$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa File: be4b8d90-b929-3e3a-a40f-7571bb524df0.roa (raw, json) Hash identifier: lipNMrZSES+QANbG40Qps/Rq+7osjL6UImZfX69Gke0= Subject key identifier: D9:11:67:3F:6D:59:65:B1:A4:92:86:FD:54:FB:F5:EF:F7:42:1C:76 Certificate issuer: /CN=d3292f16-bd24-4446-a83f-489f05a2076a Certificate serial: 010D0C9F4328584BA0D261E2B60E0010E0EBB200 Authority key identifier: 2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 5758 IP address blocks: 64.29.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:61:e2:b6:0e:00:10:e0:eb:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3292f16-bd24-4446-a83f-489f05a2076a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=5cf2c3e8-9b4c-4824-8e07-f971d672525c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:1f:b7:6e:2b:b9:fe:28:2e:af:4d:f8:85: 47:e4:d5:1f:20:96:f9:82:5e:88:76:1c:8b:e9:de: 7c:4a:38:6f:4d:a9:b5:ae:41:68:0c:82:54:5b:b8: 5d:1b:94:f1:b2:f6:26:39:47:e4:a4:7d:26:85:f7: 87:9d:f5:7c:a0:5e:b9:c9:4f:3d:57:50:2e:a9:d0: 49:e3:77:50:c7:dd:26:4a:4e:b6:eb:93:2d:07:98: a1:54:88:48:48:c7:df:28:13:25:be:b0:fe:50:0a: 75:8c:f7:8a:57:e3:7d:69:87:d3:98:d8:f2:5e:b0: ca:56:cd:15:67:8f:e8:83:7f:49:3a:82:c6:f3:15: cb:39:3b:37:31:9b:72:ac:46:24:bc:4b:74:89:11: 65:a6:9f:b3:e5:61:9f:30:3d:4b:d6:f5:ac:60:16: 9a:72:47:91:9b:af:ad:fa:f9:db:05:94:e4:73:62: 2f:91:68:7c:15:a7:ce:16:13:1c:f4:9a:88:4a:b8: c1:d2:41:37:73:03:37:e4:f4:6c:4f:91:d6:c0:6d: b2:f6:ac:75:ce:12:c1:09:b9:f9:c9:11:22:21:ed: 67:3e:54:a2:98:b1:43:a5:05:95:34:39:77:01:2e: ee:bd:d7:07:f9:16:f2:d5:c4:f7:86:a7:1a:3c:30: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:11:67:3F:6D:59:65:B1:A4:92:86:FD:54:FB:F5:EF:F7:42:1C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl X509v3 Authority Key Identifier: keyid:2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer sbgp-ipAddrBlock: critical IPv4: 64.29.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:03:d0:db:ae:42:d3:c4:e1:f7:66:c9:43:90:06:1c:b5:bf: d6:73:97:a6:cc:31:18:91:bb:40:4d:1f:3c:3c:fa:18:96:6c: 2c:71:c3:48:ee:f1:55:d6:05:0a:b0:1f:a2:b0:3e:d7:9a:df: 28:23:04:d9:61:21:6d:b4:92:63:fc:03:3f:40:ec:28:85:85: 8a:13:bd:ba:83:1f:2c:51:ea:e4:b1:d5:99:e4:1a:a9:8f:c0: db:8e:a4:e3:12:04:56:0c:86:0b:41:10:37:2f:c3:56:98:21: 9e:8a:eb:a9:f2:da:93:ad:c9:c1:78:a5:92:e2:e8:8f:82:9d: 2b:bc:b8:22:d6:a0:28:51:a6:14:8b:e9:ed:c1:32:42:01:28: 51:74:9d:e1:46:5b:eb:26:61:d3:b5:54:fa:53:ab:66:cd:c0: d4:1b:9f:dd:e8:d0:37:71:eb:29:0a:9e:8c:b3:f8:cb:bb:ed: 7e:d2:f7:64:9e:ee:5c:5b:da:3e:79:b7:41:fa:2b:ab:9a:23: 5a:b0:6c:dc:3b:76:bb:85:fb:50:19:96:be:4b:05:54:26:32: d4:d4:18:2d:1d:82:c5:f1:cc:34:a5:f5:02:b4:6a:ca:ce:b5: 41:3e:2c:8d:ed:eb:0f:65:59:c8:c4:78:10:69:c0:fe:4d:4d: 37:23:40:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mHitg4AEODrsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMyOTJmMTYtYmQyNC00NDQ2LWE4M2YtNDg5ZjA1YTIw NzZhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NWNmMmMzZTgtOWI0Yy00ODI0LThlMDctZjk3MWQ2NzI1MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XMft24ruf4oLq9N+IVH5NUfIJb5gl6IdhyL 6d58SjhvTam1rkFoDIJUW7hdG5TxsvYmOUfkpH0mhfeHnfV8oF65yU89V1AuqdBJ 43dQx90mSk6265MtB5ihVIhISMffKBMlvrD+UAp1jPeKV+N9aYfTmNjyXrDKVs0V Z4/og39JOoLG8xXLOTs3MZtyrEYkvEt0iRFlpp+z5WGfMD1L1vWsYBaackeRm6+t +vnbBZTkc2IvkWh8FafOFhMc9JqISrjB0kE3cwM35PRsT5HWwG2y9qx1zhLBCbn5 yREiIe1nPlSimLFDpQWVNDl3AS7uvdcH+Rby1cT3hqcaPDDyrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkRZz9tWWWxpJKG/VT79e/3Qhx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzI5 MmYxNi1iZDI0LTQ0NDYtYTgzZi00ODlmMDVhMjA3NmEvYmU0YjhkOTAtYjkyOS0z ZTNhLWE0MGYtNzU3MWJiNTI0ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyOTJmMTYtYmQyNC00NDQ2LWE4 M2YtNDg5ZjA1YTIwNzZhL2QzMjkyZjE2LWJkMjQtNDQ0Ni1hODNmLTQ4OWYwNWEy MDc2YS5jcmwwHwYDVR0jBBgwFoAULndamK4V2wSZphtcBxR8TlG/7MAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzI5MmYxNi1iZDI0LTQ0NDYtYTgzZi00ODlm MDVhMjA3NmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQB1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcD0NuuQtPE4fdmyUOQBhy1v9Zzl6bMMRiRu0BNHzw8+hiWbCxxw0ju 8VXWBQqwH6KwPtea3ygjBNlhIW20kmP8Az9A7CiFhYoTvbqDHyxR6uSx1ZnkGqmP wNuOpOMSBFYMhgtBEDcvw1aYIZ6K66ny2pOtycF4pZLi6I+CnSu8uCLWoChRphSL 6e3BMkIBKFF0neFGW+smYdO1VPpTq2bNwNQbn93o0Ddx6ykKnoyz+Mu77X7S92Se 7lxb2j55t0H6K6uaI1qwbNw7druF+1AZlr5LBVQmMtTUGC0dgsXxzDSl9QK0asrO tUE+LI3t6w9lWcjEeBBpwP5NTTcjQGA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:51:33 2025 by rpki-client