$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa File: 3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa (raw, json) Hash identifier: ETDBwOGLOpJdnz6OHX6Qawv5WUXVw2Zrshr/aRK81S8= Subject key identifier: EB:A8:37:2F:6B:CD:B6:F2:FB:A1:B5:E8:B1:D0:40:2D:55:26:93:A7 Certificate issuer: /CN=829fa5a7-a3d5-4117-b578-3b0df4686c29 Certificate serial: 010D0C9F4328584BB197C914BB4483AFEF4A6180 Authority key identifier: 54:F8:C1:10:2B:9F:46:36:07:E2:9B:C9:F0:17:DF:21:75:D1:67:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa Signing time: Thu 30 Oct 2025 13:11:36 +0000 ROA not before: Thu 30 Oct 2025 13:11:36 +0000 ROA not after: Wed 28 Jan 2026 14:11:36 +0000 asID: 812 IP address blocks: 64.87.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:97:c9:14:bb:44:83:af:ef:4a:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829fa5a7-a3d5-4117-b578-3b0df4686c29 Validity Not Before: Oct 30 13:11:36 2025 GMT Not After : Jan 28 14:11:36 2026 GMT Subject: CN=6a461404-e074-4f7b-862f-e360c0551673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:15:f9:cd:4f:e5:e5:40:60:58:61:e1:f1:f8: cb:82:e0:d0:04:57:d1:4d:57:84:76:1d:66:62:fc: cb:4b:3f:9a:4e:b3:f5:48:6c:d0:74:1a:fe:31:34: 87:e2:43:9f:83:e7:d4:27:99:7a:f4:47:41:11:ef: 7e:75:4e:0d:af:4a:b6:5e:bb:df:c6:e0:49:87:d1: 2a:fb:b1:74:91:d3:6f:77:88:89:48:e6:c8:70:01: 61:ee:86:72:cb:7a:65:1d:66:62:f5:76:9c:46:7f: fc:39:fc:20:2a:7d:e5:a4:2c:bb:55:d7:b4:21:00: a1:28:69:c4:51:6e:c1:19:c0:e8:92:12:f8:98:76: be:c3:b2:e9:8d:05:a1:0d:e6:93:c4:64:8d:2d:b2: fb:1f:f1:fe:11:98:cd:38:3e:93:bb:e9:85:dd:51: 10:20:84:1e:61:7b:53:ef:ad:cd:12:bf:60:9f:53: 52:01:0d:3c:10:b7:06:ba:a3:2b:ec:8e:e8:2f:da: 81:40:f3:d3:41:25:33:1d:bd:31:1f:ef:99:ad:05: 4a:9a:74:27:fe:6b:e0:48:56:f4:39:de:91:ed:90: be:24:13:1c:94:31:72:c3:98:7b:38:94:11:f2:42: 11:2c:88:ad:63:f2:b3:fc:1d:13:80:3b:eb:c3:98: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A8:37:2F:6B:CD:B6:F2:FB:A1:B5:E8:B1:D0:40:2D:55:26:93:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.crl X509v3 Authority Key Identifier: keyid:54:F8:C1:10:2B:9F:46:36:07:E2:9B:C9:F0:17:DF:21:75:D1:67:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer sbgp-ipAddrBlock: critical IPv4: 64.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:88:ef:f2:8a:bc:db:fa:d8:d6:34:d9:2a:a3:bd:30:a8:3b: 97:19:8f:c0:01:74:d5:66:cf:fe:6c:5f:d3:03:eb:af:ed:b7: f3:58:82:bb:a5:27:10:62:a2:7d:62:ed:e5:af:5c:3c:e1:d1: 4e:9d:f9:f2:c3:f8:c0:19:d5:67:17:b2:6d:be:37:d3:08:38: bc:b1:1d:21:31:b4:42:ac:59:a8:ae:af:43:23:75:a7:bc:cb: b8:26:8d:d0:f7:f5:dc:e3:2a:fb:a0:c8:e5:e9:bf:10:b7:14: 07:c5:02:19:d7:42:93:1f:33:ff:c1:2a:c6:15:c1:47:68:c5: 62:fc:f1:6d:db:77:2e:99:01:d5:65:1e:6a:0a:04:e8:8b:7c: 7b:e6:c5:86:c3:52:8b:64:cc:6f:03:9a:f0:50:37:46:d0:e8: 64:65:11:4e:d6:b8:c7:b7:09:1f:34:39:35:22:bf:1a:f1:13: dc:26:18:5e:8f:07:30:4f:d5:c2:e3:3c:27:94:02:3d:95:d0: 41:a8:8d:b2:ec:23:48:b5:c6:77:04:f0:94:d1:fa:f9:c7:ee: b9:51:a4:d7:02:44:2f:0d:0f:8e:f6:98:b2:44:d3:4f:bd:9a: 8e:5e:63:e9:ca:cb:01:33:fc:39:50:a8:a3:18:11:bc:29:3d: 9c:2a:64:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxl8kUu0SDr+9KYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZmE1YTctYTNkNS00MTE3LWI1NzgtM2IwZGY0Njg2 YzI5MB4XDTI1MTAzMDEzMTEzNloXDTI2MDEyODE0MTEzNlowLzEtMCsGA1UEAxMk NmE0NjE0MDQtZTA3NC00ZjdiLTg2MmYtZTM2MGMwNTUxNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RX5zU/l5UBgWGHh8fjLguDQBFfRTVeEdh1m YvzLSz+aTrP1SGzQdBr+MTSH4kOfg+fUJ5l69EdBEe9+dU4Nr0q2XrvfxuBJh9Eq +7F0kdNvd4iJSObIcAFh7oZyy3plHWZi9XacRn/8OfwgKn3lpCy7Vde0IQChKGnE UW7BGcDokhL4mHa+w7LpjQWhDeaTxGSNLbL7H/H+EZjNOD6Tu+mF3VEQIIQeYXtT 763NEr9gn1NSAQ08ELcGuqMr7I7oL9qBQPPTQSUzHb0xH++ZrQVKmnQn/mvgSFb0 Od6R7ZC+JBMclDFyw5h7OJQR8kIRLIitY/Kz/B0TgDvrw5iiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuoNy9rzbby+6G16LHQQC1VJpOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84Mjlm YTVhNy1hM2Q1LTQxMTctYjU3OC0zYjBkZjQ2ODZjMjkvMzg1NmRkZWItMWE3Yi0z ZDg3LTkzNDktZjYwYzA2MzNlZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODI5ZmE1YTctYTNkNS00MTE3LWI1 NzgtM2IwZGY0Njg2YzI5LzgyOWZhNWE3LWEzZDUtNDExNy1iNTc4LTNiMGRmNDY4 NmMyOS5jcmwwHwYDVR0jBBgwFoAUVPjBECufRjYH4pvJ8BffIXXRZ3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84MjlmYTVhNy1hM2Q1LTQxMTctYjU3OC0zYjBk ZjQ2ODZjMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKI7/KKvNv62NY02SqjvTCoO5cZj8ABdNVmz/5sX9MD66/tt/NYgrul JxBion1i7eWvXDzh0U6d+fLD+MAZ1WcXsm2+N9MIOLyxHSExtEKsWaiur0Mjdae8 y7gmjdD39dzjKvugyOXpvxC3FAfFAhnXQpMfM//BKsYVwUdoxWL88W3bdy6ZAdVl HmoKBOiLfHvmxYbDUotkzG8DmvBQN0bQ6GRlEU7WuMe3CR80OTUivxrxE9wmGF6P BzBP1cLjPCeUAj2V0EGojbLsI0i1xncE8JTR+vnH7rlRpNcCRC8ND472mLJE00+9 mo5eY+nKywEz/DlQqKMYEbwpPZwqZJA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:22 2025 by rpki-client