$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa File: 4756446c-96ad-309f-b6b4-5601e968e103.roa (raw, json) Hash identifier: b41I5WOdgo/+JO9+ENBDYbLqdNyEJ7U4Xue8Ef+pj8w= Subject key identifier: F1:C3:D6:3E:92:D2:F2:84:65:B9:56:10:B6:1A:CF:77:CA:31:65:5E Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584BB2F7D11D08218BBB94DED800 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 27446 IP address blocks: 64.147.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d1:1d:08:21:8b:bb:94:de:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a1ee2395-76aa-4f92-8186-f2a29af5107b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:d9:a3:c5:9f:f8:b9:3f:30:d2:9a:c4:7a: f4:53:d3:94:a4:bb:ff:6e:ad:56:e8:12:58:35:ae: 12:0a:a7:b4:fa:d8:ee:25:82:2a:6a:1e:12:27:9e: d8:d7:48:01:52:50:0e:99:30:5b:89:e6:32:4c:cb: e4:5e:03:8f:3c:11:df:30:39:7e:8e:ab:cc:a0:f1: 3e:7b:70:0d:04:c7:5d:10:f8:8f:b2:f8:8d:72:76: 91:4b:64:b5:8b:f5:bf:97:c7:e2:19:86:c6:0c:04: 5f:35:d3:5b:9d:c1:f0:c4:e4:bb:9e:03:05:85:05: 80:d0:9c:90:e4:5a:39:ba:39:71:13:b3:07:d0:45: 26:01:a4:66:88:83:b3:ed:ed:35:cb:3e:6f:10:b7: 82:38:4f:2b:b4:e5:8d:5f:d9:2b:1c:03:69:45:bd: 2e:59:f6:58:05:25:39:bc:39:9c:7f:b9:e6:d0:39: 5e:83:45:3c:7f:ff:92:ca:dd:28:87:7b:3d:22:e7: af:be:f9:f2:2b:bb:65:c6:c6:b9:8a:fa:90:36:6a: 6c:a3:ca:2d:02:f6:a6:18:b6:7b:ad:5d:4c:de:44: c8:a8:f0:93:9e:69:d1:2f:19:54:60:1c:f5:bc:dd: 3a:6c:6a:7f:d3:af:86:32:ed:21:6c:cd:c1:e1:d8: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C3:D6:3E:92:D2:F2:84:65:B9:56:10:B6:1A:CF:77:CA:31:65:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 64.147.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:66:7a:43:a3:54:bc:79:2b:1e:ba:ee:30:54:ad:6d:2f:28: 09:2f:1b:ba:0a:cd:7e:9c:80:98:41:45:f5:fb:09:24:f9:39: f1:8b:ea:a9:c3:b8:20:52:4c:17:cd:de:a5:f1:35:d5:12:0e: 49:6d:84:5b:11:60:08:d2:87:5f:16:7b:fd:7a:b6:9a:8c:d1: fd:a1:bb:a1:c4:5e:9a:30:b7:73:a9:a0:05:c1:02:b8:74:b2: b8:a1:2c:c4:2a:be:8e:8b:0d:a1:b4:6a:15:67:fb:57:ee:03: 83:12:f1:22:f1:8e:31:6d:78:87:32:ec:69:ee:37:49:61:37: 2a:30:41:6a:eb:4d:c1:c7:5c:70:bc:89:f0:fb:5f:82:e1:c3: 31:58:4a:b4:b0:3d:09:fe:1d:49:67:a7:70:79:1e:47:ee:0a: 55:bb:e4:62:ca:f7:d9:d2:38:ff:97:d6:33:f4:52:a5:1f:dd: 72:f3:a8:dc:66:b1:bf:10:46:76:b5:fc:c2:e0:0d:2b:b6:fd: 8b:b2:e5:f8:4c:2a:15:66:5f:37:11:15:02:bb:a2:ec:79:f2: ff:cb:55:10:38:f1:87:f2:3c:f6:6a:4d:52:fd:2c:5f:69:51: 13:25:41:92:b6:63:fb:b6:89:b6:f5:07:d2:43:05:2e:71:b1: b1:27:13:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99EdCCGLu5Te2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTFlZTIzOTUtNzZhYS00ZjkyLTgxODYtZjJhMjlhZjUxMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T3Zo8Wf+Lk/MNKaxHr0U9OUpLv/bq1W6BJY Na4SCqe0+tjuJYIqah4SJ57Y10gBUlAOmTBbieYyTMvkXgOPPBHfMDl+jqvMoPE+ e3ANBMddEPiPsviNcnaRS2S1i/W/l8fiGYbGDARfNdNbncHwxOS7ngMFhQWA0JyQ 5Fo5ujlxE7MH0EUmAaRmiIOz7e01yz5vELeCOE8rtOWNX9krHANpRb0uWfZYBSU5 vDmcf7nm0Dleg0U8f/+Syt0oh3s9IuevvvnyK7tlxsa5ivqQNmpso8otAvamGLZ7 rV1M3kTIqPCTnmnRLxlUYBz1vN06bGp/06+GMu0hbM3B4dhCDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHD1j6S0vKEZblWELYaz3fKMWVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNDc1NjQ0NmMtOTZhZC0z MDlmLWI2YjQtNTYwMWU5NjhlMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpmekOjVLx5Kx667jBUrW0vKAkvG7oKzX6cgJhBRfX7CST5OfGL6qnD uCBSTBfN3qXxNdUSDklthFsRYAjSh18We/16tpqM0f2hu6HEXpowt3OpoAXBArh0 srihLMQqvo6LDaG0ahVn+1fuA4MS8SLxjjFteIcy7GnuN0lhNyowQWrrTcHHXHC8 ifD7X4LhwzFYSrSwPQn+HUlnp3B5HkfuClW75GLK99nSOP+X1jP0UqUf3XLzqNxm sb8QRna1/MLgDSu2/Yuy5fhMKhVmXzcRFQK7oux58v/LVRA48YfyPPZqTVL9LF9p URMlQZK2Y/u2ibb1B9JDBS5xsbEnE8Y= -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:19 2025 by rpki-client