$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa File: 2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa (raw, json) Hash identifier: rXa5uT7Dhbumwclak+Ik+/14fNhFyMXPEw6NlYbpeY0= Subject key identifier: 68:F9:37:FB:49:A2:D4:98:9C:B8:F5:AD:06:0E:E2:4C:49:49:BE:6F Certificate issuer: /CN=e62157d9-5954-48d0-b141-a5cfd44f68b8 Certificate serial: 010D0C9F4328584BB45D10D60A7F9E33E8796680 Authority key identifier: B4:A1:C4:B6:CD:4C:2E:1C:4A:00:BF:39:37:6E:CF:F2:31:D0:62:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 396320 IP address blocks: 97.64.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/e62157d9-5954-48d0-b141-a5cfd44f68b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/e62157d9-5954-48d0-b141-a5cfd44f68b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:10:d6:0a:7f:9e:33:e8:79:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e62157d9-5954-48d0-b141-a5cfd44f68b8 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=0e4f53a4-0569-4ba0-91dc-db43900eb1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:e8:ba:94:98:36:e4:44:ee:56:13:2a:e7: b1:cd:9c:49:00:75:7d:4d:a0:56:a4:1a:5a:76:4c: 63:cc:59:4f:40:e4:18:47:b0:20:aa:a1:f4:b1:f3: 45:1a:49:a4:e9:b8:7e:91:ac:88:32:e9:95:0e:f0: b6:32:bc:3d:13:32:c7:ff:3a:f4:ac:07:8f:c7:8c: 6c:5b:17:3d:a0:60:e2:0a:f7:03:d3:30:00:a9:49: da:ec:47:5e:ae:ba:25:60:9c:3c:e0:02:33:37:81: c5:87:3c:cd:f5:4c:6b:8f:dd:91:71:20:33:6c:53: 09:c2:91:63:d0:3e:20:62:0e:00:bb:f7:ea:56:d2: f3:2d:4c:f2:43:21:72:da:26:46:b9:da:53:25:d9: 05:c1:b7:6b:d9:6b:18:0f:3b:e8:ba:af:2d:eb:cb: 3f:70:8d:5f:4f:d8:64:8d:17:46:8c:0e:04:05:0f: 0f:34:d9:78:16:ad:73:92:bd:c1:0e:26:04:6d:79: b2:47:db:cb:ef:bd:3d:80:2c:78:89:75:db:f1:5d: 82:c0:15:d1:b8:b2:60:1f:87:c8:4a:14:a2:8e:8f: bd:fb:75:7f:61:18:65:20:8d:e5:61:24:19:f4:2a: 14:a3:d5:9c:53:8a:f8:07:d1:3f:0b:18:df:6f:e1: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F9:37:FB:49:A2:D4:98:9C:B8:F5:AD:06:0E:E2:4C:49:49:BE:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/e62157d9-5954-48d0-b141-a5cfd44f68b8.crl X509v3 Authority Key Identifier: keyid:B4:A1:C4:B6:CD:4C:2E:1C:4A:00:BF:39:37:6E:CF:F2:31:D0:62:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer sbgp-ipAddrBlock: critical IPv4: 97.64.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3c:9e:31:2c:14:d3:36:71:81:15:ea:e7:1b:1e:fb:6b:00: 10:d0:09:68:ce:ed:62:25:51:c3:70:63:cc:e3:ff:a8:9a:70: d4:34:0a:9b:42:9e:87:e0:93:ce:7f:b6:22:9f:8e:13:07:18: fe:66:fe:24:68:87:a5:b3:28:54:8b:80:fd:01:b1:21:62:c5: a6:a0:58:2f:7e:d8:9e:61:de:56:b4:f5:57:69:ef:fd:fc:6d: bd:12:93:e9:6f:64:24:01:7b:1e:a5:09:27:e9:22:c2:3e:2a: 29:5a:50:e4:ec:9b:2e:51:c6:7d:99:bf:6b:07:1b:a5:9e:30: 59:a6:55:65:42:d5:45:8f:fb:47:79:f7:55:75:d9:d8:66:55: a2:69:4f:94:02:36:a3:06:ff:05:ce:8c:92:67:64:dc:71:24: 52:3f:0c:06:35:70:6a:4a:bb:c5:03:9d:91:5b:d0:32:e2:78: aa:45:73:85:6b:41:8c:01:f3:d5:d8:98:2d:9d:63:c8:ac:07: 33:e7:69:a0:c7:e6:f7:4f:33:2b:0c:f5:dc:8e:bf:97:4f:3e: e2:ec:d4:e4:b7:48:9e:6b:9b:40:8d:3b:10:b2:c1:31:21:45: d6:01:4f:8a:5d:9e:5b:aa:ca:c4:bc:d7:78:a8:c2:6d:c2:04: 45:44:dd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRDWCn+eM+h5ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYyMTU3ZDktNTk1NC00OGQwLWIxNDEtYTVjZmQ0NGY2 OGI4MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MGU0ZjUzYTQtMDU2OS00YmEwLTkxZGMtZGI0MzkwMGViMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGnoupSYNuRE7lYTKuexzZxJAHV9TaBWpBpa dkxjzFlPQOQYR7AgqqH0sfNFGkmk6bh+kayIMumVDvC2Mrw9EzLH/zr0rAePx4xs Wxc9oGDiCvcD0zAAqUna7EderrolYJw84AIzN4HFhzzN9Uxrj92RcSAzbFMJwpFj 0D4gYg4Au/fqVtLzLUzyQyFy2iZGudpTJdkFwbdr2WsYDzvouq8t68s/cI1fT9hk jRdGjA4EBQ8PNNl4Fq1zkr3BDiYEbXmyR9vL7709gCx4iXXb8V2CwBXRuLJgH4fI ShSijo+9+3V/YRhlII3lYSQZ9CoUo9WcU4r4B9E/Cxjfb+GFXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj5N/tJotSYnLj1rQYO4kxJSb5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjIx NTdkOS01OTU0LTQ4ZDAtYjE0MS1hNWNmZDQ0ZjY4YjgvMmEyZjQ0YTctYmUxNC0z ZWQ4LThkNzgtN2FkNWFjZjNlZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTYyMTU3ZDktNTk1NC00OGQwLWIx NDEtYTVjZmQ0NGY2OGI4L2U2MjE1N2Q5LTU5NTQtNDhkMC1iMTQxLWE1Y2ZkNDRm NjhiOC5jcmwwHwYDVR0jBBgwFoAUtKHEts1MLhxKAL85N27P8jHQYrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjIxNTdkOS01OTU0LTQ4ZDAtYjE0MS1hNWNm ZDQ0ZjY4YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYUBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs8njEsFNM2cYEV6ucbHvtrABDQCWjO7WIlUcNwY8zj/6iacNQ0CptC nofgk85/tiKfjhMHGP5m/iRoh6WzKFSLgP0BsSFixaagWC9+2J5h3la09Vdp7/38 bb0Sk+lvZCQBex6lCSfpIsI+KilaUOTsmy5Rxn2Zv2sHG6WeMFmmVWVC1UWP+0d5 91V12dhmVaJpT5QCNqMG/wXOjJJnZNxxJFI/DAY1cGpKu8UDnZFb0DLieKpFc4Vr QYwB89XYmC2dY8isBzPnaaDH5vdPMysM9dyOv5dPPuLs1OS3SJ5rm0CNOxCywTEh RdYBT4pdnluqysS813iowm3CBEVE3ck= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:30 2025 by rpki-client