$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa File: 1529c059-7633-3836-940a-f5b311f13fd2.roa (raw, json) Hash identifier: uObF/IINAwJ4SzcIrRy8qvCaG4JF2jSvbSoWjz59yus= Subject key identifier: 6B:1E:CB:B3:4F:3D:50:FC:52:6B:3D:BA:18:74:78:22:49:D9:58:D8 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584B0A116599E3E56445BD266D60 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 393885 IP address blocks: 64.71.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:65:99:e3:e5:64:45:bd:26:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=6aeaffca-2546-4578-817d-a59822c1dfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:7e:8b:80:dc:88:ea:ed:cd:33:58:03:19: ca:9a:7e:46:aa:34:c6:9b:cf:63:f2:1d:5f:e2:40: 73:e5:dd:8a:0a:be:86:74:3b:c5:0b:c0:40:eb:2f: 0f:78:15:a2:59:e7:e3:68:f6:0c:aa:32:ff:e5:d0: d8:59:88:18:d3:73:75:62:f1:85:42:bc:2c:e9:94: 83:36:db:ac:a1:de:2d:90:56:8c:81:bd:ed:94:ec: 38:57:a3:e0:0c:2e:14:40:d4:4b:d9:cc:d2:0e:ba: c6:9c:02:1c:06:61:d7:69:1f:fa:6c:d6:34:fa:4e: 10:ff:9d:1b:4e:8f:12:83:50:fc:11:5b:44:8b:39: e7:1a:1a:01:53:8b:17:fe:fb:1f:41:45:d4:27:ea: ed:8d:b2:4b:08:91:33:2c:46:55:4a:fa:3d:e4:36: ae:5d:21:80:ff:62:b8:67:c2:9d:da:12:fd:95:2e: 25:7a:c4:ea:14:4c:66:0f:25:82:54:4a:9f:32:ab: 78:68:76:a6:b4:cb:16:87:ae:59:85:6b:76:0d:dd: a2:14:8e:de:df:fc:de:5c:b0:27:e2:20:52:14:18: 5d:3f:f1:da:9b:47:b5:7b:89:5d:a5:34:4a:3e:af: 88:2b:71:10:c3:14:be:d6:7e:ab:9a:73:ff:7f:56: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1E:CB:B3:4F:3D:50:FC:52:6B:3D:BA:18:74:78:22:49:D9:58:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:75:61:91:3b:8d:99:f0:dc:5c:f1:0b:3c:ab:44:55:9d:b2: ed:95:da:0d:75:f6:b9:84:59:e3:aa:bd:85:27:02:aa:a5:41: 0f:ff:e0:c8:00:e7:63:e0:a5:ca:56:42:f2:2f:9e:8d:04:6f: 77:07:3b:fc:f9:fd:2c:b6:f5:c5:35:f7:02:76:17:89:5a:32: 7c:2d:2e:46:35:e0:89:3a:f0:3d:63:d9:a6:1d:92:ab:5e:32: d6:ba:ae:21:cb:9d:7a:99:f2:3f:25:11:f9:94:3e:29:0f:7d: d6:7e:fd:12:2f:71:3d:37:40:10:f6:88:7e:64:e5:77:f7:e3: b1:cf:09:29:aa:6d:50:b6:8d:79:95:62:63:e4:59:55:a1:d2: 6c:13:93:96:12:03:a2:c2:44:49:41:cb:7e:87:cd:4d:bc:8b: 92:48:fb:cc:ad:36:ef:36:c3:26:54:70:49:c1:71:81:c9:29: 99:87:09:35:ef:1f:f2:55:8a:b5:43:7e:2c:90:92:1e:2c:8e: 30:94:dc:ea:fa:df:9c:ba:f5:42:dc:21:f5:81:c0:99:46:34: 34:b6:f5:b4:74:0c:cf:01:44:03:0b:0d:a6:d5:2e:12:79:eb: 67:ce:87:35:60:74:4c:6d:71:d8:52:78:87:54:90:c5:d5:13: 6e:9b:39:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWWZ4+VkRb0mbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NmFlYWZmY2EtMjU0Ni00NTc4LTgxN2QtYTU5ODIyYzFkZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OJ+i4DciOrtzTNYAxnKmn5GqjTGm89j8h1f 4kBz5d2KCr6GdDvFC8BA6y8PeBWiWefjaPYMqjL/5dDYWYgY03N1YvGFQrws6ZSD Ntusod4tkFaMgb3tlOw4V6PgDC4UQNRL2czSDrrGnAIcBmHXaR/6bNY0+k4Q/50b To8Sg1D8EVtEiznnGhoBU4sX/vsfQUXUJ+rtjbJLCJEzLEZVSvo95DauXSGA/2K4 Z8Kd2hL9lS4lesTqFExmDyWCVEqfMqt4aHamtMsWh65ZhWt2Dd2iFI7e3/zeXLAn 4iBSFBhdP/Ham0e1e4ldpTRKPq+IK3EQwxS+1n6rmnP/f1bTjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsey7NPPVD8Ums9uhh0eCJJ2VjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMTUyOWMwNTktNzYzMy0z ODM2LTk0MGEtZjViMzExZjEzZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQEfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd1YZE7jZnw3FzxCzyrRFWdsu2V2g119rmEWeOqvYUnAqqlQQ//4MgA 52PgpcpWQvIvno0Eb3cHO/z5/Sy29cU19wJ2F4laMnwtLkY14Ik68D1j2aYdkqte Mta6riHLnXqZ8j8lEfmUPikPfdZ+/RIvcT03QBD2iH5k5Xf347HPCSmqbVC2jXmV YmPkWVWh0mwTk5YSA6LCRElBy36HzU28i5JI+8ytNu82wyZUcEnBcYHJKZmHCTXv H/JVirVDfiyQkh4sjjCU3Or635y69ULcIfWBwJlGNDS29bR0DM8BRAMLDabVLhJ5 62fOhzVgdExtcdhSeIdUkMXVE26bOZ0= -----END CERTIFICATE-----Generated at Thu Nov 6 00:05:38 2025 by rpki-client