$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/72dd77e1-fac5-3529-82ce-aa1a64be578f.roa File: 72dd77e1-fac5-3529-82ce-aa1a64be578f.roa (raw, json) Hash identifier: za3l2bQTB1yxr9HYwAr9Jxy1SZNk2oKyi7GS2RfHoaU= Subject key identifier: B9:D6:59:E9:48:B2:B7:0B:62:02:48:68:55:3C:21:13:CA:18:0A:53 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BB289B7DE0F8A92D28BC68090 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/72dd77e1-fac5-3529-82ce-aa1a64be578f.roa Signing time: Thu 30 Oct 2025 21:19:04 +0000 ROA not before: Thu 30 Oct 2025 21:19:04 +0000 ROA not after: Wed 28 Jan 2026 22:19:04 +0000 asID: 215607 IP address blocks: 64.204.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:89:b7:de:0f:8a:92:d2:8b:c6:80:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 30 21:19:04 2025 GMT Not After : Jan 28 22:19:04 2026 GMT Subject: CN=21277937-a6ca-4056-a3a3-a62a4ce9fcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:86:b3:a7:15:f1:bd:5f:6d:ed:fe:68:e7: 05:51:d1:fd:48:ba:a2:df:b1:79:3d:42:be:c5:04: fa:82:90:c6:51:d2:2a:44:34:58:25:07:d6:33:d2: a4:fd:24:61:02:68:6c:f0:24:89:9d:98:f4:f5:33: 00:f5:2e:a2:1e:8c:cf:dc:75:42:6d:9e:0f:04:08: 0a:db:01:fa:54:ee:b6:64:ff:bf:42:e2:36:cc:56: 53:fe:f3:9f:5d:04:18:28:ac:57:c4:d4:87:40:6f: 23:67:44:ae:5d:0a:00:3d:d6:25:e6:65:0e:13:55: 14:0a:d0:e3:0d:ae:a2:f1:0d:a9:e0:bf:e1:7d:f2: df:7b:ed:15:2a:cc:d1:cd:c4:6e:1c:7a:51:e8:6b: 11:25:31:c2:d8:72:16:da:58:59:c3:59:b8:87:cd: 5b:88:db:b7:31:db:67:75:ec:8d:0c:50:be:f4:e7: 1a:bc:bd:7d:c6:11:e4:82:e4:73:c2:c6:49:a0:0d: 72:36:d6:8b:20:4b:0e:b0:99:b9:c6:94:f9:8d:bd: 6f:32:f7:fe:bd:4c:4a:86:dd:d5:92:34:77:6e:8e: d3:58:31:7e:dc:69:e4:f1:07:ea:d1:6d:c2:a3:4e: c0:8a:53:fc:cb:42:33:fb:dd:c3:4f:a5:1a:80:a0: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D6:59:E9:48:B2:B7:0B:62:02:48:68:55:3C:21:13:CA:18:0A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/72dd77e1-fac5-3529-82ce-aa1a64be578f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5d:e9:76:ed:bb:d4:0d:9e:81:d6:f6:74:aa:2d:92:ca:5e: 7f:7c:3f:1a:59:df:3b:f8:ee:36:3c:ab:83:04:01:7c:dc:59: af:b7:d2:4c:14:be:de:db:21:3a:96:d5:1c:f2:e7:cb:b9:4b: 0e:d7:7a:99:24:b9:12:c7:42:22:c9:61:52:5c:cb:42:38:4c: af:56:45:ea:db:4d:b1:51:94:fc:d4:29:d6:6f:e5:78:15:bd: c0:df:e1:03:7b:99:0f:23:12:61:e9:04:17:ff:8a:42:03:2c: ee:e6:5a:35:60:65:f2:5c:b0:c5:c5:1c:2b:dc:8e:63:7e:d2: 38:db:ab:d7:5a:b0:2e:f4:7e:71:69:02:2f:a8:44:40:59:c3: c4:be:cb:3a:1a:bd:8c:8f:f7:83:1a:74:ad:da:ee:80:f2:77: 95:bb:ef:ff:c4:cd:e3:71:99:ae:04:68:49:7e:db:32:ef:10: 1d:84:39:f4:b5:9d:92:47:b2:49:00:02:9c:47:d1:64:18:8d: 24:34:bc:0d:ee:84:2f:19:b9:c5:e5:73:73:27:69:62:9d:b5: 1d:24:bc:ed:86:9d:ac:bb:a1:1b:36:e1:c7:9c:0c:77:d4:af: ae:ec:22:7c:72:2f:2c:fd:ff:9f:94:3a:61:33:13:b2:e5:c2: 16:42:70:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuyibfeD4qS0ovGgJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAzMDIxMTkwNFoXDTI2MDEyODIyMTkwNFowLzEtMCsGA1UEAxMk MjEyNzc5MzctYTZjYS00MDU2LWEzYTMtYTYyYTRjZTlmY2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7WGs6cV8b1fbe3+aOcFUdH9SLqi37F5PUK+ xQT6gpDGUdIqRDRYJQfWM9Kk/SRhAmhs8CSJnZj09TMA9S6iHozP3HVCbZ4PBAgK 2wH6VO62ZP+/QuI2zFZT/vOfXQQYKKxXxNSHQG8jZ0SuXQoAPdYl5mUOE1UUCtDj Da6i8Q2p4L/hffLfe+0VKszRzcRuHHpR6GsRJTHC2HIW2lhZw1m4h81biNu3Mdtn deyNDFC+9OcavL19xhHkguRzwsZJoA1yNtaLIEsOsJm5xpT5jb1vMvf+vUxKht3V kjR3bo7TWDF+3Gnk8Qfq0W3Co07AilP8y0Iz+93DT6UagKDtJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnWWelIsrcLYgJIaFU8IRPKGApTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzJkZDc3ZTEtZmFjNS0z NTI5LTgyY2UtYWExYTY0YmU1NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxd6Xbtu9QNnoHW9nSqLZLKXn98PxpZ3zv47jY8q4MEAXzcWa+30kwU vt7bITqW1Rzy58u5Sw7XepkkuRLHQiLJYVJcy0I4TK9WRerbTbFRlPzUKdZv5XgV vcDf4QN7mQ8jEmHpBBf/ikIDLO7mWjVgZfJcsMXFHCvcjmN+0jjbq9dasC70fnFp Ai+oREBZw8S+yzoavYyP94MadK3a7oDyd5W77//EzeNxma4EaEl+2zLvEB2EOfS1 nZJHskkAApxH0WQYjSQ0vA3uhC8ZucXlc3MnaWKdtR0kvO2Gnay7oRs24cecDHfU r67sInxyLyz9/5+UOmEzE7LlwhZCcMM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:00:57 2025 by rpki-client