$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa File: ff23613f-b262-34dc-8e04-9c24922a8957.roa (raw, json) Hash identifier: ExcrlqLwLJYaEJfd1QL4BLYrKe/fROSu2w20sqCAD4g= Subject key identifier: 34:09:04:98:5C:6E:DD:86:CD:83:70:07:11:01:B2:91:B5:FD:99:E3 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584BA93260F81D10AD81D7F4DF00 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 20454 IP address blocks: 64.38.244.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:60:f8:1d:10:ad:81:d7:f4:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=5afa18cd-0139-4cbe-8594-8855777de5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a0:e3:08:b9:37:78:f2:81:d7:71:c1:9c:e0: 36:de:5d:a7:d3:18:20:e3:98:c5:9e:93:2c:11:37: a8:42:b9:02:fb:1e:1c:aa:e8:93:98:bf:91:e6:26: 41:7c:55:1b:88:3d:ef:c6:11:33:46:fe:aa:78:1f: 73:05:f0:02:eb:24:24:87:47:35:bf:86:93:69:f7: c4:05:28:b9:6a:7e:2e:60:5a:19:9b:cd:6a:83:26: 12:52:89:be:22:ec:a7:82:01:7f:76:94:ff:ea:65: e9:f9:89:ff:e6:c6:dd:85:67:4e:ab:5a:ce:cf:f0: 71:fa:24:05:15:81:d9:70:d6:8e:cd:4f:26:b5:cf: 4c:b7:d2:6c:7f:f2:b4:7e:4f:a5:92:14:fb:9f:fb: 4e:58:27:1e:cb:fb:e3:fe:af:56:50:ef:d9:78:fe: 91:f1:ec:41:4d:c6:aa:7c:8f:91:ab:d3:fb:18:bb: 3f:01:e2:d3:68:3c:96:a0:6a:c4:97:c5:48:e1:16: 95:d6:72:41:87:16:04:33:e4:c7:12:30:bb:8d:3e: 06:16:d4:92:45:5f:00:26:66:33:f7:6a:d9:ac:69: bf:8e:c2:b5:73:e5:60:45:b6:dd:47:c3:d5:34:91: 21:d9:75:e8:2e:15:93:2b:f8:b2:1f:4c:30:22:61: 39:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:09:04:98:5C:6E:DD:86:CD:83:70:07:11:01:B2:91:B5:FD:99:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:91:18:96:7f:b7:cf:66:6b:ec:14:41:0f:ce:3e:43:5a:f1: 63:52:06:62:8d:7b:70:2f:e2:cc:1e:a2:9d:20:6e:88:c4:dd: f2:6a:b2:cf:e1:f1:37:8d:19:22:59:f9:15:f4:a1:37:fe:63: c6:f0:ff:9d:81:06:be:f7:99:68:0f:f5:30:75:08:79:3f:6c: 1b:89:67:65:a6:2b:cc:fd:4e:6e:49:bc:64:b5:d8:ca:75:5a: 79:28:c1:86:50:f5:d9:15:ed:7f:99:f7:2f:6a:8f:34:99:b0: a3:7f:34:d2:59:50:bd:21:dd:60:91:7d:b0:c2:52:18:df:52: ef:85:e0:00:75:6d:4e:80:0e:5a:68:b9:55:b8:2e:2b:5a:5a: a1:82:11:26:d8:be:36:a4:16:f4:d9:15:d1:dc:47:8e:a9:0b: 95:72:3f:51:7b:4a:6a:e7:2a:8a:95:78:48:3d:be:d6:69:71: 27:aa:94:18:d8:fc:6b:1c:96:49:55:25:00:56:bc:a3:56:88: b4:48:bd:f8:ed:6a:9a:58:30:3c:48:44:7a:76:ea:99:06:c7: fb:4b:4e:e3:05:dd:6b:cd:75:62:d6:85:bc:24:7b:a6:2e:9a: be:5b:0b:aa:73:85:4a:5f:64:74:a6:2e:3b:3f:4b:59:91:15: 34:05:5e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmD4HRCtgdf03wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NWFmYTE4Y2QtMDEzOS00Y2JlLTg1OTQtODg1NTc3N2RlNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaDjCLk3ePKB13HBnOA23l2n0xgg45jFnpMs ETeoQrkC+x4cquiTmL+R5iZBfFUbiD3vxhEzRv6qeB9zBfAC6yQkh0c1v4aTaffE BSi5an4uYFoZm81qgyYSUom+IuynggF/dpT/6mXp+Yn/5sbdhWdOq1rOz/Bx+iQF FYHZcNaOzU8mtc9Mt9Jsf/K0fk+lkhT7n/tOWCcey/vj/q9WUO/ZeP6R8exBTcaq fI+Rq9P7GLs/AeLTaDyWoGrEl8VI4RaV1nJBhxYEM+THEjC7jT4GFtSSRV8AJmYz 92rZrGm/jsK1c+VgRbbdR8PVNJEh2XXoLhWTK/iyH0wwImE5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQJBJhcbt2GzYNwBxEBspG1/ZnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZmYyMzYxM2YtYjI2Mi0z NGRjLThlMDQtOWMyNDkyMmE4OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyRGJZ/t89ma+wUQQ/OPkNa8WNSBmKNe3Av4sweop0gbojE3fJqss/h 8TeNGSJZ+RX0oTf+Y8bw/52BBr73mWgP9TB1CHk/bBuJZ2WmK8z9Tm5JvGS12Mp1 WnkowYZQ9dkV7X+Z9y9qjzSZsKN/NNJZUL0h3WCRfbDCUhjfUu+F4AB1bU6ADlpo uVW4LitaWqGCESbYvjakFvTZFdHcR46pC5VyP1F7SmrnKoqVeEg9vtZpcSeqlBjY /GsclklVJQBWvKNWiLRIvfjtappYMDxIRHp26pkGx/tLTuMF3WvNdWLWhbwke6Yu mr5bC6pzhUpfZHSmLjs/S1mRFTQFXoM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:01 2025 by rpki-client