$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/3ff1df90-be16-3159-8ccf-5179017f372f.roa File: 3ff1df90-be16-3159-8ccf-5179017f372f.roa (raw, json) Hash identifier: prBCHgwLzEUOTacAyPIWhVQ+A1Zv/QfmbRtx/Y9y8us= Subject key identifier: 52:73:A3:98:FF:D6:36:39:78:FF:D2:9B:3C:E1:3C:F3:F4:C9:78:D1 Certificate issuer: /CN=a065aa58-4e69-4e7f-adf7-21c2344ef72b Certificate serial: 010D0C9F4328584B9E609787EC19FF07C7204880 Authority key identifier: 57:4A:CB:10:E9:33:80:40:0A:66:20:91:1C:0A:7B:25:B5:F4:82:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/3ff1df90-be16-3159-8ccf-5179017f372f.roa Signing time: Thu 23 Oct 2025 16:00:02 +0000 ROA not before: Thu 23 Oct 2025 16:00:02 +0000 ROA not after: Wed 21 Jan 2026 17:00:02 +0000 asID: 16276 IP address blocks: 67.63.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/a065aa58-4e69-4e7f-adf7-21c2344ef72b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/a065aa58-4e69-4e7f-adf7-21c2344ef72b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:60:97:87:ec:19:ff:07:c7:20:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a065aa58-4e69-4e7f-adf7-21c2344ef72b Validity Not Before: Oct 23 16:00:02 2025 GMT Not After : Jan 21 17:00:02 2026 GMT Subject: CN=006677d8-0ea0-42e2-a419-ad65178ac2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:de:00:b0:79:8c:cf:a4:7b:fa:e9:d0:fa: 13:81:ed:d0:0b:de:cf:96:73:b5:6f:f8:61:5e:fd: 8e:12:2f:fe:ae:e8:52:24:83:49:8b:9f:d0:ff:5f: 1b:e4:d2:44:63:0a:fe:aa:e2:55:fb:9d:93:f9:7e: 99:ba:91:8e:29:c9:87:cc:73:b0:07:f5:f7:e8:8f: db:a3:8c:fa:fd:94:02:31:e7:86:ee:f1:9b:a8:a3: 9c:1e:28:5d:4f:46:90:94:29:62:b8:92:5a:d8:2b: e2:a7:f2:2c:a3:e8:e0:af:a8:58:ae:29:3b:3c:b3: 18:9f:8c:f3:88:2f:4b:65:1a:4a:e0:ee:fd:2a:0d: c0:97:ab:29:ea:d3:df:c7:99:37:af:f2:1c:d7:df: de:27:da:eb:f6:6f:7d:8f:5f:c1:2c:5a:d3:5b:64: 8d:77:9d:13:47:e4:41:98:32:db:a8:14:03:89:96: 9f:55:af:5d:8d:f0:df:9f:1c:66:cc:3c:de:91:e9: f2:6b:93:a0:c8:62:37:3c:45:75:e0:8e:18:71:ae: fd:37:57:49:7e:ad:95:88:c6:55:da:38:66:cd:00: eb:0a:cb:cc:b9:df:fb:a9:5a:4d:29:31:3a:dc:56: 75:1a:d1:36:7a:0b:b4:93:22:f7:aa:92:c7:f8:09: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:A3:98:FF:D6:36:39:78:FF:D2:9B:3C:E1:3C:F3:F4:C9:78:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/3ff1df90-be16-3159-8ccf-5179017f372f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/a065aa58-4e69-4e7f-adf7-21c2344ef72b.crl X509v3 Authority Key Identifier: keyid:57:4A:CB:10:E9:33:80:40:0A:66:20:91:1C:0A:7B:25:B5:F4:82:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer sbgp-ipAddrBlock: critical IPv4: 67.63.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:28:5b:0f:38:78:87:ee:8f:13:07:20:54:77:ac:dc:66:24: a9:d5:5b:f9:1f:6e:d5:61:c6:be:67:b4:41:bc:81:26:6c:6a: 14:c5:42:1c:9e:d7:3d:54:8a:89:29:13:56:14:df:45:95:e5: 52:90:6b:09:40:e2:06:13:f0:ce:34:96:2f:c9:3b:4f:3c:06: 2b:dc:ee:ed:f6:50:85:05:a8:2d:b3:90:84:cd:c3:97:dc:df: 99:d3:f7:68:3a:69:19:bd:cd:c8:d0:b3:71:34:1f:48:6b:18: f8:fa:8b:20:4b:51:6a:80:5d:f5:0b:4e:e0:84:22:42:f6:00: 5b:ae:f7:ee:6b:71:2e:34:cb:62:56:b0:92:8e:64:55:0f:42: 14:6c:bd:3a:bd:18:2b:55:23:e1:10:1a:61:d3:d9:ff:18:48: f9:f2:49:d2:24:ad:9e:10:93:67:78:00:9f:5c:b9:86:43:dc: af:fb:91:2f:f6:5e:2a:c9:77:37:5d:e7:dd:0d:a2:fd:ce:31: 71:65:f0:84:a9:06:31:1e:6d:10:fe:ef:51:d0:1c:47:3a:51: 29:73:9d:72:25:0e:a3:cd:97:b7:a7:c1:c5:d9:f9:ac:00:2d: 4b:53:3d:4a:1f:1b:46:0d:d8:ad:61:11:97:df:5c:14:f8:1a: fc:9f:78:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueYJeH7Bn/B8cgSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2NWFhNTgtNGU2OS00ZTdmLWFkZjctMjFjMjM0NGVm NzJiMB4XDTI1MTAyMzE2MDAwMloXDTI2MDEyMTE3MDAwMlowLzEtMCsGA1UEAxMk MDA2Njc3ZDgtMGVhMC00MmUyLWE0MTktYWQ2NTE3OGFjMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjbeALB5jM+ke/rp0PoTge3QC97PlnO1b/hh Xv2OEi/+ruhSJINJi5/Q/18b5NJEYwr+quJV+52T+X6ZupGOKcmHzHOwB/X36I/b o4z6/ZQCMeeG7vGbqKOcHihdT0aQlCliuJJa2Cvip/Iso+jgr6hYrik7PLMYn4zz iC9LZRpK4O79Kg3Al6sp6tPfx5k3r/Ic19/eJ9rr9m99j1/BLFrTW2SNd50TR+RB mDLbqBQDiZafVa9djfDfnxxmzDzekenya5OgyGI3PEV14I4Yca79N1dJfq2ViMZV 2jhmzQDrCsvMud/7qVpNKTE63FZ1GtE2egu0kyL3qpLH+AkFYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJzo5j/1jY5eP/SmzzhPPP0yXjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDY1 YWE1OC00ZTY5LTRlN2YtYWRmNy0yMWMyMzQ0ZWY3MmIvM2ZmMWRmOTAtYmUxNi0z MTU5LThjY2YtNTE3OTAxN2YzNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA2NWFhNTgtNGU2OS00ZTdmLWFk ZjctMjFjMjM0NGVmNzJiL2EwNjVhYTU4LTRlNjktNGU3Zi1hZGY3LTIxYzIzNDRl ZjcyYi5jcmwwHwYDVR0jBBgwFoAUV0rLEOkzgEAKZiCRHAp7JbX0ghswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDY1YWE1OC00ZTY5LTRlN2YtYWRmNy0yMWMy MzQ0ZWY3MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQz82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcoWw84eIfujxMHIFR3rNxmJKnVW/kfbtVhxr5ntEG8gSZsahTFQhye 1z1UiokpE1YU30WV5VKQawlA4gYT8M40li/JO088Bivc7u32UIUFqC2zkITNw5fc 35nT92g6aRm9zcjQs3E0H0hrGPj6iyBLUWqAXfULTuCEIkL2AFuu9+5rcS40y2JW sJKOZFUPQhRsvTq9GCtVI+EQGmHT2f8YSPnySdIkrZ4Qk2d4AJ9cuYZD3K/7kS/2 XirJdzdd590Nov3OMXFl8ISpBjEebRD+71HQHEc6USlznXIlDqPNl7enwcXZ+awA LUtTPUofG0YN2K1hEZffXBT4GvyfeKg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:07 2025 by rpki-client