$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/864f679d-7b98-37a7-bcc3-1c089cfd1e48.roa File: 864f679d-7b98-37a7-bcc3-1c089cfd1e48.roa (raw, json) Hash identifier: ef2PaJ9C/UseirRqFGoQ5RRNd81wf/qw0nb6gnsvUjA= Subject key identifier: E6:47:FF:01:46:48:E4:16:61:EB:5D:FE:07:9B:19:FB:65:D3:F6:74 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B88AC978A4C9BA3D2B670B380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/864f679d-7b98-37a7-bcc3-1c089cfd1e48.roa Signing time: Wed 15 Oct 2025 21:25:23 +0000 ROA not before: Wed 15 Oct 2025 21:25:23 +0000 ROA not after: Tue 13 Jan 2026 22:25:23 +0000 asID: 9304 IP address blocks: 64.93.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:ac:97:8a:4c:9b:a3:d2:b6:70:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 21:25:23 2025 GMT Not After : Jan 13 22:25:23 2026 GMT Subject: CN=571b7189-7d08-4e93-89f1-5668b1ec06b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:09:f6:fb:06:6a:ae:ed:93:8c:f0:03:f8: bc:44:a9:df:e4:34:f6:b6:8a:9b:79:f5:3c:60:ed: 57:92:63:67:ff:30:84:45:5b:eb:85:37:d5:78:55: d8:42:51:a4:3c:05:e4:85:02:1e:ba:98:66:9a:55: 7d:72:62:c8:3a:fc:61:f5:c3:e0:62:c6:f6:2c:9b: 10:c2:33:4a:53:09:19:9a:b8:94:72:44:aa:46:e5: b3:ea:a5:79:14:1b:d8:bf:1a:55:03:68:23:3f:1d: 23:31:fc:84:70:9f:47:ab:6c:44:0b:4b:01:ae:32: 42:13:2f:4b:54:02:05:fb:c5:02:2b:c0:59:db:7a: d0:24:b1:e3:25:11:8e:95:c8:83:a3:25:9a:ad:9d: 21:e3:cd:c8:64:da:c7:47:bf:32:29:86:d5:69:b2: 0f:3b:a8:c6:af:5e:18:28:33:7b:6e:cc:4d:c5:ab: a2:ac:e3:48:de:02:c8:15:88:a2:d0:26:f9:85:ab: 8d:41:69:47:12:1a:18:f5:3c:e7:1f:ca:ab:07:ac: a0:a7:5e:54:4c:a2:f6:f1:8f:d5:a7:3e:95:c3:fd: 0b:ec:f4:fb:f3:c8:09:ee:05:9d:56:91:44:76:43: 1c:1d:b6:25:40:67:99:12:94:25:c8:29:4b:0c:f4: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:FF:01:46:48:E4:16:61:EB:5D:FE:07:9B:19:FB:65:D3:F6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/864f679d-7b98-37a7-bcc3-1c089cfd1e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.93.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:01:47:0f:ec:d7:5e:a9:78:ff:9e:90:db:bd:fa:07:59:8a: f7:c4:cd:c9:6b:3a:5a:26:6e:63:03:4e:79:44:53:0e:f3:5c: c9:56:45:bb:0b:b0:b3:b9:71:58:d4:22:74:7f:d8:d1:31:98: 39:ca:74:b2:b9:51:d0:ad:03:d8:d5:97:20:49:37:a7:44:4b: 4f:b2:02:7f:ff:05:77:37:2b:51:42:4c:c5:53:f9:25:88:0b: 78:69:5e:fe:ea:b9:bd:36:72:c6:ec:aa:af:97:52:78:1a:04: 38:32:30:e2:d9:aa:18:c7:4a:2d:70:07:4c:dc:38:04:d6:06: 66:fa:60:2a:af:0a:14:20:1d:3c:62:98:3f:c8:19:fe:06:d7: 43:ae:fb:8d:a7:7f:ae:99:eb:a5:4c:6e:0e:a6:55:25:67:d9: 1b:e6:f4:20:86:ce:61:c7:1e:dc:f5:85:35:68:2a:17:15:74: a0:f0:b6:a8:da:f8:36:35:4e:ec:2f:f6:6c:f5:78:e5:15:6d: 0a:9d:d8:59:54:94:34:89:9f:c0:55:0a:87:97:8c:eb:50:44: 72:67:30:f0:86:bd:37:18:66:92:32:a2:62:65:ac:af:7f:4a: e8:17:d7:0a:4c:50:03:d1:9a:d2:ec:1d:51:f3:9a:51:80:b3: 29:09:00:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIrJeKTJuj0rZws4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTIxMjUyM1oXDTI2MDExMzIyMjUyM1owLzEtMCsGA1UEAxMk NTcxYjcxODktN2QwOC00ZTkzLTg5ZjEtNTY2OGIxZWMwNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFEJ9vsGaq7tk4zwA/i8RKnf5DT2toqbefU8 YO1XkmNn/zCERVvrhTfVeFXYQlGkPAXkhQIeuphmmlV9cmLIOvxh9cPgYsb2LJsQ wjNKUwkZmriUckSqRuWz6qV5FBvYvxpVA2gjPx0jMfyEcJ9Hq2xEC0sBrjJCEy9L VAIF+8UCK8BZ23rQJLHjJRGOlciDoyWarZ0h483IZNrHR78yKYbVabIPO6jGr14Y KDN7bsxNxauirONI3gLIFYii0Cb5hauNQWlHEhoY9TznH8qrB6ygp15UTKL28Y/V pz6Vw/0L7PT788gJ7gWdVpFEdkMcHbYlQGeZEpQlyClLDPSkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZH/wFGSOQWYetd/gebGftl0/Z0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODY0ZjY3OWQtN2I5OC0z N2E3LWJjYzMtMWMwODljZmQxZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMBRw/s116peP+ekNu9+gdZivfEzclrOlombmMDTnlEUw7zXMlWRbsL sLO5cVjUInR/2NExmDnKdLK5UdCtA9jVlyBJN6dES0+yAn//BXc3K1FCTMVT+SWI C3hpXv7qub02csbsqq+XUngaBDgyMOLZqhjHSi1wB0zcOATWBmb6YCqvChQgHTxi mD/IGf4G10Ou+42nf66Z66VMbg6mVSVn2Rvm9CCGzmHHHtz1hTVoKhcVdKDwtqja +DY1Tuwv9mz1eOUVbQqd2FlUlDSJn8BVCoeXjOtQRHJnMPCGvTcYZpIyomJlrK9/ SugX1wpMUAPRmtLsHVHzmlGAsykJAOw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:54 2025 by rpki-client