$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec7093d3-e267-36e9-bd84-a4f737cf1773.roa File: ec7093d3-e267-36e9-bd84-a4f737cf1773.roa (raw, json) Hash identifier: MiGRZZi0CbfvRXYCRn9Z3+aUSuGjUoFh+LlEKxSEGgQ= Subject key identifier: 48:33:9E:27:6E:04:D7:82:B8:68:D5:5A:1B:A6:1F:E1:BF:F6:08:36 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9E8D294163530F4CD3FC1380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec7093d3-e267-36e9-bd84-a4f737cf1773.roa Signing time: Thu 23 Oct 2025 17:29:50 +0000 ROA not before: Thu 23 Oct 2025 17:29:50 +0000 ROA not after: Wed 21 Jan 2026 18:29:50 +0000 asID: 202736 IP address blocks: 64.204.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:8d:29:41:63:53:0f:4c:d3:fc:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 17:29:50 2025 GMT Not After : Jan 21 18:29:50 2026 GMT Subject: CN=6d32e088-01ac-434c-ae79-38669df8c38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d1:c1:a1:a7:ee:d9:32:4a:58:ac:32:1a:3a: 6e:9e:d3:f3:a2:12:e5:2b:d1:f0:2c:19:a9:13:9b: 99:0a:4e:11:dc:8d:61:41:c4:b4:dd:6d:f4:82:0a: 22:a5:f8:53:cf:b4:b9:10:95:65:e9:67:72:75:1d: 99:45:6c:c5:47:65:3d:e3:c3:37:64:e2:8d:66:79: 75:c3:a7:6c:25:31:96:83:1f:09:2d:6c:28:04:dc: ed:f5:81:c5:45:72:6e:9a:06:f3:bb:ea:48:eb:c9: f3:75:ac:8b:1a:66:75:ef:04:07:9a:05:0d:70:a8: bf:d7:25:66:eb:9a:8c:d9:c3:2c:7b:7d:8c:0d:e3: bc:75:f2:51:22:0b:1e:c8:0b:45:f9:36:52:04:d6: 9e:50:98:96:cc:48:21:5e:d3:2f:ac:52:fe:0d:66: d6:1e:f6:57:12:1a:78:36:6b:37:45:f9:31:15:ec: 4c:ab:1d:f1:2d:de:ac:1d:50:60:8a:fd:9b:93:b5: c2:62:f1:0c:48:53:db:ec:38:e3:f5:a2:8b:46:77: 8e:5d:9e:3c:cf:09:30:c4:34:4f:ca:3a:90:08:87: 92:d6:7f:11:c7:48:ba:cf:c3:8c:17:4e:41:b7:1e: e9:ef:c6:30:68:d4:02:13:8d:a5:6d:bf:ef:f9:b2: 4a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:33:9E:27:6E:04:D7:82:B8:68:D5:5A:1B:A6:1F:E1:BF:F6:08:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec7093d3-e267-36e9-bd84-a4f737cf1773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:16:50:6c:5f:70:6c:b5:ea:fe:38:ee:60:f3:c5:38:84:25: c2:80:85:f7:eb:ee:99:c1:92:3b:d7:14:34:e4:50:fa:4c:38: 99:d1:21:3e:94:6c:54:cd:d8:9b:6b:21:b1:d5:e9:14:70:b7: e4:1e:93:cf:db:c9:34:1d:75:9c:af:23:45:0a:f1:6c:88:92: 9b:43:24:91:7f:fe:df:1a:d9:4e:6a:7f:fb:a1:4f:b8:d0:a3: 8f:25:d6:55:03:0e:f2:d1:9f:e5:71:81:70:6a:ae:3e:46:9b: 8c:7e:35:38:83:48:19:b3:65:5c:7c:64:e5:cb:65:06:0d:04: a5:bd:2f:22:df:9a:bc:50:0b:99:bb:c9:fe:66:eb:48:ca:c8: c2:94:6a:e3:9a:bd:ca:6d:ec:52:1d:a5:14:e7:d4:37:9f:da: 42:73:3c:6a:44:70:53:6a:e7:74:74:3f:d8:76:68:ac:e5:33: 9a:3d:35:61:d1:6b:6d:14:6a:ed:00:87:d6:0f:4b:17:4a:72: bc:c0:89:93:8a:0d:f2:44:fc:31:29:f4:ef:33:89:61:1b:0e: f4:ed:15:20:49:b3:95:59:d5:04:72:cf:76:7f:d9:a6:e1:01: c8:82:71:f3:fc:9b:b5:ff:d7:6b:e8:dd:c4:07:fb:ab:5e:81: bf:b1:fa:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuejSlBY1MPTNP8E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMzE3Mjk1MFoXDTI2MDEyMTE4Mjk1MFowLzEtMCsGA1UEAxMk NmQzMmUwODgtMDFhYy00MzRjLWFlNzktMzg2NjlkZjhjMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntHBoafu2TJKWKwyGjpuntPzohLlK9HwLBmp E5uZCk4R3I1hQcS03W30ggoipfhTz7S5EJVl6WdydR2ZRWzFR2U948M3ZOKNZnl1 w6dsJTGWgx8JLWwoBNzt9YHFRXJumgbzu+pI68nzdayLGmZ17wQHmgUNcKi/1yVm 65qM2cMse32MDeO8dfJRIgseyAtF+TZSBNaeUJiWzEghXtMvrFL+DWbWHvZXEhp4 Nms3RfkxFexMqx3xLd6sHVBgiv2bk7XCYvEMSFPb7Djj9aKLRneOXZ48zwkwxDRP yjqQCIeS1n8Rx0i6z8OMF05Btx7p78YwaNQCE42lbb/v+bJKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgzniduBNeCuGjVWhumH+G/9gg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWM3MDkzZDMtZTI2Ny0z NmU5LWJkODQtYTRmNzM3Y2YxNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoWUGxfcGy16v447mDzxTiEJcKAhffr7pnBkjvXFDTkUPpMOJnRIT6U bFTN2JtrIbHV6RRwt+Qek8/byTQddZyvI0UK8WyIkptDJJF//t8a2U5qf/uhT7jQ o48l1lUDDvLRn+VxgXBqrj5Gm4x+NTiDSBmzZVx8ZOXLZQYNBKW9LyLfmrxQC5m7 yf5m60jKyMKUauOavcpt7FIdpRTn1Def2kJzPGpEcFNq53R0P9h2aKzlM5o9NWHR a20Uau0Ah9YPSxdKcrzAiZOKDfJE/DEp9O8ziWEbDvTtFSBJs5VZ1QRyz3Z/2abh AciCcfP8m7X/12vo3cQH+6tegb+x+nA= -----END CERTIFICATE-----Generated at Tue Nov 4 17:12:12 2025 by rpki-client