$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd4d287f-8eca-32f1-b879-6079cb2e7aa5.roa File: dd4d287f-8eca-32f1-b879-6079cb2e7aa5.roa (raw, json) Hash identifier: 82D4lFDAUZ406ctNEkdsjKw6cl6XmWQXWgxa9j0Z6Js= Subject key identifier: 1E:1E:A9:48:B5:C0:84:84:FD:7C:20:4E:29:A5:CC:88:7C:92:BD:59 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9ABDAEA9BFBA7A07F2C17580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd4d287f-8eca-32f1-b879-6079cb2e7aa5.roa Signing time: Wed 22 Oct 2025 08:44:22 +0000 ROA not before: Wed 22 Oct 2025 08:44:22 +0000 ROA not after: Tue 20 Jan 2026 09:44:22 +0000 asID: 137830 IP address blocks: 64.7.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9a:bd:ae:a9:bf:ba:7a:07:f2:c1:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 22 08:44:22 2025 GMT Not After : Jan 20 09:44:22 2026 GMT Subject: CN=2981c83d-6b8d-46a6-a4b5-37f9f998529c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:31:ee:44:e4:58:c8:89:13:e7:37:53:22:a9: f1:f4:45:a3:5d:21:25:66:0c:61:6a:5f:71:00:20: 04:5d:02:60:8a:f6:2f:c2:f4:e8:c2:59:b1:f1:e7: ef:4c:dd:39:f6:27:7d:82:76:e4:b9:b0:18:ab:3f: 8b:6e:75:30:e2:66:15:41:a1:2d:18:0d:0a:05:f2: e0:45:fe:2d:da:4e:0c:42:95:2e:80:02:1c:84:7e: 66:28:80:0a:1c:4d:70:fb:dd:4f:24:d1:ce:e7:4b: e1:79:7a:90:3b:c5:8e:f2:5e:d0:17:b4:09:e1:7d: a2:0f:c4:bd:e8:0d:ed:9d:d1:93:d8:0d:68:dd:17: 75:90:4d:99:4f:8a:e4:8d:91:22:32:47:1c:49:57: 85:9b:64:cc:c4:d2:4f:66:06:0a:a0:6a:72:83:06: 3d:28:59:93:a3:96:39:72:55:fc:45:52:fc:b7:8a: 51:f8:e2:4f:2b:2b:26:c6:0a:79:27:ec:22:aa:3b: cd:6f:b8:68:ab:5a:aa:91:e0:02:d1:00:2f:ad:01: 4c:21:43:4d:53:6a:91:9c:e7:1d:00:ea:a1:e2:6e: b6:7c:93:26:28:4d:b8:19:2e:1c:44:ad:2c:2c:c4: 97:d7:03:f4:71:70:b0:39:03:11:0b:bb:3d:ab:25: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1E:A9:48:B5:C0:84:84:FD:7C:20:4E:29:A5:CC:88:7C:92:BD:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd4d287f-8eca-32f1-b879-6079cb2e7aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:83:16:9a:cb:66:0f:cc:ac:40:14:69:d5:3f:0c:5f:1b:ac: c8:bf:dc:87:b8:13:5b:e9:6e:46:ee:a2:6c:16:f3:f9:cf:46: dd:12:53:7e:e9:a4:be:22:4c:58:8c:12:60:00:25:d3:26:de: 31:cf:be:07:c7:36:cd:b9:87:26:30:8e:47:38:ac:18:88:d6: 85:3a:da:eb:1b:30:dc:5e:95:09:f6:11:8c:16:ce:6b:72:30: 83:36:d5:75:89:59:ec:50:ea:26:66:ab:41:56:75:60:ba:1a: c9:d6:9a:4f:32:df:03:e5:f2:bf:72:b5:39:d6:25:14:36:8a: d3:9d:2b:c4:1a:d2:81:b8:f0:4b:1d:45:69:e2:f5:06:f9:b4: d4:5b:7b:0d:54:33:36:14:1d:20:f7:81:c6:e3:5f:6e:49:49: 76:c9:15:99:c3:58:e2:ae:63:f8:91:5b:3b:d0:e8:ed:75:e7: 52:ca:88:61:ed:9f:71:01:84:83:a8:7a:6d:04:18:6b:1f:4e: 54:8d:fa:14:e7:bd:5c:90:fc:5a:01:c3:d6:a5:7e:32:eb:47: 4d:02:43:61:71:7b:89:27:db:21:6b:9a:1a:a4:9f:35:3a:59: d3:c0:5e:ac:97:ca:79:fc:d6:b1:7d:8e:e9:f2:64:b6:e7:f4: b5:19:8c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuava6pv7p6B/LBdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMjA4NDQyMloXDTI2MDEyMDA5NDQyMlowLzEtMCsGA1UEAxMk Mjk4MWM4M2QtNmI4ZC00NmE2LWE0YjUtMzdmOWY5OTg1MjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zHuRORYyIkT5zdTIqnx9EWjXSElZgxhal9x ACAEXQJgivYvwvTowlmx8efvTN059id9gnbkubAYqz+LbnUw4mYVQaEtGA0KBfLg Rf4t2k4MQpUugAIchH5mKIAKHE1w+91PJNHO50vheXqQO8WO8l7QF7QJ4X2iD8S9 6A3tndGT2A1o3Rd1kE2ZT4rkjZEiMkccSVeFm2TMxNJPZgYKoGpygwY9KFmTo5Y5 clX8RVL8t4pR+OJPKysmxgp5J+wiqjvNb7hoq1qqkeAC0QAvrQFMIUNNU2qRnOcd AOqh4m62fJMmKE24GS4cRK0sLMSX1wP0cXCwOQMRC7s9qyVWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4eqUi1wISE/XwgTimlzIh8kr1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGQ0ZDI4N2YtOGVjYS0z MmYxLWI4NzktNjA3OWNiMmU3YWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWDFprLZg/MrEAUadU/DF8brMi/3Ie4E1vpbkbuomwW8/nPRt0SU37p pL4iTFiMEmAAJdMm3jHPvgfHNs25hyYwjkc4rBiI1oU62usbMNxelQn2EYwWzmty MIM21XWJWexQ6iZmq0FWdWC6GsnWmk8y3wPl8r9ytTnWJRQ2itOdK8Qa0oG48Esd RWni9Qb5tNRbew1UMzYUHSD3gcbjX25JSXbJFZnDWOKuY/iRWzvQ6O1151LKiGHt n3EBhIOoem0EGGsfTlSN+hTnvVyQ/FoBw9alfjLrR00CQ2Fxe4kn2yFrmhqknzU6 WdPAXqyXynn81rF9junyZLbn9LUZjMU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:46:46 2025 by rpki-client