$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa File: d6824e42-8b91-3659-bef4-c3f464d9bb15.roa (raw, json) Hash identifier: R6w0bIJVM+Y4rQyc/JHexu1qS1oJdyu3DKqM92QN1ms= Subject key identifier: 56:F0:14:8D:A5:73:5C:98:CD:1D:2B:30:94:D4:90:F5:B5:FF:DE:26 Certificate issuer: /CN=de848e16-b429-4505-9234-f6d889fd1438 Certificate serial: 010D0C9F4328584BB2F82AC6A5CF6761AAA23840 Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 399820 IP address blocks: 64.49.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:2a:c6:a5:cf:67:61:aa:a2:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b44e3d29-8fe7-4d64-8847-edca6400e972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:8b:3d:6d:c4:da:cd:75:f2:db:b4:4c:62: 1a:22:fa:35:5f:fd:ee:2a:35:7b:74:db:7f:dc:da: b2:80:52:bc:cf:62:52:07:08:e9:0d:66:99:79:84: 44:30:6c:32:31:20:3c:00:d1:1c:c3:d4:16:66:e9: f0:31:eb:41:82:2a:86:69:d3:73:e5:8d:08:a1:63: 9e:48:6a:04:b2:fb:fb:bd:4e:c4:ef:9f:41:67:82: 21:c5:a0:43:ab:bb:53:a9:c2:db:d2:cb:25:05:c0: 6d:63:66:6d:b7:56:08:c4:c2:87:b3:a2:87:e2:2a: fa:f8:e2:7e:c9:da:f7:a4:49:fc:05:6b:6a:9a:9a: 81:b3:95:1c:29:42:26:64:77:b5:68:b9:55:fb:bb: 63:d7:89:2c:b5:ea:e4:79:bc:6c:bb:c8:b5:94:50: 58:95:0c:f2:0a:bc:37:77:c2:51:b2:59:51:cc:84: 50:87:bb:97:50:34:a7:e4:a2:2d:b8:7f:7b:b9:88: 36:eb:6c:64:54:e9:96:ac:ba:c7:9e:49:25:45:66: 9b:92:ca:bf:5d:48:72:4c:13:8d:34:90:5d:98:b2: ef:f4:29:cc:27:c2:7e:dc:0f:70:8a:9e:5c:28:75: 50:5e:36:f8:d2:c6:bd:dd:b1:38:94:45:43:e8:8e: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:14:8D:A5:73:5C:98:CD:1D:2B:30:94:D4:90:F5:B5:FF:DE:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl X509v3 Authority Key Identifier: keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer sbgp-ipAddrBlock: critical IPv4: 64.49.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:64:ad:dc:30:b7:42:86:00:46:09:dc:91:ce:d4:83:67:a0: 5b:9f:3d:02:e1:8d:6e:da:40:20:6e:0d:f2:d3:ca:39:1d:bc: c2:8d:71:ba:12:87:57:1d:0b:16:80:5f:92:1c:60:2c:07:87: 0e:31:16:e7:85:b3:29:44:7d:d9:a8:b6:31:fc:2f:5c:2c:3c: 75:d9:60:2b:54:b0:54:f9:4c:a1:df:52:66:22:51:bd:45:3e: 71:82:ca:9a:2a:47:9d:b4:2b:f7:0a:39:14:a2:41:88:09:fd: b7:b6:db:6e:b3:e1:5d:40:c1:36:e4:e6:7f:f3:d3:db:e4:56: 4a:2d:d6:74:df:17:46:74:17:1a:15:63:76:7e:6b:6e:fa:31: 83:19:dd:ac:7f:9e:1f:71:a3:53:45:74:63:52:43:49:9e:96: d2:dd:24:6f:f6:bd:f0:2a:ad:07:3b:77:ae:c6:5d:44:55:8b: e9:e9:d0:8e:7f:52:4e:10:5d:cd:73:45:53:93:32:39:2d:1e: 2c:cf:16:f9:45:d7:3f:ac:9d:d7:76:8d:df:94:f6:81:60:63: 1f:dd:7b:b4:57:64:47:23:7a:02:54:8b:33:37:84:11:30:3d: 05:c7:51:40:c7:1a:9f:a2:87:cf:1c:09:0a:77:81:46:3e:b8: 55:73:55:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+CrGpc9nYaqiOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQx NDM4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjQ0ZTNkMjktOGZlNy00ZDY0LTg4NDctZWRjYTY0MDBlOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw+LPW3E2s118tu0TGIaIvo1X/3uKjV7dNt/ 3NqygFK8z2JSBwjpDWaZeYREMGwyMSA8ANEcw9QWZunwMetBgiqGadNz5Y0IoWOe SGoEsvv7vU7E759BZ4IhxaBDq7tTqcLb0sslBcBtY2Ztt1YIxMKHs6KH4ir6+OJ+ ydr3pEn8BWtqmpqBs5UcKUImZHe1aLlV+7tj14ksterkebxsu8i1lFBYlQzyCrw3 d8JRsllRzIRQh7uXUDSn5KItuH97uYg262xkVOmWrLrHnkklRWabksq/XUhyTBON NJBdmLLv9CnMJ8J+3A9wip5cKHVQXjb40sa93bE4lEVD6I72twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbwFI2lc1yYzR0rMJTUkPW1/94mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0 OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvZDY4MjRlNDItOGI5MS0z NjU5LWJlZjQtYzNmNDY0ZDliYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4NDhlMTYtYjQyOS00NTA1LTky MzQtZjZkODg5ZmQxNDM4L2RlODQ4ZTE2LWI0MjktNDUwNS05MjM0LWY2ZDg4OWZk MTQzOC5jcmwwHwYDVR0jBBgwFoAUHsnQl1NrlIorg8DaKChlnetiZ+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4 ODlmZDE0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtkrdwwt0KGAEYJ3JHO1INnoFufPQLhjW7aQCBuDfLTyjkdvMKNcboS h1cdCxaAX5IcYCwHhw4xFueFsylEfdmotjH8L1wsPHXZYCtUsFT5TKHfUmYiUb1F PnGCypoqR520K/cKORSiQYgJ/be2226z4V1AwTbk5n/z09vkVkot1nTfF0Z0FxoV Y3Z+a276MYMZ3ax/nh9xo1NFdGNSQ0meltLdJG/2vfAqrQc7d67GXURVi+np0I5/ Uk4QXc1zRVOTMjktHizPFvlF1z+sndd2jd+U9oFgYx/de7RXZEcjegJUizM3hBEw PQXHUUDHGp+ih88cCQp3gUY+uFVzVak= -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:55 2025 by rpki-client