$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa File: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (raw, json) Hash identifier: Ib9tdmTsLe2aNPqXV/gWqPZnM/c8qrgKqNrjv6qDd7A= Subject key identifier: 4D:C1:E1:66:54:8E:EF:67:50:BB:49:24:D7:78:B1:8E:84:DD:75:42 Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584B41E70C085F2250330EC3B280 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 400442 IP address blocks: 23.133.168.0/24 maxlen: 24 205.236.99.0/24 maxlen: 24 2602:fbc7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0c:08:5f:22:50:33:0e:c3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ea4f3b63-4979-45ad-880d-9e5b27c18013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:8d:64:b7:ef:0b:b0:ce:b3:d5:3a:1f:9b: 48:63:31:a4:04:c0:90:60:93:9b:7b:c3:20:bf:16: 9d:79:e0:79:c6:84:9e:59:46:ea:92:4f:d4:8f:fe: ea:88:d6:f5:d9:f0:72:f8:c8:42:01:ef:60:c8:c3: 53:0e:b0:e5:8a:e8:d8:b4:7c:a7:ef:cf:9f:92:4e: 62:58:a3:3b:b9:07:06:d7:f2:40:81:97:3d:29:85: 66:df:0c:eb:c3:56:86:83:1e:30:74:d4:6e:6d:5c: b4:b4:72:57:b8:ef:90:f2:70:a7:d7:55:45:f5:71: 66:96:87:23:29:30:8b:2e:f2:ac:03:c5:1c:9a:98: f2:75:75:22:10:41:59:0b:f8:23:67:5f:63:34:1f: bd:79:43:fd:bb:34:d6:19:9a:be:3c:60:4d:68:7e: ff:35:ab:24:df:8b:b5:59:47:7d:1d:4e:cb:c2:ee: d4:cc:73:5e:e6:2a:ec:3e:75:d4:df:96:c1:7e:fc: 95:a2:94:be:a1:20:4e:05:6e:3c:e8:37:68:9a:94: b2:8f:8f:03:dd:f8:95:fa:56:37:10:92:0b:02:5d: 33:01:1f:1c:30:67:15:1d:56:f4:5a:62:d1:cb:94: 39:e4:db:3d:6d:c1:cf:d7:43:08:01:38:4b:f4:47: 9f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C1:E1:66:54:8E:EF:67:50:BB:49:24:D7:78:B1:8E:84:DD:75:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv4: 23.133.168.0/24 205.236.99.0/24 IPv6: 2602:fbc7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c2:02:8c:55:90:ff:ea:ac:74:08:2d:50:7a:36:3f:e0:87: 8f:22:94:6d:f5:7f:78:6f:41:17:c6:59:e1:da:b5:31:44:a7: 41:7b:c5:fe:da:79:74:a2:4d:72:91:bc:22:a8:3e:3b:76:7c: 7e:83:07:7b:53:94:a0:ae:ff:27:ed:81:72:03:86:cd:58:fa: 6f:d5:00:95:23:6b:9a:1a:b0:3f:0e:ff:61:e6:7a:06:6e:0b: 0b:b5:55:0d:b1:1a:5c:20:b9:51:94:14:43:53:5e:f1:bc:d7: 8d:9a:ba:7e:ad:39:c1:3a:55:4b:30:d9:a0:e4:68:d3:dc:4c: 07:84:7f:f6:55:50:3d:55:9b:6c:a2:0d:e7:00:72:bb:6b:88: e5:6a:d7:af:83:b0:d2:16:97:a0:a9:60:04:fa:25:79:90:20: 52:55:1c:3b:d1:15:83:6e:c2:a6:5a:c5:71:ed:fd:56:f9:d4: c3:54:22:01:ed:4e:bf:85:29:ba:b6:9c:2b:f7:97:ed:d9:70: 9d:e5:31:61:99:f0:5a:ec:1c:87:8f:79:74:1a:ed:9c:d0:13: 8e:2d:5d:26:ee:ca:57:c5:ab:28:a1:9f:83:36:f5:d6:8b:13: 60:2d:81:8e:3c:06:47:e3:54:88:d0:25:58:18:11:c8:60:60: 1b:f5:4e:21 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEtB5wwIXyJQMw7DsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWE0ZjNiNjMtNDk3OS00NWFkLTg4MGQtOWU1YjI3YzE4MDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQONZLfvC7DOs9U6H5tIYzGkBMCQYJObe8Mg vxadeeB5xoSeWUbqkk/Uj/7qiNb12fBy+MhCAe9gyMNTDrDliujYtHyn78+fkk5i WKM7uQcG1/JAgZc9KYVm3wzrw1aGgx4wdNRubVy0tHJXuO+Q8nCn11VF9XFmlocj KTCLLvKsA8UcmpjydXUiEEFZC/gjZ19jNB+9eUP9uzTWGZq+PGBNaH7/Nask34u1 WUd9HU7Lwu7UzHNe5irsPnXU35bBfvyVopS+oSBOBW486DdompSyj48D3fiV+lY3 EJILAl0zAR8cMGcVHVb0WmLRy5Q55Ns9bcHP10MIAThL9EefZwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFE3B4WZUju9nULtJJNd4sY6E3XVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvODk3YWRkZGItYTMwOS0z ZmMwLWI3OTMtY2NiZjUzODhjMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4WoAwQA zexjMA4EAgACMAgDBgAmAvvHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLwgKMVZD/6qx0CC1QejY/4IeP IpRt9X94b0EXxlnh2rUxRKdBe8X+2nl0ok1ykbwiqD47dnx+gwd7U5Sgrv8n7YFy A4bNWPpv1QCVI2uaGrA/Dv9h5noGbgsLtVUNsRpcILlRlBRDU17xvNeNmrp+rTnB OlVLMNmg5GjT3EwHhH/2VVA9VZtsog3nAHK7a4jlatevg7DSFpegqWAE+iV5kCBS VRw70RWDbsKmWsVx7f1W+dTDVCIB7U6/hSm6tpwr95ft2XCd5TFhmfBa7ByHj3l0 Gu2c0BOOLV0m7spXxasooZ+DNvXWixNgLYGOPAZH41SI0CVYGBHIYGAb9U4h -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:43 2025 by rpki-client