$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa File: ace46686-2760-3bbc-8069-6ec4c46c5107.roa (raw, json) Hash identifier: awj67aGIlBDs5kocrR8Zz4p2P3tiJGSAkQ0HnUGNfxs= Subject key identifier: 44:DE:98:46:D4:1E:76:E8:5C:BE:78:E8:07:B1:38:FF:86:B1:66:43 Certificate issuer: /CN=64c0f0d2-36a3-4e64-b974-bfb8301baf21 Certificate serial: 010D0C9F4328584BAEC7ACBF72A3837B3F3D4C00 Authority key identifier: 3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 3128 IP address blocks: 137.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ac:bf:72:a3:83:7b:3f:3d:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c0f0d2-36a3-4e64-b974-bfb8301baf21 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=f4c6fab4-84c9-4a15-91a5-3846f0b1ce3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9b:67:91:23:e5:f5:a6:b6:c0:a4:2f:f4:aa: e9:ed:a4:1e:23:91:8d:38:f0:6c:55:c7:8d:21:4a: 85:f2:38:47:73:b2:16:9a:21:94:ea:eb:cf:cf:98: a4:00:db:97:21:54:76:64:20:af:5e:71:66:de:06: 6d:11:7d:4a:de:49:35:bc:71:40:16:00:e7:88:0f: ba:23:bd:f2:91:20:1b:d7:e4:42:0a:aa:1d:3a:e8: 2d:4a:ad:4b:6b:dd:9e:16:74:ff:a0:97:1d:6f:09: be:b8:0a:84:9c:7b:f8:ad:82:d0:f8:af:12:e8:17: 54:69:1b:b5:ec:20:1d:8c:1e:c6:b5:a0:83:be:02: ee:0e:12:d1:40:3d:54:48:b4:81:8b:0c:39:a5:55: 4c:e1:6d:db:fd:57:2c:ab:7a:21:f1:fc:3e:df:27: c5:f2:c6:f4:ab:49:22:4c:73:10:c8:64:6d:ca:45: 25:09:5e:6e:c0:fb:b6:5c:4e:76:a6:3d:0c:ae:77: cd:b4:ac:2c:7c:14:5c:41:b9:ae:c2:8b:ee:37:e1: c5:cf:44:14:b8:e6:a2:f8:bb:d9:d6:70:fb:85:f8: 83:b7:67:de:5f:20:ff:6c:ef:e7:47:31:b4:1f:91: 3f:42:63:bf:76:c8:44:89:8b:fd:ae:6a:25:ae:b5: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DE:98:46:D4:1E:76:E8:5C:BE:78:E8:07:B1:38:FF:86:B1:66:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.crl X509v3 Authority Key Identifier: keyid:3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer sbgp-ipAddrBlock: critical IPv4: 137.81.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0e:94:1b:1b:0f:4e:89:16:01:25:c2:01:5d:05:10:b5:d9: a1:33:c1:e0:31:28:62:03:7e:bf:5e:bc:4c:04:3d:67:b9:91: 63:5c:89:dc:ef:7b:04:1a:d9:92:3e:ea:93:f2:5b:1d:26:2f: ec:67:88:17:b3:c6:6e:62:64:7e:41:50:7a:15:81:5d:22:27: e5:ba:77:76:3b:f0:65:15:c0:02:6b:e9:f4:68:86:73:4d:ea: c6:69:fa:b5:e9:91:4e:00:6b:41:de:41:01:6e:35:ed:5f:a7: 30:84:34:c8:a8:f6:26:b9:db:72:1e:87:d6:7f:eb:be:d3:c5: 4a:3b:c5:e4:42:38:7f:cb:5b:bf:3c:47:dd:4c:5c:2e:0b:01: a7:3b:f2:44:7d:7c:57:e4:5d:5c:40:6e:ee:a7:40:5b:4d:f8: a4:b6:63:97:3a:9a:22:03:1d:05:0e:f9:87:7a:d6:8e:2d:29: 7b:3c:bb:5e:2d:ef:78:b5:c8:97:05:ad:41:3a:4c:74:95:b5: ef:b6:29:39:ce:c6:08:56:b5:2e:ff:db:e2:08:0d:1f:bf:15: c7:69:94:7d:54:45:32:f1:96:2f:78:11:ae:df:92:ba:4a:55: 68:da:9b:8e:06:7e:8f:56:90:e9:24:a3:15:7e:7f:3b:87:c5: f1:f3:ad:ff -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuux6y/cqODez89TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRjMGYwZDItMzZhMy00ZTY0LWI5NzQtYmZiODMwMWJh ZjIxMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZjRjNmZhYjQtODRjOS00YTE1LTkxYTUtMzg0NmYwYjFjZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JtnkSPl9aa2wKQv9Krp7aQeI5GNOPBsVceN IUqF8jhHc7IWmiGU6uvPz5ikANuXIVR2ZCCvXnFm3gZtEX1K3kk1vHFAFgDniA+6 I73ykSAb1+RCCqodOugtSq1La92eFnT/oJcdbwm+uAqEnHv4rYLQ+K8S6BdUaRu1 7CAdjB7GtaCDvgLuDhLRQD1USLSBiww5pVVM4W3b/Vcsq3oh8fw+3yfF8sb0q0ki THMQyGRtykUlCV5uwPu2XE52pj0MrnfNtKwsfBRcQbmuwovuN+HFz0QUuOai+LvZ 1nD7hfiDt2feXyD/bO/nRzG0H5E/QmO/dshEiYv9rmolrrVX2wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFETemEbUHnboXL546AexOP+GsWZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NGMw ZjBkMi0zNmEzLTRlNjQtYjk3NC1iZmI4MzAxYmFmMjEvYWNlNDY2ODYtMjc2MC0z YmJjLTgwNjktNmVjNGM0NmM1MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjRjMGYwZDItMzZhMy00ZTY0LWI5 NzQtYmZiODMwMWJhZjIxLzY0YzBmMGQyLTM2YTMtNGU2NC1iOTc0LWJmYjgzMDFi YWYyMS5jcmwwHwYDVR0jBBgwFoAUPhB8wc0zaKhkfHLiXR2OQRfYiYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NGMwZjBkMi0zNmEzLTRlNjQtYjk3NC1iZmI4 MzAxYmFmMjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMg6UGxsPTokWASXCAV0FELXZoTPB4DEoYgN+v168TAQ9Z7mRY1yJ3O97 BBrZkj7qk/JbHSYv7GeIF7PGbmJkfkFQehWBXSIn5bp3djvwZRXAAmvp9GiGc03q xmn6temRTgBrQd5BAW417V+nMIQ0yKj2Jrnbch6H1n/rvtPFSjvF5EI4f8tbvzxH 3UxcLgsBpzvyRH18V+RdXEBu7qdAW034pLZjlzqaIgMdBQ75h3rWji0pezy7Xi3v eLXIlwWtQTpMdJW177YpOc7GCFa1Lv/b4ggNH78Vx2mUfVRFMvGWL3gRrt+SukpV aNqbjgZ+j1aQ6SSjFX5/O4fF8fOt/w== -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:37 2025 by rpki-client