$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ca2fd37-7a48-3a4c-be28-07e7fa693d5f.roa File: 2ca2fd37-7a48-3a4c-be28-07e7fa693d5f.roa (raw, json) Hash identifier: 8ppmbgdgv9eL71bIM5QAFl3oVKImmj7n+ip5BjgYsrM= Subject key identifier: 4F:98:D7:22:11:FB:47:0D:BE:24:3A:04:A7:B4:5B:E6:A3:05:A4:11 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9D7F92CA1D7165E2739CCDB0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ca2fd37-7a48-3a4c-be28-07e7fa693d5f.roa Signing time: Thu 23 Oct 2025 08:26:39 +0000 ROA not before: Thu 23 Oct 2025 08:26:39 +0000 ROA not after: Wed 21 Jan 2026 09:26:39 +0000 asID: 174 IP address blocks: 64.204.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9d:7f:92:ca:1d:71:65:e2:73:9c:cd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 08:26:39 2025 GMT Not After : Jan 21 09:26:39 2026 GMT Subject: CN=7e703576-8bda-4cbc-8f6b-883c0f4ab47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:3f:e4:c2:cc:12:22:a9:16:b5:4e:2f:be: 4f:85:cc:40:c2:f3:ce:9c:b5:fa:41:36:4a:10:cb: 4b:a6:bf:93:3e:f3:c0:26:4c:e9:b5:f8:78:be:6d: 11:47:19:2c:5f:5b:e7:09:28:24:c4:86:14:ca:25: b1:cc:50:15:55:89:21:b2:a8:01:15:f3:b6:60:a6: 8c:c0:b7:8c:ff:c9:df:dc:2c:79:4d:2a:c4:5a:a7: 41:b1:75:93:2c:00:cb:76:f8:16:76:65:f9:b6:13: 8c:47:52:ba:17:03:83:69:93:3e:87:04:a5:4f:de: a3:c1:dc:69:34:f4:48:44:80:42:5c:79:2d:52:3c: f6:44:f3:ab:6a:53:10:62:c2:ee:5e:65:e8:18:bd: 3b:65:47:51:f1:94:29:6f:d4:f1:5f:2f:47:07:5b: 54:4f:d1:d0:a1:01:d8:32:b5:a1:c9:fa:de:32:ef: b8:c3:62:26:ed:ce:7b:be:e2:ea:45:84:72:54:74: 5e:2e:35:27:ed:c8:6f:87:20:32:10:52:3e:30:98: ab:a0:61:c2:3a:a0:77:38:e0:00:94:53:c5:b8:ef: 96:d9:1b:fc:2b:1f:11:ec:80:d1:9f:b2:16:ac:a2: 74:3f:3c:8c:e6:24:ba:c0:c8:1d:ac:7e:91:54:02: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:98:D7:22:11:FB:47:0D:BE:24:3A:04:A7:B4:5B:E6:A3:05:A4:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2ca2fd37-7a48-3a4c-be28-07e7fa693d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:aa:e3:18:c6:50:e2:0a:81:78:eb:35:67:3c:3b:ca:b9:e4: 2d:82:ac:89:52:b5:37:a1:af:22:45:67:2d:d9:30:c2:68:dc: 5c:53:e9:c3:fd:57:48:5f:11:64:05:fe:36:0e:cf:27:55:4b: ee:36:92:dd:e5:0a:a0:44:ef:dd:21:ac:d4:1e:87:73:88:d8: e8:c8:af:9e:f0:e6:58:c7:88:40:46:d9:a0:63:4d:72:c8:45: 5c:31:4c:f8:71:12:0a:71:e6:8f:e1:a6:e9:6c:49:cc:88:a1: ff:cf:23:ce:4e:53:94:39:69:ce:85:9a:ef:a0:59:d4:eb:10: b0:46:dd:e5:4a:13:83:2c:20:9a:0f:40:45:d5:45:7e:23:d6: b7:eb:f3:ed:18:87:6d:51:c1:d5:73:20:e2:44:c5:11:6d:5e: 8c:cd:d7:ca:1c:00:79:36:b3:ac:9d:63:52:10:56:3b:0c:aa: 11:ef:5b:a6:0f:be:3f:9a:fa:e9:1b:2d:a8:50:0c:e0:7e:8a: 8a:b8:45:16:62:ce:d2:13:2c:3d:1f:5e:ff:ea:f3:40:c9:08: 56:ba:b1:48:68:2f:c6:a3:a1:7f:4b:94:4b:38:7a:7d:ed:ed: ac:a4:02:3e:97:cc:38:66:a0:d9:05:8c:85:f9:be:be:6c:71: 38:cb:3b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEudf5LKHXFl4nOczbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMzA4MjYzOVoXDTI2MDEyMTA5MjYzOVowLzEtMCsGA1UEAxMk N2U3MDM1NzYtOGJkYS00Y2JjLThmNmItODgzYzBmNGFiNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mk/5MLMEiKpFrVOL75PhcxAwvPOnLX6QTZK EMtLpr+TPvPAJkzptfh4vm0RRxksX1vnCSgkxIYUyiWxzFAVVYkhsqgBFfO2YKaM wLeM/8nf3Cx5TSrEWqdBsXWTLADLdvgWdmX5thOMR1K6FwODaZM+hwSlT96jwdxp NPRIRIBCXHktUjz2RPOralMQYsLuXmXoGL07ZUdR8ZQpb9TxXy9HB1tUT9HQoQHY MrWhyfreMu+4w2Im7c57vuLqRYRyVHReLjUn7chvhyAyEFI+MJiroGHCOqB3OOAA lFPFuO+W2Rv8Kx8R7IDRn7IWrKJ0PzyM5iS6wMgdrH6RVAKWqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+Y1yIR+0cNviQ6BKe0W+ajBaQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmNhMmZkMzctN2E0OC0z YTRjLWJlMjgtMDdlN2ZhNjkzZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGq4xjGUOIKgXjrNWc8O8q55C2CrIlStTehryJFZy3ZMMJo3FxT6cP9 V0hfEWQF/jYOzydVS+42kt3lCqBE790hrNQeh3OI2OjIr57w5ljHiEBG2aBjTXLI RVwxTPhxEgpx5o/hpulsScyIof/PI85OU5Q5ac6Fmu+gWdTrELBG3eVKE4MsIJoP QEXVRX4j1rfr8+0Yh21RwdVzIOJExRFtXozN18ocAHk2s6ydY1IQVjsMqhHvW6YP vj+a+ukbLahQDOB+ioq4RRZiztITLD0fXv/q80DJCFa6sUhoL8ajoX9LlEs4en3t 7aykAj6XzDhmoNkFjIX5vr5scTjLOyM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:11 2025 by rpki-client