$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa File: 376f1606-d35e-3cb6-b663-26b1e90c408b.roa (raw, json) Hash identifier: 973lKIsq9GziLoCjX4oEIG5cn0iJU8b6lI2FPOKFUMM= Subject key identifier: 95:DB:78:6D:E1:9E:62:F5:D9:73:C8:7F:9F:11:A9:24:48:C0:7A:81 Certificate issuer: /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Certificate serial: 010D0C9F4328584B5571E32FFE23AF4C4FE1E8E0 Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 55159 IP address blocks: 64.89.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e3:2f:fe:23:af:4c:4f:e1:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=969fc107-762b-4fa1-85f9-c4d7599be44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:63:7d:90:a4:c9:f0:3a:0d:83:00:40:d3: 24:bc:89:57:d8:33:c7:ad:c4:dd:60:3b:9f:8f:92: 47:7d:7b:e0:6d:24:63:c4:92:f5:15:fa:18:45:b2: d0:f0:1e:0b:b9:2d:49:a6:44:87:e4:eb:1f:45:c9: 53:f0:46:1f:85:6f:43:7e:39:40:02:7d:5e:03:22: 43:ec:8c:62:1a:0f:76:08:ba:13:8d:c1:bc:b5:37: 5d:b2:c5:16:2f:47:34:b1:3e:30:c9:1f:2d:59:99: d1:05:4b:56:62:b2:bd:b5:8d:6f:f9:0d:33:79:28: 35:05:50:ab:0c:cf:db:04:63:a5:04:10:ae:a3:8b: b5:84:4c:0a:b5:e3:9b:d4:4f:ac:bd:98:39:2b:52: 77:71:26:29:d6:79:cb:da:d9:eb:6c:a1:5d:f8:a6: 1e:90:ce:31:ca:73:71:25:0a:cc:3f:84:5a:ad:51: a9:b8:43:52:53:e1:19:fc:cc:d8:3c:45:a8:7e:88: aa:0e:3f:26:e3:4c:fe:19:d6:5f:7e:61:23:2c:05: ea:c4:4e:50:91:0d:a6:06:4f:e3:48:7b:44:d1:3a: 97:04:32:8f:fd:a8:a4:6c:aa:d4:f5:45:4a:7b:c2: 88:b9:70:20:2d:97:a6:50:2b:95:48:80:dd:7e:90: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DB:78:6D:E1:9E:62:F5:D9:73:C8:7F:9F:11:A9:24:48:C0:7A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl X509v3 Authority Key Identifier: keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer sbgp-ipAddrBlock: critical IPv4: 64.89.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6d:8b:62:be:c6:f8:a5:05:be:f6:e9:53:c0:4e:ce:40:7e: d2:4a:1d:80:52:94:b5:49:f8:ae:96:2d:cf:9b:84:8c:df:62: 9b:83:85:7a:9e:70:6c:9f:3d:a4:b8:ef:5c:7f:90:6b:c5:ed: ed:fb:4c:d9:ca:0d:80:17:46:83:b6:02:a2:2c:6d:d8:ba:21: ad:82:26:5b:f3:02:f4:21:88:99:2f:f2:52:db:4a:40:64:83: bf:ae:3f:86:9a:12:4b:4d:1f:24:25:0a:7c:87:f2:a7:0e:db: 60:49:45:3d:b3:37:01:63:8f:45:39:e5:d8:3d:82:ef:c8:57: f1:37:c0:b1:d2:f7:0e:e6:6a:a1:2b:5a:32:50:44:d5:c9:39: df:7e:96:dd:21:ce:64:b2:0f:ed:8b:c1:70:84:f7:d4:90:7d: 02:e5:02:4a:63:a7:30:c9:6d:13:f9:ab:8e:e9:de:50:7c:29: 2d:67:96:c7:96:b2:94:ce:f8:7b:0f:af:9c:fb:c3:c1:0f:df: 1f:b8:b5:fe:ae:03:54:92:53:14:9c:a4:68:a3:3e:47:84:83: 48:fb:80:f4:1f:ba:4a:0a:91:43:ad:75:17:d4:bf:bb:31:b8: 2a:c3:26:b0:be:84:93:13:c9:ac:e7:d3:ea:a3:af:e6:12:08: f4:e9:b7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceMv/iOvTE/h6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE3MzNmZGEtYjQwNS00ZWIxLWFkYmUtODExZThmN2Vh Y2Q0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk OTY5ZmMxMDctNzYyYi00ZmExLTg1ZjktYzRkNzU5OWJlNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldRjfZCkyfA6DYMAQNMkvIlX2DPHrcTdYDuf j5JHfXvgbSRjxJL1FfoYRbLQ8B4LuS1JpkSH5OsfRclT8EYfhW9DfjlAAn1eAyJD 7IxiGg92CLoTjcG8tTddssUWL0c0sT4wyR8tWZnRBUtWYrK9tY1v+Q0zeSg1BVCr DM/bBGOlBBCuo4u1hEwKteOb1E+svZg5K1J3cSYp1nnL2tnrbKFd+KYekM4xynNx JQrMP4RarVGpuENSU+EZ/MzYPEWofoiqDj8m40z+GdZffmEjLAXqxE5QkQ2mBk/j SHtE0TqXBDKP/aikbKrU9UVKe8KIuXAgLZemUCuVSIDdfpDhKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXbeG3hnmL12XPIf58RqSRIwHqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYTcz M2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFlOGY3ZWFjZDQvMzc2ZjE2MDYtZDM1ZS0z Y2I2LWI2NjMtMjZiMWU5MGM0MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGE3MzNmZGEtYjQwNS00ZWIxLWFk YmUtODExZThmN2VhY2Q0L2RhNzMzZmRhLWI0MDUtNGViMS1hZGJlLTgxMWU4Zjdl YWNkNC5jcmwwHwYDVR0jBBgwFoAUz5q/BMhCjz9Sqg1Q6Md70nVG5TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYTczM2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFl OGY3ZWFjZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpti2K+xvilBb726VPATs5AftJKHYBSlLVJ+K6WLc+bhIzfYpuDhXqe cGyfPaS471x/kGvF7e37TNnKDYAXRoO2AqIsbdi6Ia2CJlvzAvQhiJkv8lLbSkBk g7+uP4aaEktNHyQlCnyH8qcO22BJRT2zNwFjj0U55dg9gu/IV/E3wLHS9w7maqEr WjJQRNXJOd9+lt0hzmSyD+2LwXCE99SQfQLlAkpjpzDJbRP5q47p3lB8KS1nlseW spTO+HsPr5z7w8EP3x+4tf6uA1SSUxScpGijPkeEg0j7gPQfukoKkUOtdRfUv7sx uCrDJrC+hJMTyazn0+qjr+YSCPTpt9o= -----END CERTIFICATE-----Generated at Thu Nov 6 00:05:12 2025 by rpki-client