$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa File: 6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa (raw, json) Hash identifier: f+1HgRoKTjmiTsJKmsNvTdk1MmLtA3QVGeiNb6dcmxw= Subject key identifier: 61:BF:24:D1:B3:94:BB:15:00:9C:75:05:48:1A:66:EE:67:56:1D:FB Certificate issuer: /CN=d3f2a064-9e78-4a16-a8db-33eef399665d Certificate serial: 010D0C9F4328584B36BC4CA8AC80E28599217780 Authority key identifier: 4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 397753 IP address blocks: 64.49.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4c:a8:ac:80:e2:85:99:21:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f2a064-9e78-4a16-a8db-33eef399665d Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=4ddff8d7-1493-4919-af42-a6db851e85ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:e3:c2:19:3f:2d:04:c6:58:84:7d:62:c8: 08:28:c5:fb:e4:27:28:db:61:41:41:ae:f3:62:7f: 93:07:1b:4c:2a:7a:92:2d:6b:98:24:e1:cc:27:81: 54:5d:ea:2c:66:ea:63:a4:de:c0:c1:a9:cd:41:6f: 30:b7:64:b9:9d:35:35:25:e6:bd:63:0c:b3:3b:76: 2c:5c:ad:26:5b:a0:d5:f6:75:c7:ef:49:4f:b9:cd: 29:0b:a5:fc:59:e4:64:13:55:d7:67:14:ce:b4:ae: be:07:a5:ba:94:99:4c:3d:c1:1b:0f:fd:2a:72:d6: 68:ab:ef:46:45:1e:b7:db:66:50:d4:16:0b:b9:eb: ec:78:38:94:ab:01:91:58:fb:66:8c:f0:25:28:87: a2:c5:70:c1:0c:c4:0e:84:6f:15:53:55:7d:ca:51: 00:5a:c9:c8:e6:e3:9c:1f:45:c7:de:e5:fe:03:e0: bf:67:e7:2c:5e:98:db:c7:2d:12:1c:04:4f:54:0a: 48:f7:1b:8f:ab:84:eb:ff:86:6c:eb:5d:c9:52:c6: 07:64:2b:76:f3:6b:13:c5:73:f0:9b:31:e9:9b:ee: 2e:50:22:4e:f2:6a:cb:a2:70:65:20:45:dd:7f:ea: de:db:42:e5:15:ad:84:e1:7f:63:b5:4d:4a:df:54: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BF:24:D1:B3:94:BB:15:00:9C:75:05:48:1A:66:EE:67:56:1D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl X509v3 Authority Key Identifier: keyid:4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer sbgp-ipAddrBlock: critical IPv4: 64.49.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:79:49:2c:60:b5:b0:9b:24:cd:12:1f:f7:b4:e4:3d:47:b6: 83:0c:a0:9a:8b:4e:c0:d2:8b:ac:ec:33:17:fc:65:1d:0d:81: 9c:4e:b8:8b:07:c1:57:24:c9:37:e9:5a:eb:1e:42:36:0d:a4: 57:9f:db:32:68:0b:8d:3a:cd:8b:7f:9e:80:11:f4:b0:db:c8: 27:b8:00:82:70:68:8b:f2:46:83:13:83:f4:cf:bb:6a:10:52: e6:b7:3f:90:bb:2a:77:c8:b8:d7:a5:9b:95:66:b6:2d:2d:2b: 1c:f9:97:74:4d:02:dd:b1:bf:47:c6:95:d8:f5:56:58:8b:ce: 19:d6:a3:07:07:18:ec:a1:aa:72:51:53:d9:17:b3:ef:f9:fd: 27:1e:cf:fe:aa:ad:06:6b:71:38:a6:2f:91:b7:91:69:cd:90: 4a:a6:2c:d6:83:24:52:59:e8:d5:dd:fa:44:d4:8d:ee:45:99: b5:47:2a:97:27:c4:8a:bc:29:5c:68:76:c5:65:af:40:54:c2: c6:4b:39:c0:99:6f:2f:87:5a:5f:89:a5:c6:c7:bb:88:6d:dd: 2c:81:18:5a:d3:2d:8d:d9:47:bc:47:42:7c:a1:9b:0a:40:3c: bc:fd:3f:16:43:29:00:95:07:62:97:c1:dd:80:61:8b:b5:d5: 42:fe:80:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vEyorIDihZkhd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNmMmEwNjQtOWU3OC00YTE2LWE4ZGItMzNlZWYzOTk2 NjVkMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NGRkZmY4ZDctMTQ5My00OTE5LWFmNDItYTZkYjg1MWU4NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jrjwhk/LQTGWIR9YsgIKMX75Cco22FBQa7z Yn+TBxtMKnqSLWuYJOHMJ4FUXeosZupjpN7AwanNQW8wt2S5nTU1Jea9YwyzO3Ys XK0mW6DV9nXH70lPuc0pC6X8WeRkE1XXZxTOtK6+B6W6lJlMPcEbD/0qctZoq+9G RR6322ZQ1BYLuevseDiUqwGRWPtmjPAlKIeixXDBDMQOhG8VU1V9ylEAWsnI5uOc H0XH3uX+A+C/Z+csXpjbxy0SHARPVApI9xuPq4Tr/4Zs613JUsYHZCt282sTxXPw mzHpm+4uUCJO8mrLonBlIEXdf+re20LlFa2E4X9jtU1K31Se1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG/JNGzlLsVAJx1BUgaZu5nVh37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Yy YTA2NC05ZTc4LTRhMTYtYThkYi0zM2VlZjM5OTY2NWQvNjY0NGUwOWUtZTZmMC0z NWFlLWI0MGQtZGNjMWE0YWI3MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNmMmEwNjQtOWU3OC00YTE2LWE4 ZGItMzNlZWYzOTk2NjVkL2QzZjJhMDY0LTllNzgtNGExNi1hOGRiLTMzZWVmMzk5 NjY1ZC5jcmwwHwYDVR0jBBgwFoAUTDgchSVZtsF4/+O6nYM7xxD7H1EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2YyYTA2NC05ZTc4LTRhMTYtYThkYi0zM2Vl ZjM5OTY2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh5SSxgtbCbJM0SH/e05D1HtoMMoJqLTsDSi6zsMxf8ZR0NgZxOuIsH wVckyTfpWuseQjYNpFef2zJoC406zYt/noAR9LDbyCe4AIJwaIvyRoMTg/TPu2oQ Uua3P5C7KnfIuNelm5Vmti0tKxz5l3RNAt2xv0fGldj1VliLzhnWowcHGOyhqnJR U9kXs+/5/Scez/6qrQZrcTimL5G3kWnNkEqmLNaDJFJZ6NXd+kTUje5FmbVHKpcn xIq8KVxodsVlr0BUwsZLOcCZby+HWl+JpcbHu4ht3SyBGFrTLY3ZR7xHQnyhmwpA PLz9PxZDKQCVB2KXwd2AYYu11UL+gBs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:11:18 2025 by rpki-client