$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa File: 4af76320-999a-3cd7-a897-27c3287ae51b.roa (raw, json) Hash identifier: ctfZmjQpQtK9zIhOAHYv/pOk6E3J9U++U/R+oGS6ZaU= Subject key identifier: 87:1B:15:05:14:E9:96:90:7C:E7:5C:E5:C1:9B:D7:5E:6B:C6:77:97 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B2761768DF3F5C3705F6995C0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 32181 IP address blocks: 64.224.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:76:8d:f3:f5:c3:70:5f:69:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=8e9c23b9-58e3-42f5-b005-d4ee1a0ec62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:86:73:45:62:5a:28:18:c9:44:52:8a:2c: 77:db:f9:80:26:7c:49:6d:5b:22:9c:60:63:79:de: 37:47:b7:7a:a2:72:24:41:c3:5d:9a:cc:52:56:5e: e7:7b:e4:d0:fd:dd:01:43:1d:5d:dd:81:a4:74:37: 20:0a:b8:5f:dd:b2:cc:e0:18:71:23:40:51:7e:7c: c7:4b:e3:9e:80:fd:7c:c4:5b:4c:56:55:be:d9:7b: c0:d8:c8:87:8d:0b:0a:6e:e0:93:b0:cf:30:5c:65: 33:e4:91:c2:20:57:55:15:27:c1:81:2a:59:fb:46: 3f:cc:fd:8f:06:b6:f6:e8:d6:3c:8f:e7:a8:b1:12: fe:20:37:19:31:25:31:72:34:66:65:2a:a4:8f:f5: d0:4a:48:06:92:db:41:44:30:e7:01:2a:e2:38:16: 1d:9a:cd:c1:32:f7:10:fc:2f:ba:f5:a4:62:3e:a9: c8:43:bf:db:f9:c3:03:dc:eb:29:f6:d6:4d:fd:b2: 0a:36:98:e2:59:2b:7c:47:86:93:c9:dd:fe:5e:be: c2:4b:fd:17:6b:d6:33:85:2c:4f:df:e0:e9:75:c9: a7:66:12:87:6f:1b:b9:f6:26:ae:f6:44:32:bf:a9: ab:52:21:09:ac:8d:cd:fa:f0:6b:15:cc:73:ed:a3: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1B:15:05:14:E9:96:90:7C:E7:5C:E5:C1:9B:D7:5E:6B:C6:77:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:68:51:d6:a2:5a:ff:9f:df:57:c9:72:44:e9:19:5d:63:36: 72:ad:d7:62:53:c4:a6:83:62:5a:45:03:21:09:b7:50:7b:fb: 11:24:41:44:5a:6c:73:85:28:1c:23:4b:9a:0e:b6:8c:9d:df: a4:69:da:00:da:38:e9:f8:34:09:96:68:16:56:b7:6a:c1:17: a9:8d:a2:b0:01:e4:b6:8a:69:19:b4:bd:df:86:a1:46:c1:76: c3:8b:2b:44:5f:38:bc:e1:54:65:ea:95:19:14:27:c0:79:32: 24:35:3d:0d:35:48:9a:54:95:ce:20:58:42:12:c0:d2:32:5e: 5b:f9:b6:de:8c:3c:a5:b0:99:d4:ed:6b:43:9d:a5:e6:bc:4d: 31:6d:ea:91:b4:67:d3:0b:cb:00:58:d4:08:a2:82:0c:22:4b: 76:93:4c:73:6e:c8:01:07:bc:1d:01:15:f0:e5:f5:2d:64:63: 6c:43:0f:c5:c7:64:ef:52:c8:2a:2c:6b:7f:df:cb:77:41:4b: 52:d6:0c:29:c3:8a:ca:36:fa:5d:96:da:52:47:db:0b:de:6f: 87:13:85:99:af:cd:1c:44:d2:43:9d:28:73:51:f8:5f:96:8b: 1c:cd:83:cb:30:0c:62:fb:f8:b4:1c:99:da:41:95:5e:be:2c: 07:f7:8d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXaN8/XDcF9plcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk OGU5YzIzYjktNThlMy00MmY1LWIwMDUtZDRlZTFhMGVjNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngeGc0ViWigYyURSiix32/mAJnxJbVsinGBj ed43R7d6onIkQcNdmsxSVl7ne+TQ/d0BQx1d3YGkdDcgCrhf3bLM4BhxI0BRfnzH S+OegP18xFtMVlW+2XvA2MiHjQsKbuCTsM8wXGUz5JHCIFdVFSfBgSpZ+0Y/zP2P Brb26NY8j+eosRL+IDcZMSUxcjRmZSqkj/XQSkgGkttBRDDnASriOBYdms3BMvcQ /C+69aRiPqnIQ7/b+cMD3Osp9tZN/bIKNpjiWSt8R4aTyd3+Xr7CS/0Xa9YzhSxP 3+DpdcmnZhKHbxu59iau9kQyv6mrUiEJrI3N+vBrFcxz7aMbmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcbFQUU6ZaQfOdc5cGb115rxneXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNGFmNzYzMjAtOTk5YS0z Y2Q3LWE4OTctMjdjMzI4N2FlNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOATMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZoUdaiWv+f31fJckTpGV1jNnKt12JTxKaDYlpFAyEJt1B7+xEkQURa bHOFKBwjS5oOtoyd36Rp2gDaOOn4NAmWaBZWt2rBF6mNorAB5LaKaRm0vd+GoUbB dsOLK0RfOLzhVGXqlRkUJ8B5MiQ1PQ01SJpUlc4gWEISwNIyXlv5tt6MPKWwmdTt a0Odpea8TTFt6pG0Z9MLywBY1AiiggwiS3aTTHNuyAEHvB0BFfDl9S1kY2xDD8XH ZO9SyCosa3/fy3dBS1LWDCnDiso2+l2W2lJH2wveb4cThZmvzRxE0kOdKHNR+F+W ixzNg8swDGL7+LQcmdpBlV6+LAf3jQs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:56 2025 by rpki-client