$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa File: df4ae81b-3b81-359e-8c36-1c826165e898.roa (raw, json) Hash identifier: l2K2pkRdIgby+sFzeldWKeKUNvMbnFvM2dRhhJ7VRtI= Subject key identifier: 8D:3E:8F:F3:FA:A1:10:0D:96:BF:06:06:DE:56:49:23:70:F1:C4:C5 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584B2FC18DA271118B8F460C35C0 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 20454 IP address blocks: 64.38.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8d:a2:71:11:8b:8f:46:0c:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=377cc2d1-6b4e-4a22-a5b0-9ed6f35c75dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:0d:8c:42:54:be:38:f6:a6:d1:bf:c3:18: 5f:92:b5:64:d1:5d:78:fe:9c:1b:92:8f:83:8c:57: 95:4a:0b:37:54:e1:7d:d5:23:1f:54:30:5a:61:5f: 4c:ab:23:a4:4e:57:d6:5f:47:f4:83:90:64:6c:3f: 4a:b8:1a:19:29:d7:e7:09:67:86:d4:f4:2c:3b:37: 88:99:88:68:43:23:fa:5e:f3:0f:d0:e7:6a:d7:35: 53:af:a9:7f:65:e4:63:40:ca:1b:da:10:d3:cd:f4: 7c:9d:76:3e:1f:52:db:13:ce:8b:4f:2c:19:06:1b: 45:d2:7d:e6:03:6c:00:b5:6d:97:95:5e:ef:dd:a2: 00:ea:e8:13:28:f2:4f:a9:ee:84:54:60:32:40:c5: 1d:e4:2f:8f:d4:08:91:a2:89:b9:0d:71:3a:b9:33: 66:cc:b5:dc:54:9c:34:2e:8e:83:1b:ca:34:e4:3e: 0f:23:e5:e0:91:29:a0:9f:f8:68:0b:c9:b8:17:9f: 0e:c6:5f:2a:e4:ec:e1:81:17:91:2c:74:8c:6e:99: 19:b1:a6:f0:e6:cf:b8:59:29:64:4a:27:7a:26:4a: e5:ca:c6:06:4e:12:ec:82:6e:71:95:01:3a:ef:e2: 4b:c2:5b:d1:89:c6:da:61:88:11:ba:24:ec:a1:cc: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3E:8F:F3:FA:A1:10:0D:96:BF:06:06:DE:56:49:23:70:F1:C4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1d:24:2b:83:3a:ce:37:c3:c0:ea:b1:fc:35:a8:e6:be:91: 6e:2f:fd:fd:11:99:2c:a6:c5:4b:76:87:dd:d4:c5:cc:a4:e2: a5:e8:3e:b0:9e:c4:f4:71:e3:99:98:6f:2d:cc:bc:1d:91:c4: fd:bd:eb:1b:b1:21:a0:5f:f4:21:bf:14:9a:f1:2e:3e:dd:d8: 58:fe:e9:a6:bb:65:2a:33:52:50:2e:f7:62:4a:6f:94:d7:a8: e5:18:98:08:b6:56:e3:55:ed:69:bb:9a:0e:ad:f6:2f:24:59: 08:60:4f:e2:c3:0d:c3:5a:57:6d:0b:fb:e8:32:50:ae:42:b8: 62:6b:f2:1e:b4:03:8e:21:54:f5:c3:06:d6:35:0e:5c:75:0d: 32:bd:98:62:62:0d:d3:d1:60:8a:77:01:df:85:44:1d:21:fe: b3:9e:00:26:ae:97:98:a3:b6:11:e2:51:c0:52:eb:9b:98:b5: 07:fa:12:a4:53:e4:68:07:67:8d:a0:97:81:8a:b4:3f:3c:4b: d5:cb:4a:12:cb:05:89:a6:3e:6d:d3:78:ca:8b:4c:9e:d3:2a: 77:bb:5d:2b:6a:12:cd:9d:a7:e4:80:cc:c9:4c:59:df:a1:81: dc:8a:de:21:5f:c0:82:1b:4d:18:1d:ad:2a:d8:a2:0a:f7:f5: 4e:5d:a0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwY2icRGLj0YMNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk Mzc3Y2MyZDEtNmI0ZS00YTIyLWE1YjAtOWVkNmYzNWM3NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMwNjEJUvjj2ptG/wxhfkrVk0V14/pwbko+D jFeVSgs3VOF91SMfVDBaYV9MqyOkTlfWX0f0g5BkbD9KuBoZKdfnCWeG1PQsOzeI mYhoQyP6XvMP0Odq1zVTr6l/ZeRjQMob2hDTzfR8nXY+H1LbE86LTywZBhtF0n3m A2wAtW2XlV7v3aIA6ugTKPJPqe6EVGAyQMUd5C+P1AiRoom5DXE6uTNmzLXcVJw0 Lo6DG8o05D4PI+XgkSmgn/hoC8m4F58Oxl8q5OzhgReRLHSMbpkZsabw5s+4WSlk Sid6JkrlysYGThLsgm5xlQE67+JLwlvRicbaYYgRuiTsoczx7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0+j/P6oRANlr8GBt5WSSNw8cTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZGY0YWU4MWItM2I4MS0z NTllLThjMzYtMWM4MjYxNjVlODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEodJCuDOs43w8Dqsfw1qOa+kW4v/f0RmSymxUt2h93Uxcyk4qXoPrCe xPRx45mYby3MvB2RxP296xuxIaBf9CG/FJrxLj7d2Fj+6aa7ZSozUlAu92JKb5TX qOUYmAi2VuNV7Wm7mg6t9i8kWQhgT+LDDcNaV20L++gyUK5CuGJr8h60A44hVPXD BtY1Dlx1DTK9mGJiDdPRYIp3Ad+FRB0h/rOeACaul5ijthHiUcBS65uYtQf6EqRT 5GgHZ42gl4GKtD88S9XLShLLBYmmPm3TeMqLTJ7TKne7XStqEs2dp+SAzMlMWd+h gdyK3iFfwIIbTRgdrSrYogr39U5doHc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:49 2025 by rpki-client