$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/8a03e8d4-831e-366d-a62e-47143f16085b.roa File: 8a03e8d4-831e-366d-a62e-47143f16085b.roa (raw, json) Hash identifier: 0QsHBOYO/GyilSo8Wi/7CBr7K1oTJXLeUPZIhvDmm/E= Subject key identifier: 4A:EC:B5:FC:8F:4A:61:2D:7E:06:A8:13:22:A1:37:52:08:21:45:93 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584BA39D0AD08E5810F01952AE00 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/8a03e8d4-831e-366d-a62e-47143f16085b.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 22302 IP address blocks: 64.246.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0a:d0:8e:58:10:f0:19:52:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=753ea4a4-c3c0-43ed-bf74-fb629eca8c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4c:61:2e:8e:b4:4d:80:2c:e4:6b:9c:2b:12: 2a:ac:bc:8b:2b:03:26:84:26:c7:8e:50:59:e3:b3: 98:31:87:68:ce:ff:cf:18:52:40:2f:cc:98:56:ec: 33:17:a4:6e:3a:0a:d5:93:21:f9:d0:8c:26:83:15: 38:34:d1:58:cc:fb:2f:0d:49:13:81:e1:48:ca:0a: ef:32:a4:f0:05:fb:88:3c:37:37:e2:3b:15:b4:97: 8f:fb:86:bb:f9:2c:2b:4a:eb:40:a5:cd:31:c7:0a: 78:35:66:3a:9b:74:ff:73:0e:3f:8d:6a:a0:ed:b3: 98:68:b1:2f:9d:7d:9d:8a:7b:f5:be:81:8a:62:23: fc:b2:32:c6:a0:5d:1f:79:42:45:77:af:dd:cf:ca: 65:4b:67:38:1f:cf:db:09:b8:fa:76:4c:22:fa:6c: b2:b1:c9:5b:db:8f:af:70:12:05:ee:59:71:98:4a: fa:57:62:38:15:63:fb:45:3e:d8:b3:a5:92:5c:0f: 5e:c6:39:8b:89:89:54:ee:57:24:bb:47:45:54:e9: 7b:05:a4:9e:ae:ed:ae:9d:ab:23:da:59:09:c1:62: 0e:5a:06:ca:39:f2:6a:21:e2:1f:5a:7d:c7:df:ad: 2f:1c:41:6f:d6:2c:5a:66:b5:21:08:36:9f:0e:74: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EC:B5:FC:8F:4A:61:2D:7E:06:A8:13:22:A1:37:52:08:21:45:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/8a03e8d4-831e-366d-a62e-47143f16085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 64.246.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:79:13:2b:7a:aa:12:45:f3:43:52:24:4f:4a:ff:2c:d7:52: 21:fa:c4:ff:91:df:16:08:3c:0c:9a:d9:4b:47:ec:d3:86:f8: a4:e4:98:14:8a:74:01:c1:ad:db:e4:db:e0:83:39:23:21:57: 58:9c:f8:1e:16:9b:70:09:4b:dd:35:af:3a:85:15:87:e4:0b: 19:f9:a8:28:39:b0:f3:d3:c2:27:73:73:e5:ac:c0:f3:a6:59: 90:6e:40:02:96:92:20:8a:0a:f5:35:46:49:49:01:88:72:91: 4b:d5:fc:83:69:cc:6d:5e:22:06:ef:3c:8b:ec:45:55:77:b2: c0:73:28:83:7b:d0:f1:77:5e:e1:84:69:05:92:99:85:b7:aa: 4b:b6:9c:b1:14:5e:7f:f9:9f:ad:ad:28:96:c5:55:72:09:cf: 6d:1a:e8:e7:b8:83:17:35:71:bd:8e:22:cf:53:7b:35:b0:00: 65:1d:87:7f:7b:14:49:43:08:c9:42:b9:0a:03:a0:41:ad:cc: 54:4a:05:29:43:0e:f8:55:37:de:39:86:38:76:af:34:ee:c4: 31:e2:d4:fb:e5:61:b4:ed:5c:48:59:c8:e2:c1:4f:65:01:80: 0d:91:8a:6c:b1:34:df:e9:9d:54:76:3d:d4:29:8e:c0:7b:b5: c4:10:13:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQrQjlgQ8BlSrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzUzZWE0YTQtYzNjMC00M2VkLWJmNzQtZmI2MjllY2E4YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkxhLo60TYAs5GucKxIqrLyLKwMmhCbHjlBZ 47OYMYdozv/PGFJAL8yYVuwzF6RuOgrVkyH50IwmgxU4NNFYzPsvDUkTgeFIygrv MqTwBfuIPDc34jsVtJeP+4a7+SwrSutApc0xxwp4NWY6m3T/cw4/jWqg7bOYaLEv nX2dinv1voGKYiP8sjLGoF0feUJFd6/dz8plS2c4H8/bCbj6dkwi+myysclb24+v cBIF7llxmEr6V2I4FWP7RT7Ys6WSXA9exjmLiYlU7lcku0dFVOl7BaSeru2unasj 2lkJwWIOWgbKOfJqIeIfWn3H360vHEFv1ixaZrUhCDafDnRUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErstfyPSmEtfgaoEyKhN1IIIUWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvOGEwM2U4ZDQtODMxZS0z NjZkLWE2MmUtNDcxNDNmMTYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQPaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx5Eyt6qhJF80NSJE9K/yzXUiH6xP+R3xYIPAya2UtH7NOG+KTkmBSK dAHBrdvk2+CDOSMhV1ic+B4Wm3AJS901rzqFFYfkCxn5qCg5sPPTwidzc+WswPOm WZBuQAKWkiCKCvU1RklJAYhykUvV/INpzG1eIgbvPIvsRVV3ssBzKIN70PF3XuGE aQWSmYW3qku2nLEUXn/5n62tKJbFVXIJz20a6Oe4gxc1cb2OIs9TezWwAGUdh397 FElDCMlCuQoDoEGtzFRKBSlDDvhVN945hjh2rzTuxDHi1PvlYbTtXEhZyOLBT2UB gA2RimyxNN/pnVR2PdQpjsB7tcQQEz8= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:07 2025 by rpki-client