$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa File: d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa (raw, json) Hash identifier: +WiGfXl4A7OZf9bxxQNxVddbMqT2j+QZM9t8W7Cy07A= Subject key identifier: BA:6C:00:E0:0F:F8:E5:B0:97:EA:B1:37:F6:BE:AA:4B:B7:74:2C:4B Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584B110C040D81E1A758D4196B80 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14090 IP address blocks: 64.21.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:04:0d:81:e1:a7:58:d4:19:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=1bb881ee-4a6b-49b3-85be-cbde58d83087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:69:52:2b:c2:10:2e:a5:e7:5f:02:76:57: 4e:04:10:ad:18:3f:88:4e:66:4f:c3:89:94:6d:ca: 24:89:de:06:d9:4a:57:19:8d:38:2a:47:56:c8:64: 64:c3:33:95:99:fb:ba:09:e7:95:85:79:a6:67:b8: dd:97:a6:de:5a:cf:8f:63:fb:27:21:27:d1:18:41: 2d:0e:9a:68:54:2b:fc:a5:11:3e:28:54:81:d0:ad: 17:2e:7d:c2:f7:69:28:19:f8:49:77:42:54:f7:84: b5:44:41:c2:32:0d:d1:e0:0d:77:e7:4f:29:3a:3a: 33:d5:70:f7:57:7c:a7:24:6d:9c:b8:be:e7:6e:0d: 84:fa:f7:72:9c:07:6b:23:13:37:c4:d0:48:e4:89: 75:09:14:c9:88:b9:53:81:87:01:65:30:36:cc:6c: 02:fc:a9:c1:c0:93:b8:cc:f4:16:3c:a3:51:e7:bf: c6:93:89:1b:cf:93:2b:c2:a4:7a:ee:68:5f:2c:00: f4:2d:9d:34:19:fd:fa:9f:e4:78:1f:28:59:76:75: 91:4b:c6:61:34:aa:16:cc:2e:92:c9:56:41:92:73: a6:21:f7:0e:f8:b0:bc:e7:37:e4:96:a5:8d:e7:d1: 9f:b9:5d:89:18:8f:00:8d:6d:e8:17:b9:c6:13:15: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6C:00:E0:0F:F8:E5:B0:97:EA:B1:37:F6:BE:AA:4B:B7:74:2C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c8:38:67:29:14:8b:74:55:0a:23:f9:07:ac:6e:a4:d3:cc: 90:4a:b7:b1:15:8e:a5:9f:e1:75:9d:32:23:04:3a:cb:92:23: 5a:ad:df:b8:e4:41:c1:60:72:02:96:f3:d5:b7:75:a2:e1:9d: 60:72:7d:13:0a:c9:42:56:ab:be:3f:89:33:5c:31:4c:47:56: b7:41:9f:26:f3:bd:a1:12:2f:54:62:55:18:23:33:58:1c:3b: 31:91:39:92:60:30:d7:ed:49:37:93:bd:5e:59:3e:08:da:09: dd:db:c0:48:bf:9b:24:00:af:10:b6:b5:3b:6d:36:82:2f:0a: da:99:75:cd:ff:32:5c:b9:07:b0:7a:e8:33:a2:e5:b9:34:9b: 0f:94:67:99:6f:a5:4b:43:d1:bf:5f:00:82:74:fe:ef:88:65: 5d:ae:3d:57:99:e5:58:bd:e3:68:e4:8b:8b:e1:eb:22:ab:8c: 54:dd:67:11:a9:00:ac:fe:1c:a7:ac:e0:61:81:57:59:8c:de: b2:a0:ed:06:1c:bb:36:9a:b2:7d:d0:cd:97:b0:1c:d1:52:90: dd:72:c0:c3:f4:87:f4:bd:e8:a9:80:9f:79:52:18:7b:fe:34: ea:f6:c5:bd:e9:54:4a:1c:2f:dd:52:83:be:ff:b4:97:1a:af: cc:eb:89:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAQNgeGnWNQZa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWJiODgxZWUtNGE2Yi00OWIzLTg1YmUtY2JkZTU4ZDgzMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDVpUivCEC6l518CdldOBBCtGD+ITmZPw4mU bcokid4G2UpXGY04KkdWyGRkwzOVmfu6CeeVhXmmZ7jdl6beWs+PY/snISfRGEEt DppoVCv8pRE+KFSB0K0XLn3C92koGfhJd0JU94S1REHCMg3R4A13508pOjoz1XD3 V3ynJG2cuL7nbg2E+vdynAdrIxM3xNBI5Il1CRTJiLlTgYcBZTA2zGwC/KnBwJO4 zPQWPKNR57/Gk4kbz5MrwqR67mhfLAD0LZ00Gf36n+R4HyhZdnWRS8ZhNKoWzC6S yVZBknOmIfcO+LC85zfklqWN59GfuV2JGI8AjW3oF7nGExUbwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpsAOAP+OWwl+qxN/a+qku3dCxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDdjZmZiMjAtNjhiMC0z ZWZiLWFhZTgtMTM2ZGM4ZTRmYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXIOGcpFIt0VQoj+QesbqTTzJBKt7EVjqWf4XWdMiMEOsuSI1qt37jk QcFgcgKW89W3daLhnWByfRMKyUJWq74/iTNcMUxHVrdBnybzvaESL1RiVRgjM1gc OzGROZJgMNftSTeTvV5ZPgjaCd3bwEi/myQArxC2tTttNoIvCtqZdc3/Mly5B7B6 6DOi5bk0mw+UZ5lvpUtD0b9fAIJ0/u+IZV2uPVeZ5Vi942jki4vh6yKrjFTdZxGp AKz+HKes4GGBV1mM3rKg7QYcuzaasn3QzZewHNFSkN1ywMP0h/S96KmAn3lSGHv+ NOr2xb3pVEocL91Sg77/tJcar8zriQA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:51 2025 by rpki-client