$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa File: 996a8c3d-493a-3083-8c2a-64a52f163771.roa (raw, json) Hash identifier: YQgQqUT713/XyHvM5p69gSOF4/i+qvcBNnmLemhf+n0= Subject key identifier: 59:B1:EB:7A:63:52:C2:29:B4:68:98:A9:51:2A:47:E7:B3:DE:FB:24 Certificate issuer: /CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Certificate serial: 010D0C9F4328584AEB5BCE4EDDE50BF07BEE8100 Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa Signing time: Wed 20 Aug 2025 13:00:41 +0000 ROA not before: Wed 20 Aug 2025 13:00:41 +0000 ROA not after: Tue 18 Nov 2025 14:00:41 +0000 asID: 393397 IP address blocks: 64.188.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:ce:4e:dd:e5:0b:f0:7b:ee:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Validity Not Before: Aug 20 13:00:41 2025 GMT Not After : Nov 18 14:00:41 2025 GMT Subject: CN=2c0ae398-af63-446e-9434-a621bf14534d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:27:31:23:be:e2:c1:d6:5f:85:51:c8:5e: d8:d7:95:29:18:09:31:cc:e4:11:65:a9:de:39:02: 88:1c:e5:ba:9f:b4:3b:2c:3b:7f:95:50:4f:0e:e5: d1:06:ed:b3:8d:c6:3e:83:f6:5f:f4:66:03:8e:ec: 0a:af:01:08:53:64:ba:20:38:38:19:95:0b:de:98: c0:a3:ab:98:bc:e0:a5:d5:39:f9:48:7d:58:42:48: 46:a7:98:e2:37:80:4d:c9:b0:15:29:e9:b7:0b:d0: 4f:67:19:9e:98:b1:3a:a1:f1:55:7d:64:21:fa:cd: a4:6f:fb:3d:9d:f4:23:a4:13:4a:08:ac:13:e0:3d: d2:79:63:7f:a9:52:21:a7:6c:d6:e8:c6:61:29:66: b4:d2:b0:37:47:a8:ec:a9:fb:db:df:e4:aa:3f:41: b9:61:54:27:97:08:65:42:8d:d3:db:81:0f:9e:52: b6:a9:93:ad:7d:18:5b:3b:96:f7:13:52:df:88:e9: af:cf:ea:96:98:a8:ac:aa:ed:6f:66:27:61:00:88: 62:0d:c9:ca:24:be:ff:85:c1:13:38:a0:0d:55:c6: 29:b6:ac:2e:53:d7:b4:f9:5d:2e:da:78:8f:69:8d: 39:c0:9d:33:09:21:94:03:d9:31:ac:f0:1e:f0:97: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:EB:7A:63:52:C2:29:B4:68:98:A9:51:2A:47:E7:B3:DE:FB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl X509v3 Authority Key Identifier: keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer sbgp-ipAddrBlock: critical IPv4: 64.188.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:12:81:10:cc:9d:bb:e0:d1:c5:b2:c1:7a:74:47:92:fc:3c: 2c:35:d6:f4:84:d8:3d:c6:07:1f:53:cc:db:c8:e6:12:b2:a9: 00:c3:5e:a8:41:74:25:de:fd:8a:04:ea:d3:7e:9f:fa:ff:11: 22:e2:28:55:02:1b:96:3c:b2:fd:8f:b3:52:e6:03:d5:f9:2a: 2b:41:1b:a4:bf:a9:d1:da:d3:6d:3d:e5:b0:2f:61:8f:dd:d0: 5a:5e:14:d9:5f:7c:d6:07:b1:5a:89:3c:59:23:04:39:a3:2b: 51:91:bd:95:e8:a7:25:da:e3:3f:68:c6:b2:2c:be:ae:98:9c: 30:70:15:d8:85:bc:fa:b8:f2:df:58:10:ef:3b:6f:0c:c1:85: 0f:0f:69:73:93:02:74:f5:a1:c7:c0:f5:bb:34:1b:03:bf:f0: 46:46:ff:92:66:53:71:b6:05:92:d3:2b:2d:09:8f:a9:0e:ca: c5:ea:03:86:fc:28:bd:4d:34:e7:7f:01:c4:31:20:16:44:9d: 15:b9:f4:b1:0d:1e:e3:38:a1:c4:74:32:7e:c4:b3:6b:22:4d: e8:b3:d6:fd:67:24:6b:41:87:df:50:dd:0d:68:96:ba:a7:38: 00:47:04:10:6e:93:eb:57:01:6f:90:c8:5a:69:46:1f:fc:11: 93:2e:3c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrW85O3eUL8HvugQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4 NDQ2MB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk MmMwYWUzOTgtYWY2My00NDZlLTk0MzQtYTYyMWJmMTQ1MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5QnMSO+4sHWX4VRyF7Y15UpGAkxzOQRZane OQKIHOW6n7Q7LDt/lVBPDuXRBu2zjcY+g/Zf9GYDjuwKrwEIU2S6IDg4GZUL3pjA o6uYvOCl1Tn5SH1YQkhGp5jiN4BNybAVKem3C9BPZxmemLE6ofFVfWQh+s2kb/s9 nfQjpBNKCKwT4D3SeWN/qVIhp2zW6MZhKWa00rA3R6jsqfvb3+SqP0G5YVQnlwhl Qo3T24EPnlK2qZOtfRhbO5b3E1LfiOmvz+qWmKisqu1vZidhAIhiDcnKJL7/hcET OKANVcYptqwuU9e0+V0u2niPaY05wJ0zCSGUA9kxrPAe8Jd24wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmx63pjUsIptGiYqVEqR+ez3vskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZTEw NjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvOTk2YThjM2QtNDkzYS0z MDgzLThjMmEtNjRhNTJmMTYzNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmUxMDYwMWMtZTI4MC00NTEwLTlk ODQtYjZkMmIwMmI4NDQ2LzZlMTA2MDFjLWUyODAtNDUxMC05ZDg0LWI2ZDJiMDJi ODQ0Ni5jcmwwHwYDVR0jBBgwFoAUTu1El1iaHDmaM7ilgAeW14M6ikQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQy YjAyYjg0NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcSgRDMnbvg0cWywXp0R5L8PCw11vSE2D3GBx9TzNvI5hKyqQDDXqhB dCXe/YoE6tN+n/r/ESLiKFUCG5Y8sv2Ps1LmA9X5KitBG6S/qdHa02095bAvYY/d 0FpeFNlffNYHsVqJPFkjBDmjK1GRvZXopyXa4z9oxrIsvq6YnDBwFdiFvPq48t9Y EO87bwzBhQ8PaXOTAnT1ocfA9bs0GwO/8EZG/5JmU3G2BZLTKy0Jj6kOysXqA4b8 KL1NNOd/AcQxIBZEnRW59LENHuM4ocR0Mn7Es2siTeiz1v1nJGtBh99Q3Q1olrqn OABHBBBuk+tXAW+QyFppRh/8EZMuPEc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:35 2025 by rpki-client