$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa File: 5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa (raw, json) Hash identifier: q5VUbg2MV+XUtSb21zMLOCTA245HZ0kHmEpZL+Tt0fs= Subject key identifier: 60:7E:E3:24:80:74:46:07:5A:68:F5:53:9C:94:ED:5F:F3:D7:73:AE Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B01B14775791E595F7315CE30 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 33521 IP address blocks: 64.25.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:47:75:79:1e:59:5f:73:15:ce:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=d911b062-da4b-4494-b2f3-13ead92b182b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:98:f1:d3:2d:32:a1:c3:f5:f4:d3:59:c1: d2:44:ce:20:8d:cd:fd:2c:a4:b0:91:3e:f1:19:08: fc:64:fb:00:cf:75:27:a8:3c:9d:97:6d:dd:6a:68: a3:cf:40:3b:fa:7f:8f:41:14:e3:37:b1:d9:c5:f4: 6d:93:cc:b7:ba:fc:70:aa:d2:87:81:95:cd:57:10: f5:2c:07:41:17:a7:31:88:57:01:ad:84:1a:0b:da: 11:56:5d:17:69:08:60:07:5d:83:bf:12:8f:a8:4c: 6b:6a:e4:d9:e3:2f:93:07:52:d6:cc:9c:58:b9:b7: 99:66:07:24:e2:00:02:11:1c:3d:76:5d:60:6d:b9: 45:b8:20:dd:82:76:e4:7a:27:f1:42:5e:77:8b:94: 5b:79:a6:0b:38:b1:7e:27:75:2a:de:cd:80:24:15: 04:ff:44:f4:e1:4d:6f:98:d3:83:e1:fd:97:c9:95: bb:12:af:ec:7d:3d:c0:f2:21:00:ad:b6:55:f0:77: 7e:24:99:3e:6e:02:32:b0:50:45:89:ca:5c:29:d2: c5:0b:68:11:44:29:4b:a2:63:37:93:c7:ad:80:31: 4c:06:dc:8d:66:07:5c:72:0a:f6:b5:d7:28:88:04: 24:8c:50:92:90:5a:9e:b9:52:d9:ae:9e:9d:04:3f: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7E:E3:24:80:74:46:07:5A:68:F5:53:9C:94:ED:5F:F3:D7:73:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 64.25.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:43:cc:28:8b:27:a5:53:8b:9f:8c:e7:6a:82:82:01:7c:54: 43:5a:50:5e:a0:bb:24:09:6b:c5:80:36:84:78:d9:eb:02:8a: db:ee:5b:18:48:76:b0:8d:1b:b4:61:bd:2d:97:90:eb:68:85: b8:8d:93:10:c0:5d:6e:64:56:e7:3b:a8:83:89:33:37:48:a2: 98:20:c7:6b:88:44:1f:01:b4:e6:64:3e:9d:54:98:09:40:f3: 9c:1b:c5:c6:4c:b5:e9:51:30:90:01:f5:5b:cd:26:79:2a:2c: a4:38:e8:bd:44:81:c3:83:9c:5e:4d:22:e3:ca:ab:ad:fe:2e: 11:2b:21:44:ea:a4:7e:ef:a9:79:45:ff:fc:dc:49:d5:9f:36: 25:12:22:cd:eb:ce:61:09:10:fc:fe:81:69:7f:7c:1b:ca:ec: 4d:62:8a:8a:83:0e:ae:0f:f6:bb:5f:63:2b:fb:84:e3:d7:20: 7e:f0:5c:dc:0d:05:01:11:c3:bd:b8:20:42:f6:a3:cb:a7:e8: 71:5b:76:d4:46:46:25:bf:39:39:b2:80:6c:0b:5c:8b:9e:cb: d1:40:94:9d:9c:b7:2f:3a:99:90:32:4b:df:fa:f2:9e:b1:0d: 4a:e6:1c:12:cf:ed:cb:1d:3b:f6:6f:a0:2e:9b:c0:12:be:70: 34:22:76:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBsUd1eR5ZX3MVzjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDkxMWIwNjItZGE0Yi00NDk0LWIyZjMtMTNlYWQ5MmIxODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD2Y8dMtMqHD9fTTWcHSRM4gjc39LKSwkT7x GQj8ZPsAz3UnqDydl23damijz0A7+n+PQRTjN7HZxfRtk8y3uvxwqtKHgZXNVxD1 LAdBF6cxiFcBrYQaC9oRVl0XaQhgB12DvxKPqExrauTZ4y+TB1LWzJxYubeZZgck 4gACERw9dl1gbblFuCDdgnbkeifxQl53i5RbeaYLOLF+J3Uq3s2AJBUE/0T04U1v mNOD4f2XyZW7Eq/sfT3A8iEArbZV8Hd+JJk+bgIysFBFicpcKdLFC2gRRClLomM3 k8etgDFMBtyNZgdccgr2tdcoiAQkjFCSkFqeuVLZrp6dBD/UewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB+4ySAdEYHWmj1U5yU7V/z13OuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNWZjMDE3MjAtM2MzNy0z MmQxLThhM2MtMDJiM2UxY2ZjZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBmCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5DzCiLJ6VTi5+M52qCggF8VENaUF6guyQJa8WANoR42esCitvuWxhI drCNG7RhvS2XkOtohbiNkxDAXW5kVuc7qIOJMzdIopggx2uIRB8BtOZkPp1UmAlA 85wbxcZMtelRMJAB9VvNJnkqLKQ46L1EgcODnF5NIuPKq63+LhErIUTqpH7vqXlF //zcSdWfNiUSIs3rzmEJEPz+gWl/fBvK7E1iioqDDq4P9rtfYyv7hOPXIH7wXNwN BQERw724IEL2o8un6HFbdtRGRiW/OTmygGwLXIuey9FAlJ2cty86mZAyS9/68p6x DUrmHBLP7csdO/ZvoC6bwBK+cDQidkc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:25 2025 by rpki-client