$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa File: e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa (raw, json) Hash identifier: SlQYrGvrBQUrdPCULyPZ7vyERw9c9YiVVF4A5xKJHpc= Subject key identifier: FF:EC:07:E7:64:8F:2B:E3:58:6E:37:5C:EC:C8:19:33:5C:85:DB:33 Certificate issuer: /CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Certificate serial: 010D0C9F4328584BA39D28D67A3C1F96AAB56480 Authority key identifier: 81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399772 IP address blocks: 64.49.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:28:d6:7a:3c:1f:96:aa:b5:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=556a6816-4afc-4118-a46f-8d3fb9bcff95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:07:a3:fd:3c:07:cc:d4:e7:1a:7f:68:52: 39:c0:bd:ed:1f:e0:48:e7:16:03:a6:29:ad:86:8a: b3:7e:51:32:8d:78:43:31:ea:e7:90:89:9a:08:97: c3:ce:a5:e9:f5:a2:9c:da:73:57:3f:ae:22:9f:5f: f2:4c:97:21:dd:a4:fd:b5:c4:58:2a:ad:e0:18:e6: 54:02:5a:1d:4a:e7:9f:16:59:a8:1c:11:8b:5d:fd: 40:a4:c6:ac:19:12:b4:a2:03:a3:43:40:6a:50:5f: 55:87:af:b0:4a:2f:f2:fb:a4:04:e8:fe:c3:98:b8: e7:34:e9:db:e2:9c:01:f7:28:b2:0f:3d:22:59:65: d3:19:4c:6e:29:71:83:3f:02:e9:96:4f:5f:3f:16: 37:62:82:51:2d:29:b3:4f:5a:20:ff:e0:1b:46:31: 14:e1:b0:74:c2:32:29:28:7e:76:27:b9:71:91:49: 52:2f:63:04:ae:3a:8b:e3:14:59:a8:1c:21:4f:fd: 51:3b:cc:56:12:23:d7:ba:59:db:cc:d7:d8:d1:54: 4f:c3:5e:08:0f:38:d3:42:39:27:ae:79:d1:cd:8b: 5c:0c:41:d6:d3:65:5a:4f:8f:fe:bd:fa:ab:81:fa: d2:93:58:91:ff:71:68:fe:a7:85:c3:6c:9a:36:80: 1b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:07:E7:64:8F:2B:E3:58:6E:37:5C:EC:C8:19:33:5C:85:DB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/e45b06bb-d0e8-39ad-b347-ad4de7d5eafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl X509v3 Authority Key Identifier: keyid:81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer sbgp-ipAddrBlock: critical IPv4: 64.49.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4c:00:16:8e:a1:71:73:cb:97:e1:46:84:c8:da:9b:9f:a2: 7e:3a:e1:fb:36:f1:b6:8a:76:8a:d3:9f:f9:6b:b1:3d:94:95: f4:c8:65:12:b5:1f:52:1d:c1:4a:1a:bc:ec:76:cd:06:92:56: 3b:ac:8d:01:f2:b4:f7:45:20:84:48:3c:e7:a5:1f:d0:7a:9e: 05:72:01:67:ff:80:14:5d:08:78:10:c1:13:1c:48:0e:5b:54: 04:79:9e:a0:82:20:44:ca:fc:74:27:d1:b7:96:66:cb:80:dc: 71:d1:94:db:27:d8:bc:26:48:e4:a7:58:21:ee:6f:af:a5:27: 48:77:85:df:af:9a:0b:d9:36:04:a5:c4:e4:73:80:ae:9b:28: 26:0f:b7:38:f1:7c:09:61:ae:26:91:91:5d:e5:fd:f2:29:11: de:13:59:09:e3:e3:3a:7f:10:59:8d:53:89:8c:6f:7a:f4:6b: ef:b1:89:25:70:4b:5a:3a:8b:3b:d3:42:c2:f7:a1:39:f3:1c: a2:1a:9f:d5:55:8b:eb:67:86:f1:82:44:9e:19:25:a1:de:48: ba:54:8a:7d:d4:b4:18:1d:b1:a4:9b:b5:5e:3f:bd:17:09:20: eb:9b:52:a0:9c:98:08:5d:ef:8b:aa:6e:a1:68:b1:60:d6:2e: ef:b5:cc:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSjWejwflqq1ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNTIwNzQtNThjYi00OTQxLWI2MDktMGY1ZDFlNGJj YTMyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTU2YTY4MTYtNGFmYy00MTE4LWE0NmYtOGQzZmI5YmNmZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLkHo/08B8zU5xp/aFI5wL3tH+BI5xYDpimt hoqzflEyjXhDMernkImaCJfDzqXp9aKc2nNXP64in1/yTJch3aT9tcRYKq3gGOZU AlodSuefFlmoHBGLXf1ApMasGRK0ogOjQ0BqUF9Vh6+wSi/y+6QE6P7DmLjnNOnb 4pwB9yiyDz0iWWXTGUxuKXGDPwLplk9fPxY3YoJRLSmzT1og/+AbRjEU4bB0wjIp KH52J7lxkUlSL2MErjqL4xRZqBwhT/1RO8xWEiPXulnbzNfY0VRPw14IDzjTQjkn rnnRzYtcDEHW02VaT4/+vfqrgfrSk1iR/3Fo/qeFw2yaNoAbRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/sB+dkjyvjWG43XOzIGTNchdszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1 MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVkMWU0YmNhMzIvZTQ1YjA2YmItZDBlOC0z OWFkLWIzNDctYWQ0ZGU3ZDVlYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTdjNTIwNzQtNThjYi00OTQxLWI2 MDktMGY1ZDFlNGJjYTMyLzE3YzUyMDc0LTU4Y2ItNDk0MS1iNjA5LTBmNWQxZTRi Y2EzMi5jcmwwHwYDVR0jBBgwFoAUgWNxnJSYNAcPH2TiDsn/edGr36QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVk MWU0YmNhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRMABaOoXFzy5fhRoTI2pufon464fs28baKdorTn/lrsT2UlfTIZRK1 H1IdwUoavOx2zQaSVjusjQHytPdFIIRIPOelH9B6ngVyAWf/gBRdCHgQwRMcSA5b VAR5nqCCIETK/HQn0beWZsuA3HHRlNsn2LwmSOSnWCHub6+lJ0h3hd+vmgvZNgSl xORzgK6bKCYPtzjxfAlhriaRkV3l/fIpEd4TWQnj4zp/EFmNU4mMb3r0a++xiSVw S1o6izvTQsL3oTnzHKIan9VVi+tnhvGCRJ4ZJaHeSLpUin3UtBgdsaSbtV4/vRcJ IOubUqCcmAhd74uqbqFosWDWLu+1zOQ= -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:32 2025 by rpki-client