$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/81bab5e8-bcd5-3a24-b589-4b49a5376002.roa File: 81bab5e8-bcd5-3a24-b589-4b49a5376002.roa (raw, json) Hash identifier: 6/z+g+JowDGxKi8YkM/MUUfu/9Pwzj8a5PrTTk8UE84= Subject key identifier: FD:2C:97:D5:67:61:C1:4C:88:48:3F:59:D3:C2:CF:9C:47:55:1A:0B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA3E96717915E3ABB8444ADC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/81bab5e8-bcd5-3a24-b589-4b49a5376002.roa Signing time: Sat 25 Oct 2025 15:34:44 +0000 ROA not before: Sat 25 Oct 2025 15:34:44 +0000 ROA not after: Fri 23 Jan 2026 16:34:44 +0000 asID: 9304 IP address blocks: 64.204.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:e9:67:17:91:5e:3a:bb:84:44:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 25 15:34:44 2025 GMT Not After : Jan 23 16:34:44 2026 GMT Subject: CN=0214c8a4-56f9-4220-9c9b-770f4c79f9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:ca:d9:c5:3f:8b:de:c1:86:3b:01:6e:d0: 35:a4:be:0c:72:69:09:16:65:96:a5:00:e8:f3:3b: 69:bb:51:b6:40:e4:27:66:a7:08:9a:89:b2:52:96: 80:8e:3f:82:ba:42:0e:8d:42:d3:e6:79:6d:82:b5: c0:24:4a:89:47:1f:3c:86:1e:de:09:64:47:9e:dd: 72:70:b8:bc:ce:1c:b7:39:f9:37:a3:01:f8:af:af: 10:c1:cd:2e:ff:2f:df:99:80:3a:9c:8e:99:5f:a7: 39:de:dd:24:a5:5b:7d:ea:54:3e:e1:96:e9:e2:fb: 68:85:33:96:27:11:93:5f:9e:6e:31:6f:eb:80:b3: 98:c8:a7:d8:2d:9d:d4:f6:f5:27:fe:80:2e:0d:09: d2:15:48:5c:97:c5:69:c6:9d:d2:8e:bf:4a:c6:06: 12:7e:ad:a9:67:cb:20:1c:4c:b0:0c:27:43:e0:e0: d2:37:d5:84:a6:18:ac:af:4a:19:08:38:95:02:ee: 00:9f:c9:dc:e2:c2:07:b2:56:43:65:b9:e0:04:52: 22:00:46:5f:bc:d8:4d:4a:f0:82:10:ab:fd:34:9f: f8:03:d4:2a:0f:b1:72:d9:1b:24:27:6b:f5:2b:a9: 31:97:01:92:4d:e1:f9:b0:c2:1c:59:98:88:7a:5c: 80:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:97:D5:67:61:C1:4C:88:48:3F:59:D3:C2:CF:9C:47:55:1A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/81bab5e8-bcd5-3a24-b589-4b49a5376002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:23:a8:af:83:dc:b2:4d:bd:a2:21:5d:2f:a1:d7:38:0d:9a: d9:81:7c:1c:28:df:a9:55:c1:00:06:84:d8:94:20:95:76:52: 18:6f:b4:b1:13:5f:0d:64:4b:ba:b5:73:bb:7b:9e:3e:07:31: 87:53:e9:74:e1:57:ab:db:4c:1e:c4:0d:9d:ca:95:a6:b7:b8: d7:e2:d5:1a:78:a2:7f:67:1d:d5:f6:69:16:f4:43:81:4f:27: 43:9f:57:7a:f1:5b:2a:4e:09:8b:c6:83:b5:f5:6b:81:0d:dc: 5c:bf:85:aa:e1:61:14:52:4c:bb:92:f1:35:4a:7a:53:b2:69: bb:47:a8:f6:7e:05:3a:11:d5:0e:94:04:ab:07:0a:e8:1a:9d: 6d:e8:37:2f:96:98:d5:62:c6:ab:17:71:bf:0a:0f:30:3a:32: 7a:d1:1f:c5:87:51:f2:4e:7d:a9:36:9b:55:4a:d8:7d:9b:e5: 5b:ae:05:ea:34:81:e1:be:ad:8f:e8:f6:5e:a4:90:f2:0b:d1: 4b:ed:be:f9:85:d1:34:3a:e9:af:6a:cd:f9:59:db:a7:3e:03: 83:7f:d5:d1:88:b5:e7:6d:db:59:ee:94:91:1a:fa:2b:c7:45: 15:2a:4d:ed:55:a0:10:60:76:2e:8c:0f:67:5e:b0:4d:1f:b1: e1:63:e7:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuj6WcXkV46u4RErcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNTE1MzQ0NFoXDTI2MDEyMzE2MzQ0NFowLzEtMCsGA1UEAxMk MDIxNGM4YTQtNTZmOS00MjIwLTljOWItNzcwZjRjNzlmOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOrK2cU/i97BhjsBbtA1pL4McmkJFmWWpQDo 8ztpu1G2QOQnZqcImomyUpaAjj+CukIOjULT5nltgrXAJEqJRx88hh7eCWRHnt1y cLi8zhy3Ofk3owH4r68Qwc0u/y/fmYA6nI6ZX6c53t0kpVt96lQ+4Zbp4vtohTOW JxGTX55uMW/rgLOYyKfYLZ3U9vUn/oAuDQnSFUhcl8Vpxp3Sjr9KxgYSfq2pZ8sg HEywDCdD4ODSN9WEphisr0oZCDiVAu4An8nc4sIHslZDZbngBFIiAEZfvNhNSvCC EKv9NJ/4A9QqD7Fy2RskJ2v1K6kxlwGSTeH5sMIcWZiIelyAGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0sl9VnYcFMiEg/WdPCz5xHVRoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODFiYWI1ZTgtYmNkNS0z YTI0LWI1ODktNGI0OWE1Mzc2MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcjqK+D3LJNvaIhXS+h1zgNmtmBfBwo36lVwQAGhNiUIJV2UhhvtLET Xw1kS7q1c7t7nj4HMYdT6XThV6vbTB7EDZ3Klaa3uNfi1Rp4on9nHdX2aRb0Q4FP J0OfV3rxWypOCYvGg7X1a4EN3Fy/harhYRRSTLuS8TVKelOyabtHqPZ+BToR1Q6U BKsHCuganW3oNy+WmNVixqsXcb8KDzA6MnrRH8WHUfJOfak2m1VK2H2b5VuuBeo0 geG+rY/o9l6kkPIL0UvtvvmF0TQ66a9qzflZ26c+A4N/1dGItedt21nulJEa+ivH RRUqTe1VoBBgdi6MD2desE0fseFj53E= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:21 2025 by rpki-client