$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa File: a680df6e-155d-3d93-babb-124b8a696bd5.roa (raw, json) Hash identifier: GzmRTkQjZ8jS0f2Wqc5qCy3ATA7T/aWalWo0g24DlLs= Subject key identifier: 52:FA:6F:92:65:B1:F7:01:4D:0C:E8:7A:3C:7E:7D:5E:5B:F4:39:E1 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584B87B21FD61E14A190AB599130 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 46672 IP address blocks: 199.30.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1f:d6:1e:14:a1:90:ab:59:91:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=b7be1def-2823-4ca2-a784-29d482c77b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bc:1f:f5:87:b7:33:38:e3:3d:f7:ee:9f:14: d4:c1:dd:44:c7:57:a8:c6:fa:6a:86:ff:27:7b:bf: f7:86:ae:9d:8d:40:55:9f:57:b2:71:e1:dd:cf:ed: e3:6d:c3:a7:6f:f9:01:14:cc:f3:f9:5b:95:fa:49: 1c:83:eb:f1:e2:65:8e:e3:e8:58:21:b6:84:67:ba: ec:4d:fa:d4:76:ad:4a:7f:9e:df:b6:97:f2:ff:5f: c6:4f:b5:c1:be:19:42:94:92:89:af:cb:5c:a1:1b: d7:88:fc:db:82:e4:89:b2:0c:12:fb:e4:3f:b8:9f: 22:16:af:5c:62:94:e7:f3:32:f8:a4:31:60:f6:70: 47:a5:93:ad:d5:b1:9f:41:b6:16:db:b3:d5:9c:93: 54:81:d8:39:50:ee:90:8f:db:b0:32:66:8c:22:c2: db:c9:ff:b4:86:15:67:9d:59:59:24:6f:36:3d:52: 82:b0:bd:71:2e:af:78:44:8a:25:f1:3e:af:bd:39: 29:81:9c:8b:1f:85:3a:cd:af:f0:73:f1:51:86:06: e2:33:c3:d9:f9:83:5c:55:92:68:d7:4f:99:d4:c1: 17:ad:11:da:69:66:57:48:5f:75:77:d8:5d:97:e3: 13:a3:46:64:b6:1c:87:36:ad:6e:a2:44:9b:11:19: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FA:6F:92:65:B1:F7:01:4D:0C:E8:7A:3C:7E:7D:5E:5B:F4:39:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:51:a0:ed:0f:e2:b4:6e:ec:d8:bd:82:70:5b:01:86:1c:e2: a0:b9:8e:36:17:e7:68:cb:f3:95:0e:02:d8:c5:9b:2f:0d:4b: d4:a3:76:ee:fa:a0:b4:c1:99:ff:c1:65:62:e4:32:45:3f:ed: 52:f9:a1:b0:5b:88:76:41:ec:24:f3:6c:86:05:a4:05:7f:8c: 0b:a5:a2:65:35:23:6a:74:11:31:81:85:fd:48:48:a2:a6:6f: 4a:9e:4d:57:90:a3:b5:62:a3:c2:a9:57:cc:53:71:8f:7e:a3: 73:fe:69:90:e9:d7:7b:30:cb:f2:e9:c2:ef:6f:ab:a5:06:1d: 56:56:57:67:91:17:53:e0:f0:ce:01:b1:55:64:b0:5f:2a:26: a2:1d:e6:1e:75:cf:61:6b:82:0b:55:e2:a4:a1:be:1a:65:04: 40:d9:24:08:07:ce:21:67:c6:3e:55:8f:5f:1c:7f:1f:29:fb: 72:f6:04:8f:e8:7c:b7:83:65:74:66:50:ef:08:1c:0d:33:e0: 03:0a:14:4f:c3:af:69:b6:55:19:05:94:55:a3:04:de:8d:c6: 10:c2:11:15:cf:03:32:fa:0c:17:c4:e1:a2:bd:ba:24:cb:5f: 44:7c:cd:fd:3b:2d:2d:1b:92:a1:4a:ce:20:1a:6c:47:e4:a4: ef:ae:8f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh/WHhShkKtZkTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YjdiZTFkZWYtMjgyMy00Y2EyLWE3ODQtMjlkNDgyYzc3YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rwf9Ye3MzjjPffunxTUwd1Ex1eoxvpqhv8n e7/3hq6djUBVn1eyceHdz+3jbcOnb/kBFMzz+VuV+kkcg+vx4mWO4+hYIbaEZ7rs TfrUdq1Kf57ftpfy/1/GT7XBvhlClJKJr8tcoRvXiPzbguSJsgwS++Q/uJ8iFq9c YpTn8zL4pDFg9nBHpZOt1bGfQbYW27PVnJNUgdg5UO6Qj9uwMmaMIsLbyf+0hhVn nVlZJG82PVKCsL1xLq94RIol8T6vvTkpgZyLH4U6za/wc/FRhgbiM8PZ+YNcVZJo 10+Z1MEXrRHaaWZXSF91d9hdl+MTo0ZkthyHNq1uokSbERnLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL6b5JlsfcBTQzoejx+fV5b9DnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvYTY4MGRmNmUtMTU1ZC0z ZDkzLWJhYmItMTI0YjhhNjk2YmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtRoO0P4rRu7Ni9gnBbAYYc4qC5jjYX52jL85UOAtjFmy8NS9Sjdu76 oLTBmf/BZWLkMkU/7VL5obBbiHZB7CTzbIYFpAV/jAulomU1I2p0ETGBhf1ISKKm b0qeTVeQo7Vio8KpV8xTcY9+o3P+aZDp13swy/Lpwu9vq6UGHVZWV2eRF1Pg8M4B sVVksF8qJqId5h51z2FrggtV4qShvhplBEDZJAgHziFnxj5Vj18cfx8p+3L2BI/o fLeDZXRmUO8IHA0z4AMKFE/Dr2m2VRkFlFWjBN6NxhDCERXPAzL6DBfE4aK9uiTL X0R8zf07LS0bkqFKziAabEfkpO+ujz0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:51 2025 by rpki-client