$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa File: 650dd2fc-99af-35a3-81ca-030219a24999.roa (raw, json) Hash identifier: Ci2+Yn+yIcUyyEIfuXF8LGHYRoM5pklW5XkeWFmomxg= Subject key identifier: 93:0F:D5:97:CB:6D:BA:6F:EF:81:96:54:EE:0C:A4:0D:FC:E4:41:93 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584BA39D0D4112D0A955BD800A00 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 19905 IP address blocks: 64.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0d:41:12:d0:a9:55:bd:80:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=fb7f098b-456a-4618-97e6-b58e54324ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:6f:13:90:68:8a:b8:0c:5d:e7:b4:b6:5a: 77:03:54:ef:d5:b6:2e:36:38:e4:e2:da:76:81:3b: 86:bc:0a:c5:42:5f:92:9c:69:8d:0f:3d:72:93:e4: a6:da:0d:c2:fd:ec:f3:cd:05:74:06:34:90:a2:aa: 2b:aa:ce:af:33:79:1d:1e:13:3a:18:f0:35:ec:2b: 35:58:05:80:c0:81:75:ed:e9:2e:ef:91:b1:dc:04: 28:0b:24:c8:5a:18:92:7e:8d:b6:c1:7b:21:fd:ed: f3:ee:36:ad:e9:ab:85:8e:9a:6a:db:79:7a:69:1a: 0b:64:a5:e2:62:97:31:8e:d1:09:23:27:68:5f:4f: bc:f9:42:d2:c1:b9:a6:93:03:01:ff:09:93:3c:ba: 90:9e:64:ff:16:1e:db:02:a1:ed:0e:5a:b0:fd:02: c2:49:1f:a2:63:41:61:43:3c:9e:fb:99:a8:6a:a0: 2e:d7:ee:64:1c:07:e1:d9:bb:14:ce:f0:ce:e6:63: 88:a3:fe:e3:31:9a:81:43:7f:15:f0:8b:4e:cb:0f: ce:78:f9:b8:83:19:55:b0:49:03:54:a2:2a:94:c5: 42:82:3d:6c:ec:6f:17:19:bc:a5:7d:2c:36:02:b5: 8f:b9:61:ba:29:7f:b6:3f:93:10:cc:a8:b3:a6:2a: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0F:D5:97:CB:6D:BA:6F:EF:81:96:54:EE:0C:A4:0D:FC:E4:41:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:09:dc:41:14:02:69:95:e5:2d:f0:c2:1c:92:4c:96:2d:b2: 67:f4:43:57:33:bb:04:16:72:21:60:02:ee:8a:59:a4:ce:a0: 1e:eb:5d:0a:3e:37:91:ea:ca:4d:61:60:10:15:f6:9f:a6:9b: 4d:9f:48:09:18:39:0f:6e:b3:06:b6:06:3e:4b:10:08:af:06: 8b:21:25:21:9c:df:c9:90:3c:f7:00:5a:85:c5:e8:f7:03:61: dc:df:09:54:8e:e8:74:de:73:11:9c:40:f5:4d:43:95:e7:5b: a5:df:1f:8a:2b:c4:c5:b9:d1:6d:79:ad:46:e4:75:df:c7:c4: 79:32:d0:c5:ee:94:f5:91:1e:c0:eb:07:b9:7a:26:e2:ef:ea: 2f:c8:3a:c6:48:c4:ce:8c:55:8c:d5:72:13:82:a1:0b:27:1d: f3:3d:de:9c:6e:d0:64:1e:8a:07:a4:ce:d9:98:81:1d:85:f2: 4b:95:5e:a2:3c:4e:e9:dc:0e:47:8c:77:c0:1d:f2:4d:18:e5: b1:09:61:58:23:54:42:27:06:77:aa:a0:56:ae:e9:60:7a:03: ab:3d:12:29:26:10:85:3a:3a:1e:57:8c:29:56:db:67:f9:b9: a8:41:4c:05:ce:27:cd:ac:2f:bd:60:69:ba:0b:2b:e5:55:97: aa:65:55:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQ1BEtCpVb2ACgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZmI3ZjA5OGItNDU2YS00NjE4LTk3ZTYtYjU4ZTU0MzI0Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUZvE5BoirgMXee0tlp3A1Tv1bYuNjjk4tp2 gTuGvArFQl+SnGmNDz1yk+Sm2g3C/ezzzQV0BjSQoqorqs6vM3kdHhM6GPA17Cs1 WAWAwIF17eku75Gx3AQoCyTIWhiSfo22wXsh/e3z7jat6auFjppq23l6aRoLZKXi YpcxjtEJIydoX0+8+ULSwbmmkwMB/wmTPLqQnmT/Fh7bAqHtDlqw/QLCSR+iY0Fh Qzye+5moaqAu1+5kHAfh2bsUzvDO5mOIo/7jMZqBQ38V8ItOyw/OePm4gxlVsEkD VKIqlMVCgj1s7G8XGbylfSw2ArWPuWG6KX+2P5MQzKizpirf3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMP1ZfLbbpv74GWVO4MpA385EGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNjUwZGQyZmMtOTlhZi0z NWEzLTgxY2EtMDMwMjE5YTI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUJ3EEUAmmV5S3wwhySTJYtsmf0Q1czuwQWciFgAu6KWaTOoB7rXQo+ N5Hqyk1hYBAV9p+mm02fSAkYOQ9uswa2Bj5LEAivBoshJSGc38mQPPcAWoXF6PcD YdzfCVSO6HTecxGcQPVNQ5XnW6XfH4orxMW50W15rUbkdd/HxHky0MXulPWRHsDr B7l6JuLv6i/IOsZIxM6MVYzVchOCoQsnHfM93pxu0GQeigekztmYgR2F8kuVXqI8 TuncDkeMd8Ad8k0Y5bEJYVgjVEInBneqoFau6WB6A6s9EikmEIU6Oh5XjClW22f5 uahBTAXOJ82sL71gaboLK+VVl6plVUU= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:52 2025 by rpki-client