c1:64:f8:f0:f0:a5:57:e1:e6:35:ee:0e:d9:96:6b:d8:84: 33:ce:17:6a:c4:37:df:ad:7b:f4:4e:af:60:63:04:e8:50:46: 4d:23:f6:a9:d8:b3:50:0d:d4:65:98:66:26:6e:32:18:cc:07: e8:c3:9b:5a:91:90:41:a5:c3:51:77:1d:2c:40:a9:fd:a3:76: 9c:24:28:94:99:7b:6c:68:1a:59:cb:12:72:c4:20:57:2f:a1: 50:4c:f7:3c:40:2a:d7:35:69:f0:14:3f:e3:03:d4:ef:b0:52: a8:41:96:3a:b1:6d:48:24:8b:29:4d:9c:ee:4f:b3:c7:61:33: 5d:b9:0a:57:37:ae:73:cf:de:a7:74:26:c1:6a:9d:43:51:4d: e1:25:03:d1:42:f3:6f:4d:50:0c:4c:2a:2b:7b:47:dc:93:c6: 04:2e:51:3c:61:58:a1:b5:02:ef:16:08:2c:23:dc:b3:e0:e1: 29:ad:34:24:38:ef:9c:31:d4:d5:e6:b2:2a:c5:f3:42:7c:11: fe:a4:a0:02:8d:8d:63:ad:74:05:ce:be:74:74:f2:02:76:eb: c1:18:26:82:cd:8b:02:df:44:cf:a3:13:42:dc:a2:1b:e9:db: 93:ba:a0:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPdtKq5mNr0u5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YTFhMzJmMTAtYTkzYy00ZTBmLTk3NzEtZGExMjI4MjA4ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlA7hVxB+JYNmFkR6cToRat5cfikBrNqAA5L NJ3oqG+ywXUudBvFQ7vJRNRvahUcMjGEBNbUSoIwuBmD+FxvBE9k9McsEo3SI14A rH94tHPaWM9IncDnImK3URhGTHY6WZrQV78u+CfZBWclekb8lkZz7JJiyA81sVFp v5/bkLU5YuWEq/V8uSRxy84COjUyrslsP80cbNm3sUyuNSA1+AU4ZPVq5YeHvFp8 ieB0VJOvQtPRb7+L/ppZyUu8VOMFGxCzZ91U+SRjQGr1LnJac2CHvP/YUWxCD6Zl S0MYAmg7lQvaY4zIFCBqHkdIX9NbnYiIcdSE2lxROvhEYojWdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV6C6jlRDLtQ169853U2Wvne9NaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvZDhkMDY0NDQtOWQ1Yi0z ODdiLWE5NDMtNDEzMDRmM2E2OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Yk+GRKOj4mw12aVhaTwRQKyrBZPjw8KVX4eY17g7ZlmvYhDPOF2rE N9+te/ROr2BjBOhQRk0j9qnYs1AN1GWYZiZuMhjMB+jDm1qRkEGlw1F3HSxAqf2j dpwkKJSZe2xoGlnLEnLEIFcvoVBM9zxAKtc1afAUP+MD1O+wUqhBljqxbUgkiylN nO5Ps8dhM125Clc3rnPP3qd0JsFqnUNRTeElA9FC829NUAxMKit7R9yTxgQuUTxh WKG1Au8WCCwj3LPg4SmtNCQ475wx1NXmsirF80J8Ef6koAKNjWOtdAXOvnR08gJ2 68EYJoLNiwLfRM+jE0Lcohvp25O6oH4= -----END CERTIFICATE-----Generated at Tue Nov 4 20:49:07 2025 by rpki-client