$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/b437d303-7082-31f7-a5ce-55998958a146.roa File: b437d303-7082-31f7-a5ce-55998958a146.roa (raw, json) Hash identifier: Nw3PFKY30I6blhmIt0EI5CrnZLsjsBur536BDMd516U= Subject key identifier: 35:BD:0D:FC:06:00:4B:73:60:BE:18:55:E7:AE:46:20:E9:BF:67:86 Certificate issuer: /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Certificate serial: 010D0C9F4328584BABFD07D8ACD6A88CE5137A80 Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/b437d303-7082-31f7-a5ce-55998958a146.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 6079 IP address blocks: 64.49.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:07:d8:ac:d6:a8:8c:e5:13:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d4b532a9-adc8-4b43-9528-79983794b9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:f9:82:c1:e7:67:4f:d3:71:6b:b9:57:a7: 52:fb:79:cb:5c:9c:8d:57:60:8d:76:73:f7:7e:51: 80:df:70:dc:4d:56:bc:5e:75:bb:bc:d9:b1:03:75: 3e:25:07:e9:e1:51:ae:5c:5c:2b:25:cb:8a:9d:40: f6:ee:3f:ed:37:55:da:84:52:c3:b6:58:33:0b:ab: 58:91:6b:75:e8:3b:0a:c8:a1:d8:49:e9:09:27:e4: 9f:14:60:76:27:12:b2:67:8d:30:c6:1d:23:48:0e: b9:1b:59:98:fe:d6:50:a3:24:91:dc:3b:d8:79:94: 74:c4:ee:20:ee:5b:be:e8:77:78:7d:89:cb:04:a2: fc:c1:1a:5f:19:3b:ca:9b:c6:3b:5d:2e:8e:b3:43: 26:7f:57:03:48:41:30:1b:c2:1c:8f:49:ad:61:b0: 57:1e:5c:e8:0a:64:ca:1a:3c:03:ae:6f:ef:cb:d8: 9e:92:79:e7:db:87:5b:dc:65:45:ed:9e:bc:0a:8f: 3f:dd:c5:e5:f8:b1:32:99:bf:d9:22:47:4f:aa:47: 30:4e:a6:96:9b:93:19:23:79:65:60:e4:15:cd:c7: 2e:8b:62:65:7d:ac:a4:d8:fb:d4:32:ba:74:3d:8f: 1b:ba:0c:9a:f4:e8:78:c6:64:eb:10:9c:1b:ca:0c: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BD:0D:FC:06:00:4B:73:60:BE:18:55:E7:AE:46:20:E9:BF:67:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/b437d303-7082-31f7-a5ce-55998958a146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl X509v3 Authority Key Identifier: keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer sbgp-ipAddrBlock: critical IPv4: 64.49.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:93:2d:70:c4:94:c1:94:0c:31:58:1d:96:7b:49:c2:1b:cc: 54:d8:54:d4:98:85:79:d0:6e:db:69:cb:99:25:4d:c7:bb:c8: 48:eb:dd:28:09:a7:1f:dd:9b:13:45:ce:f0:68:71:cc:7c:84: 07:cf:04:73:cb:af:9d:83:a9:88:f7:33:54:a4:c5:71:b7:8c: bd:29:89:92:47:5c:3f:7d:f9:5a:e5:f9:11:03:f0:71:2e:f5: 33:d3:43:8b:80:32:29:29:d0:c1:0c:3a:08:73:73:b6:a4:18: d8:e9:b5:c2:64:cd:fd:b7:01:6d:e7:cf:45:e3:86:e8:b2:69: 39:e4:b9:eb:1a:c4:df:e6:a9:d9:2a:49:46:22:e4:a1:78:0f: d6:a4:87:75:3b:a8:66:c2:f2:30:d9:b2:5e:89:22:3c:37:5a: f7:c1:f1:82:1d:85:c2:8c:75:97:c5:70:5b:c5:c4:d7:a0:45: b5:91:18:12:70:37:0d:6b:d9:da:88:e6:05:6c:4e:1a:48:e8: da:8d:03:fe:c4:f6:33:76:8a:dd:f2:db:3f:d5:bc:41:03:9d: 07:f7:bd:80:c7:10:fc:5e:de:1d:de:0f:43:98:a3:e3:7e:f3: d4:ef:01:69:e1:46:05:5f:ce:59:10:b9:df:d0:bf:06:77:86: f4:9d:5d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QfYrNaojOUTeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEzOGIwODktNGJiMS00YzY1LTgzN2ItODUzYTlhMzM5 OGUxMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDRiNTMyYTktYWRjOC00YjQzLTk1MjgtNzk5ODM3OTRiOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvL5gsHnZ0/TcWu5V6dS+3nLXJyNV2CNdnP3 flGA33DcTVa8XnW7vNmxA3U+JQfp4VGuXFwrJcuKnUD27j/tN1XahFLDtlgzC6tY kWt16DsKyKHYSekJJ+SfFGB2JxKyZ40wxh0jSA65G1mY/tZQoySR3DvYeZR0xO4g 7lu+6Hd4fYnLBKL8wRpfGTvKm8Y7XS6Os0Mmf1cDSEEwG8Icj0mtYbBXHlzoCmTK GjwDrm/vy9ieknnn24db3GVF7Z68Co8/3cXl+LEymb/ZIkdPqkcwTqaWm5MZI3ll YOQVzccui2Jlfayk2PvUMrp0PY8bugya9Oh4xmTrEJwbygxYKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW9DfwGAEtzYL4YVeeuRiDpv2eGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YTM4 YjA4OS00YmIxLTRjNjUtODM3Yi04NTNhOWEzMzk4ZTEvYjQzN2QzMDMtNzA4Mi0z MWY3LWE1Y2UtNTU5OTg5NThhMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmEzOGIwODktNGJiMS00YzY1LTgz N2ItODUzYTlhMzM5OGUxLzZhMzhiMDg5LTRiYjEtNGM2NS04MzdiLTg1M2E5YTMz OThlMS5jcmwwHwYDVR0jBBgwFoAUYYui20IL3pzgGVglHqTH5yAF/bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82YTM4YjA4OS00YmIxLTRjNjUtODM3Yi04NTNh OWEzMzk4ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWTLXDElMGUDDFYHZZ7ScIbzFTYVNSYhXnQbttpy5klTce7yEjr3SgJ px/dmxNFzvBoccx8hAfPBHPLr52DqYj3M1SkxXG3jL0piZJHXD99+Vrl+RED8HEu 9TPTQ4uAMikp0MEMOghzc7akGNjptcJkzf23AW3nz0XjhuiyaTnkuesaxN/mqdkq SUYi5KF4D9akh3U7qGbC8jDZsl6JIjw3WvfB8YIdhcKMdZfFcFvFxNegRbWRGBJw Nw1r2dqI5gVsThpI6NqNA/7E9jN2it3y2z/VvEEDnQf3vYDHEPxe3h3eD0OYo+N+ 89TvAWnhRgVfzlkQud/QvwZ3hvSdXU0= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:36 2025 by rpki-client