$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f12e832-51fa-38da-a68c-924c45c9f5c3.roa File: 5f12e832-51fa-38da-a68c-924c45c9f5c3.roa (raw, json) Hash identifier: tch988EMBmoQePaNFVOsUpgWkW4LJ6h/f6ltFimf6xA= Subject key identifier: A1:94:3B:B2:11:1E:AE:99:15:CD:5B:B6:B6:8B:82:77:B9:5B:90:24 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9D7F9B57A7C014A3B1BC4AF0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f12e832-51fa-38da-a68c-924c45c9f5c3.roa Signing time: Thu 23 Oct 2025 08:26:43 +0000 ROA not before: Thu 23 Oct 2025 08:26:43 +0000 ROA not after: Wed 21 Jan 2026 09:26:43 +0000 asID: 174 IP address blocks: 64.204.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9d:7f:9b:57:a7:c0:14:a3:b1:bc:4a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 08:26:43 2025 GMT Not After : Jan 21 09:26:43 2026 GMT Subject: CN=f21045e4-1c63-47e8-bec6-42563207ab59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:d3:95:a9:07:03:f3:e6:b4:6c:f1:28:3e: 24:51:af:65:2d:a7:13:e8:f0:3a:83:8f:d1:f4:c4: cd:4b:69:12:8b:5c:2f:f3:a2:3c:16:1f:88:e1:2e: f5:28:8b:51:7d:c0:45:ea:b8:05:d3:bd:e9:26:fa: 75:28:24:8d:ff:1b:c6:0a:4f:74:1c:e5:07:c3:b0: 71:b9:42:e5:0a:6f:10:d8:7b:e9:1c:89:46:7d:48: a4:e6:cd:ae:d0:d9:ef:30:46:0e:45:07:28:fa:17: e6:df:02:ea:2b:73:cd:7c:4b:88:48:a2:77:a2:92: ae:3e:51:4d:76:cf:81:70:be:9e:d5:e6:f3:98:48: 05:bf:d9:a9:95:82:fe:18:23:7b:d6:f6:2a:4b:db: ef:50:e1:47:93:92:73:cc:ce:4f:36:54:33:55:de: 76:6b:66:aa:88:ac:1e:1f:d0:29:78:5b:e6:6e:81: bb:cc:ec:cb:60:52:6e:9a:30:53:7c:eb:4d:f7:2b: 32:d4:d9:1c:06:67:03:38:f2:d9:a2:40:24:be:a9: 1e:95:0a:50:1c:89:d4:b1:80:87:94:27:48:4f:ec: 43:bb:5b:19:b1:90:2d:2d:59:e9:9a:04:72:1e:d7: 21:b9:2b:32:70:12:b5:fe:18:5d:2a:db:aa:36:1b: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:3B:B2:11:1E:AE:99:15:CD:5B:B6:B6:8B:82:77:B9:5B:90:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f12e832-51fa-38da-a68c-924c45c9f5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:2f:aa:1e:e6:60:2d:22:10:26:01:bd:eb:90:66:79:42:07: 3e:68:e8:14:6b:2f:d1:8b:61:58:7e:52:f0:35:08:41:f2:63: ff:1d:6e:e5:bd:36:db:61:f6:11:5a:d2:04:6f:8d:bf:9a:46: 88:81:b8:fe:7c:3c:b9:bd:7d:ff:08:50:ec:75:1f:b5:b6:04: cc:86:11:ee:32:8c:c6:11:4e:69:65:87:a8:9d:7b:65:4b:02: e2:ca:e0:11:72:1c:db:0a:c8:bd:ae:75:b9:f7:2c:4c:e2:07: 9e:4b:c4:49:09:84:65:75:8a:3f:d2:34:e3:b0:64:61:f4:bd: 25:2f:c5:ae:37:9b:1d:bb:4c:98:7d:70:1b:e8:7e:c8:29:85: a1:c2:b0:84:1e:af:27:cb:8e:a6:58:6b:b3:9a:bb:a8:5d:7f: d4:fd:3d:ad:fc:40:cf:cd:44:51:8e:7a:00:6b:b2:fa:9e:6f: 41:17:57:6c:82:45:6a:c0:58:59:8d:9f:a9:6d:da:eb:d6:4d: c9:a6:7a:e4:be:dd:a6:3d:d1:6f:10:f0:73:e6:dd:58:84:44: ca:88:47:17:f3:ae:c8:67:2a:81:73:16:6d:3b:e4:30:1c:3e: 82:d8:f1:7a:bc:36:74:89:9b:12:90:69:dc:ca:18:08:19:12: 4b:f5:d9:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEudf5tXp8AUo7G8SvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMzA4MjY0M1oXDTI2MDEyMTA5MjY0M1owLzEtMCsGA1UEAxMk ZjIxMDQ1ZTQtMWM2My00N2U4LWJlYzYtNDI1NjMyMDdhYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7TTlakHA/PmtGzxKD4kUa9lLacT6PA6g4/R 9MTNS2kSi1wv86I8Fh+I4S71KItRfcBF6rgF073pJvp1KCSN/xvGCk90HOUHw7Bx uULlCm8Q2HvpHIlGfUik5s2u0NnvMEYORQco+hfm3wLqK3PNfEuISKJ3opKuPlFN ds+BcL6e1ebzmEgFv9mplYL+GCN71vYqS9vvUOFHk5JzzM5PNlQzVd52a2aqiKwe H9ApeFvmboG7zOzLYFJumjBTfOtN9ysy1NkcBmcDOPLZokAkvqkelQpQHInUsYCH lCdIT+xDu1sZsZAtLVnpmgRyHtchuSsycBK1/hhdKtuqNhvJWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGUO7IRHq6ZFc1btraLgne5W5AkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWYxMmU4MzItNTFmYS0z OGRhLWE2OGMtOTI0YzQ1YzlmNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8vqh7mYC0iECYBveuQZnlCBz5o6BRrL9GLYVh+UvA1CEHyY/8dbuW9 Ntth9hFa0gRvjb+aRoiBuP58PLm9ff8IUOx1H7W2BMyGEe4yjMYRTmllh6ide2VL AuLK4BFyHNsKyL2udbn3LEziB55LxEkJhGV1ij/SNOOwZGH0vSUvxa43mx27TJh9 cBvofsgphaHCsIQeryfLjqZYa7Oau6hdf9T9Pa38QM/NRFGOegBrsvqeb0EXV2yC RWrAWFmNn6lt2uvWTcmmeuS+3aY90W8Q8HPm3ViERMqIRxfzrshnKoFzFm075DAc PoLY8Xq8NnSJmxKQadzKGAgZEkv12d8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:17 2025 by rpki-client