$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4f7f4db-817b-3740-88f7-b1820e1fe7d3.roa File: e4f7f4db-817b-3740-88f7-b1820e1fe7d3.roa (raw, json) Hash identifier: ixRh7yRIS0bqWXqD4FYvIfVqIbAC7ckU+Eu81Ba0DSY= Subject key identifier: DF:1D:22:E8:FB:9E:5B:D4:CB:B2:8F:CF:9D:11:09:EE:BD:A4:B9:E7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9D7F80BCB6AB6250660F6400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4f7f4db-817b-3740-88f7-b1820e1fe7d3.roa Signing time: Thu 23 Oct 2025 08:26:31 +0000 ROA not before: Thu 23 Oct 2025 08:26:31 +0000 ROA not after: Wed 21 Jan 2026 09:26:31 +0000 asID: 174 IP address blocks: 64.204.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9d:7f:80:bc:b6:ab:62:50:66:0f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 08:26:31 2025 GMT Not After : Jan 21 09:26:31 2026 GMT Subject: CN=3fd8df39-a404-4a79-ab81-a77427df9178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:d9:bd:0d:f0:af:fe:53:e2:9e:36:57:c5: 8a:20:d7:f0:36:11:12:23:7d:3d:11:b7:1f:cf:00: 28:71:fd:67:c1:0f:e4:0b:06:9a:8b:14:6d:8d:0f: fe:de:61:2c:97:62:8e:0b:55:e7:b9:16:25:00:38: 87:84:d1:af:25:91:3b:b6:cc:d6:23:70:12:c8:a4: 33:a8:67:d0:d4:ac:22:07:9b:a4:5e:30:36:7c:38: da:e0:e7:9e:c5:e1:c9:b8:67:9c:02:d1:15:0e:f4: 49:a2:be:78:d4:7d:fb:31:7a:4c:a2:3b:65:6a:d0: 02:88:3d:ad:c9:e7:f4:a8:ac:e7:e5:ca:bf:22:53: ed:16:ae:15:62:0a:2e:96:7a:f5:79:d7:13:40:a1: 91:a2:0a:cc:af:d7:5b:81:14:4d:f5:9b:6c:3f:8d: af:57:c1:32:c8:8b:19:1d:ad:a5:88:5b:d0:ca:d6: 54:53:1a:84:1e:7c:41:66:fa:80:b4:5d:68:a4:b5: 01:fd:f3:df:17:14:97:69:ef:41:1e:1a:04:c6:10: dd:ef:4c:25:0d:d2:7a:f1:35:22:c7:b6:33:17:6c: c2:41:d1:97:67:00:05:8d:dc:8b:00:5b:11:d2:80: cc:66:d7:f3:63:cf:e5:0c:d0:7a:f9:11:89:a4:df: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1D:22:E8:FB:9E:5B:D4:CB:B2:8F:CF:9D:11:09:EE:BD:A4:B9:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4f7f4db-817b-3740-88f7-b1820e1fe7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:68:20:79:7c:b8:46:81:67:bb:cf:13:e3:58:7d:f2:e7:1b: 4c:db:72:90:32:c2:ef:ae:51:4f:75:90:3b:94:24:fe:af:66: b0:60:b4:ee:93:7e:7f:11:eb:05:c6:25:54:4d:59:14:41:34: df:fc:df:68:18:60:19:20:97:a9:f7:bf:19:ae:f4:c3:a3:61: ae:49:03:3f:29:94:92:a9:1d:22:b0:e8:27:57:82:d7:78:d3: 7b:8d:37:8b:90:04:8c:fa:44:4d:c9:a5:e4:01:af:8a:50:84: 73:b2:ee:17:2c:00:5c:11:9d:ec:19:a8:ca:52:97:0e:d5:61: 33:d2:e8:ee:a0:5f:a2:cf:24:3e:62:dc:9a:23:8b:83:9c:6a: 5c:93:63:60:60:2f:be:05:2b:81:1a:b2:f1:21:3d:20:59:e5: 61:e0:af:f5:ff:a2:87:e4:7f:cf:d1:0d:63:6e:0d:eb:3a:54: c2:54:87:2d:7e:17:1f:ff:1e:2b:5b:e8:6c:da:fe:e3:c2:d8: aa:77:9d:bc:c4:00:bb:af:f3:24:7e:4d:60:1b:ff:8d:09:8c: 8a:24:1e:f7:4e:e0:f1:23:c6:fc:d5:98:62:c7:25:b5:9b:77: 13:f3:c1:58:66:b2:73:6e:91:8a:4d:a2:af:c0:71:49:09:b5: ab:5a:98:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEudf4C8tqtiUGYPZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMzA4MjYzMVoXDTI2MDEyMTA5MjYzMVowLzEtMCsGA1UEAxMk M2ZkOGRmMzktYTQwNC00YTc5LWFiODEtYTc3NDI3ZGY5MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCrZvQ3wr/5T4p42V8WKINfwNhESI309Ebcf zwAocf1nwQ/kCwaaixRtjQ/+3mEsl2KOC1XnuRYlADiHhNGvJZE7tszWI3ASyKQz qGfQ1KwiB5ukXjA2fDja4OeexeHJuGecAtEVDvRJor541H37MXpMojtlatACiD2t yef0qKzn5cq/IlPtFq4VYgoulnr1edcTQKGRogrMr9dbgRRN9ZtsP42vV8EyyIsZ Ha2liFvQytZUUxqEHnxBZvqAtF1opLUB/fPfFxSXae9BHhoExhDd70wlDdJ68TUi x7YzF2zCQdGXZwAFjdyLAFsR0oDMZtfzY8/lDNB6+RGJpN9DlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8dIuj7nlvUy7KPz50RCe69pLnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTRmN2Y0ZGItODE3Yi0z NzQwLTg4ZjctYjE4MjBlMWZlN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVoIHl8uEaBZ7vPE+NYffLnG0zbcpAywu+uUU91kDuUJP6vZrBgtO6T fn8R6wXGJVRNWRRBNN/832gYYBkgl6n3vxmu9MOjYa5JAz8plJKpHSKw6CdXgtd4 03uNN4uQBIz6RE3JpeQBr4pQhHOy7hcsAFwRnewZqMpSlw7VYTPS6O6gX6LPJD5i 3Joji4OcalyTY2BgL74FK4EasvEhPSBZ5WHgr/X/oofkf8/RDWNuDes6VMJUhy1+ Fx//Hitb6Gza/uPC2Kp3nbzEALuv8yR+TWAb/40JjIokHvdO4PEjxvzVmGLHJbWb dxPzwVhmsnNukYpNoq/AcUkJtatamN0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:16 2025 by rpki-client