$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa File: d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa (raw, json) Hash identifier: +S0sxTy8ly2IW79t9QgYPUj9HhjwV8zSQjGjPQpLCsQ= Subject key identifier: 3F:A5:96:42:7C:51:CE:94:8D:0A:AF:92:F8:79:B2:2C:4A:3C:09:B1 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B2761767137E53989E93D8E00 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 32181 IP address blocks: 64.224.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:76:71:37:e5:39:89:e9:3d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=cb82e754-7007-4c38-98f7-dcb684865174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:86:e4:3e:5d:45:3a:78:17:05:9e:f1:64: 6b:94:1a:bf:09:f1:ec:69:af:8a:e0:92:f2:90:fe: 6d:92:de:0a:b8:31:8c:ad:e5:98:b0:ef:8a:2d:a0: 97:c0:31:e4:ad:02:0c:46:03:0c:d3:38:1c:de:81: a2:24:15:30:76:4e:75:f6:c3:66:ca:75:3a:04:c8: c3:87:54:43:23:38:83:01:5d:68:2d:cf:92:f1:0c: 82:a5:81:9e:f8:71:4c:fd:53:d3:f7:3f:3a:d6:80: 91:16:71:2c:28:0a:3e:1e:08:3c:64:6f:bb:46:c2: 34:5b:17:d8:85:15:d3:49:11:6e:bd:ab:0a:12:19: 6d:f8:e7:62:8f:6f:49:74:eb:de:f7:df:c1:fc:e1: 76:e6:85:3e:49:38:aa:3f:6a:87:ef:1f:a4:2b:50: d3:ff:24:f7:26:cb:12:08:6c:24:b0:25:2f:f0:3f: fb:0f:9d:e2:eb:7d:cc:44:6d:4a:6e:29:d2:a2:c3: da:cc:00:fe:12:be:76:3a:04:8d:8e:65:8b:4c:39: 72:57:af:4f:d0:78:59:b8:d0:e6:c7:c8:94:3a:a3: 2f:82:a8:39:0f:cf:ab:74:bb:a1:71:cd:10:e6:34: 77:e1:01:ff:46:cc:65:b7:85:bd:1c:82:89:50:a6: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A5:96:42:7C:51:CE:94:8D:0A:AF:92:F8:79:B2:2C:4A:3C:09:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:9c:a1:48:c5:ce:b1:38:a5:1c:7a:59:b7:5d:16:43:ef:24: 8f:df:55:f6:f4:24:c6:c5:76:53:dc:ce:ad:3e:1f:b3:64:29: 0e:75:4d:db:c5:85:d1:40:e1:d8:db:3b:0a:41:7f:65:38:ae: 75:bb:7b:53:52:07:73:6f:3f:1b:7a:77:29:3d:23:c3:26:3a: bb:08:85:22:4d:58:ad:c4:e2:36:4c:f3:85:a7:b6:0c:2d:6f: 60:07:8b:df:1c:7b:7f:9f:d2:be:20:d7:d3:5a:d5:c4:13:ba: cc:c8:e9:b2:a2:36:63:78:37:bb:f3:c6:06:89:08:ee:2c:36: 29:05:90:44:50:eb:08:21:e4:f9:a6:98:2d:e3:80:cf:f6:63: ff:ef:24:5f:cb:b5:6d:94:9f:ab:fa:5e:e6:3b:1b:a6:0e:26: 12:7f:8a:5a:ac:2d:ae:ae:27:02:f5:83:5b:98:2f:78:a4:9a: 98:f0:57:18:68:89:52:38:36:15:cf:05:dd:35:d9:a3:38:ad: fb:7a:ca:19:a5:82:bf:42:80:9f:42:7e:62:60:6f:07:58:33: b1:15:22:31:91:42:67:91:c1:60:fb:10:83:0f:59:64:a4:92: 37:57:c6:f5:1b:a9:d6:ec:24:88:ae:23:1d:db:62:82:66:6e: dc:b9:19:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXZxN+U5iek9jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk Y2I4MmU3NTQtNzAwNy00YzM4LTk4ZjctZGNiNjg0ODY1MTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9eG5D5dRTp4FwWe8WRrlBq/CfHsaa+K4JLy kP5tkt4KuDGMreWYsO+KLaCXwDHkrQIMRgMM0zgc3oGiJBUwdk519sNmynU6BMjD h1RDIziDAV1oLc+S8QyCpYGe+HFM/VPT9z861oCRFnEsKAo+Hgg8ZG+7RsI0WxfY hRXTSRFuvasKEhlt+Odij29JdOve99/B/OF25oU+STiqP2qH7x+kK1DT/yT3JssS CGwksCUv8D/7D53i633MRG1KbinSosPazAD+Er52OgSNjmWLTDlyV69P0HhZuNDm x8iUOqMvgqg5D8+rdLuhcc0Q5jR34QH/Rsxlt4W9HIKJUKajUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+llkJ8Uc6UjQqvkvh5sixKPAmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZDZiZDQ5NzEtYzQ1Mi0z NDgyLWFiZDEtZWE3YjViMmE3MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALicoUjFzrE4pRx6WbddFkPvJI/fVfb0JMbFdlPczq0+H7NkKQ51TdvF hdFA4djbOwpBf2U4rnW7e1NSB3NvPxt6dyk9I8MmOrsIhSJNWK3E4jZM84Wntgwt b2AHi98ce3+f0r4g19Na1cQTuszI6bKiNmN4N7vzxgaJCO4sNikFkERQ6wgh5Pmm mC3jgM/2Y//vJF/LtW2Un6v6XuY7G6YOJhJ/ilqsLa6uJwL1g1uYL3ikmpjwVxho iVI4NhXPBd012aM4rft6yhmlgr9CgJ9CfmJgbwdYM7EVIjGRQmeRwWD7EIMPWWSk kjdXxvUbqdbsJIiuIx3bYoJmbty5GTo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:12 2025 by rpki-client