$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5849aa9c-adc0-3ea6-9656-c6f5bb37a3d6.roa File: 5849aa9c-adc0-3ea6-9656-c6f5bb37a3d6.roa (raw, json) Hash identifier: SOlaD20YaR4sp9fG0eE2x27G7e9njDTPyC48fOP2V/I= Subject key identifier: EC:18:DC:28:64:44:94:A1:0B:EB:7B:66:D7:C7:AC:4A:F7:F3:E0:82 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9ABDB5896919825D178D7A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5849aa9c-adc0-3ea6-9656-c6f5bb37a3d6.roa Signing time: Wed 22 Oct 2025 08:44:26 +0000 ROA not before: Wed 22 Oct 2025 08:44:26 +0000 ROA not after: Tue 20 Jan 2026 09:44:26 +0000 asID: 137830 IP address blocks: 64.7.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9a:bd:b5:89:69:19:82:5d:17:8d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 22 08:44:26 2025 GMT Not After : Jan 20 09:44:26 2026 GMT Subject: CN=9536220a-04b9-4d2f-8c67-c5bd98813979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:59:96:82:63:0e:de:07:6b:9b:5d:43:bc: 36:e4:fa:6e:21:48:a9:d3:b2:7c:e6:b9:de:1e:d6: 3e:ec:ce:59:f6:e9:db:f1:82:c8:09:c0:7b:31:16: f1:43:f8:65:50:1a:4f:13:f1:13:e1:50:0c:e0:55: 23:ac:26:46:be:70:56:0d:b9:da:e3:aa:aa:5e:df: d3:b7:19:7c:12:c2:17:bd:c0:a3:d0:a3:50:7d:ac: 8e:1f:02:dc:8e:34:c6:d0:1c:64:40:a0:fd:9e:85: 0b:b6:85:ef:d6:dd:c7:ef:f4:d1:52:37:86:23:3d: 35:37:20:e9:f3:39:38:3e:00:b6:a2:3c:8c:be:f8: 0a:a4:00:d0:a6:8e:0a:6e:82:10:37:5b:cd:4b:6b: 24:7c:73:c9:d3:c9:d4:2b:64:24:7a:42:56:95:a9: ee:4f:b1:34:1e:28:0e:5c:d7:9e:cf:1b:85:db:62: 9e:76:48:f6:10:c3:a9:46:b5:ea:d1:bf:85:32:10: fb:96:b1:8c:f9:23:7f:ba:68:13:db:ef:34:d0:8c: a5:eb:e4:c8:32:07:7d:3f:7d:f2:4a:23:03:6a:ee: 95:40:65:b4:e1:f8:7a:7c:ce:d7:0a:81:a2:97:6e: 36:50:a3:04:7b:33:1d:a6:08:cd:81:73:70:6e:46: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:18:DC:28:64:44:94:A1:0B:EB:7B:66:D7:C7:AC:4A:F7:F3:E0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5849aa9c-adc0-3ea6-9656-c6f5bb37a3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ab:20:b6:ab:5a:e1:de:20:16:c8:a4:53:d2:4c:70:cc:ad: 91:6d:f1:13:ba:97:bd:92:ba:de:06:3a:70:02:5c:a1:c3:28: fd:44:3f:76:52:3e:72:8c:81:08:80:f1:3b:6d:00:f2:75:ae: 58:d5:b6:94:1e:4a:0f:95:5a:7a:3c:2b:33:c5:1b:0e:47:be: 59:29:0c:f3:21:f8:ac:df:d9:db:48:2a:39:75:60:ec:ed:b2: 12:3b:13:e1:53:17:13:b6:0e:5d:5b:19:39:36:b6:5c:05:76: 51:83:de:ad:b8:70:2b:55:0e:56:a8:c1:2d:66:90:cf:be:04: 5e:09:76:df:92:36:aa:c2:38:f3:0d:21:40:82:3e:b9:af:6b: 05:bb:45:69:94:a5:63:f1:08:71:e3:19:52:03:e8:da:b4:f2: 8d:7d:7c:3d:e4:41:95:a4:ed:8b:f9:14:40:55:5b:07:35:da: 0c:54:ef:8f:78:fd:a4:bd:f3:5b:a5:dc:52:9e:d7:38:d1:22: e6:f6:05:25:0b:82:5c:be:5b:b1:fb:e2:85:24:2f:38:6b:ea: 96:c4:35:86:ac:c5:70:83:ad:e6:b4:65:be:22:4e:85:1b:94: fc:9b:a4:9a:da:d6:e7:92:90:cd:81:4e:b0:e9:40:e1:83:01: 41:a3:9c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuavbWJaRmCXReNegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMjA4NDQyNloXDTI2MDEyMDA5NDQyNlowLzEtMCsGA1UEAxMk OTUzNjIyMGEtMDRiOS00ZDJmLThjNjctYzViZDk4ODEzOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6NZloJjDt4Ha5tdQ7w25PpuIUip07J85rne HtY+7M5Z9unb8YLICcB7MRbxQ/hlUBpPE/ET4VAM4FUjrCZGvnBWDbna46qqXt/T txl8EsIXvcCj0KNQfayOHwLcjjTG0BxkQKD9noULtoXv1t3H7/TRUjeGIz01NyDp 8zk4PgC2ojyMvvgKpADQpo4KboIQN1vNS2skfHPJ08nUK2QkekJWlanuT7E0HigO XNeezxuF22Kedkj2EMOpRrXq0b+FMhD7lrGM+SN/umgT2+800Iyl6+TIMgd9P33y SiMDau6VQGW04fh6fM7XCoGil242UKMEezMdpgjNgXNwbkZrAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwY3ChkRJShC+t7ZtfHrEr38+CCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTg0OWFhOWMtYWRjMC0z ZWE2LTk2NTYtYzZmNWJiMzdhM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyrILarWuHeIBbIpFPSTHDMrZFt8RO6l72Sut4GOnACXKHDKP1EP3ZS PnKMgQiA8TttAPJ1rljVtpQeSg+VWno8KzPFGw5HvlkpDPMh+Kzf2dtIKjl1YOzt shI7E+FTFxO2Dl1bGTk2tlwFdlGD3q24cCtVDlaowS1mkM++BF4Jdt+SNqrCOPMN IUCCPrmvawW7RWmUpWPxCHHjGVID6Nq08o19fD3kQZWk7Yv5FEBVWwc12gxU7494 /aS981ul3FKe1zjRIub2BSULgly+W7H74oUkLzhr6pbENYasxXCDrea0Zb4iToUb lPybpJra1ueSkM2BTrDpQOGDAUGjnDM= -----END CERTIFICATE-----Generated at Wed Nov 5 15:31:07 2025 by rpki-client