$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa File: 452a8ba2-ade7-3b56-98f5-02f50e546db8.roa (raw, json) Hash identifier: gH/khltuL+V7d4wcWAj3pROenTQAP/5r3kd+gX4yG8g= Subject key identifier: AB:8A:CE:63:03:E6:02:3A:BF:FC:17:04:A9:7A:F1:52:4C:A1:38:0C Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584BAEC7AD7EC4D19CF5E9CC0F10 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 24753 IP address blocks: 64.49.154.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ad:7e:c4:d1:9c:f5:e9:cc:0f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=b2f99e1d-bcf1-4a37-864a-e05007074456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:1a:16:b9:4b:76:5e:c6:a4:cc:ac:c5:e2: 5d:90:4c:a6:96:4c:b7:f8:ba:a7:e4:cb:31:4a:dd: d1:48:b5:19:7e:9d:1d:22:97:27:ef:f6:9a:db:46: 7f:fc:4b:a3:5e:67:20:b6:39:9e:97:37:41:d1:e9: be:e1:37:05:d6:63:bb:27:21:f2:f3:c6:14:4d:62: de:b7:20:51:2b:d2:5a:1a:5d:7e:68:5e:27:d1:b0: be:1b:3f:bc:a5:6c:93:08:33:aa:19:19:74:a6:e5: cb:8f:4d:2b:20:77:9f:a5:9c:b6:fd:97:51:2b:22: 43:c8:f2:ed:e5:ab:6a:b6:d2:4a:f7:30:63:c0:39: c6:cc:74:95:19:cb:bc:4e:c6:5c:34:c7:3f:e5:dc: 4e:33:d4:28:e7:92:1b:41:94:d5:3c:56:c6:85:e4: 84:7c:cb:4f:6e:80:a7:b3:94:41:66:f2:bc:3a:c5: 04:c1:b1:1b:62:f4:13:8e:62:7f:fc:85:6b:9f:1a: 12:e2:d7:dc:7a:bc:95:3d:61:23:5c:7b:3a:08:13: d9:3a:8a:bc:95:95:ac:f2:b1:59:35:0b:35:13:df: 30:3b:e4:ad:a5:3d:38:cb:33:6a:34:c4:25:05:97: 83:da:29:19:3e:7c:78:b3:c6:62:2a:c3:46:85:31: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8A:CE:63:03:E6:02:3A:BF:FC:17:04:A9:7A:F1:52:4C:A1:38:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5b:0e:20:7f:e1:a6:88:3a:1b:d0:11:d1:54:a2:62:b1:84: 1c:c8:64:5a:d1:1a:86:6e:8d:b9:84:b5:3a:8b:cd:03:3e:4a: 9c:b5:ed:3f:a6:2c:97:7a:7c:98:ca:86:5b:3a:51:88:47:9a: 6b:70:1c:ba:92:54:4a:62:d6:4e:b6:37:2a:65:04:62:b2:bd: af:ed:99:be:9e:ce:a0:aa:bf:d8:8a:b4:6a:f4:bd:ec:01:00: 6f:b6:89:bb:bf:52:a4:de:d9:db:46:fb:4a:57:00:bf:14:2d: 1c:15:0c:06:cb:45:3c:b7:73:4a:1f:c7:e1:cb:80:f4:5f:b5: 65:1a:c1:6f:39:a2:c3:c5:63:5f:11:4a:6e:c8:70:94:3b:47: 73:15:28:7f:64:f6:6d:76:bc:9d:df:eb:45:11:9f:14:cf:7c: 4c:14:c9:bb:54:fc:7b:da:7d:db:01:1b:71:7a:f5:05:d4:17: 4c:36:ce:e6:1d:ae:53:ec:6b:75:11:fd:c3:02:d9:82:de:df: d5:3c:ab:d9:a1:b5:4d:83:3b:75:0c:5a:99:e3:71:85:01:66: 6d:a7:95:07:d0:56:5e:50:aa:ae:70:f7:6c:5a:96:bd:49:f8: 9a:a7:8f:0a:53:16:4c:32:40:bb:7b:1f:7b:0a:96:81:b1:0d: 84:df:3a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux61+xNGc9enMDxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YjJmOTllMWQtYmNmMS00YTM3LTg2NGEtZTA1MDA3MDc0NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0UaFrlLdl7GpMysxeJdkEymlky3+Lqn5Msx St3RSLUZfp0dIpcn7/aa20Z//EujXmcgtjmelzdB0em+4TcF1mO7JyHy88YUTWLe tyBRK9JaGl1+aF4n0bC+Gz+8pWyTCDOqGRl0puXLj00rIHefpZy2/ZdRKyJDyPLt 5atqttJK9zBjwDnGzHSVGcu8TsZcNMc/5dxOM9Qo55IbQZTVPFbGheSEfMtPboCn s5RBZvK8OsUEwbEbYvQTjmJ//IVrnxoS4tfceryVPWEjXHs6CBPZOoq8lZWs8rFZ NQs1E98wO+StpT04yzNqNMQlBZeD2ikZPnx4s8ZiKsNGhTGVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuKzmMD5gI6v/wXBKl68VJMoTgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvNDUyYThiYTItYWRlNy0z YjU2LTk4ZjUtMDJmNTBlNTQ2ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVbDiB/4aaIOhvQEdFUomKxhBzIZFrRGoZujbmEtTqLzQM+Spy17T+m LJd6fJjKhls6UYhHmmtwHLqSVEpi1k62NyplBGKyva/tmb6ezqCqv9iKtGr0vewB AG+2ibu/UqTe2dtG+0pXAL8ULRwVDAbLRTy3c0ofx+HLgPRftWUawW85osPFY18R Sm7IcJQ7R3MVKH9k9m12vJ3f60URnxTPfEwUybtU/HvafdsBG3F69QXUF0w2zuYd rlPsa3UR/cMC2YLe39U8q9mhtU2DO3UMWpnjcYUBZm2nlQfQVl5Qqq5w92xalr1J +JqnjwpTFkwyQLt7H3sKloGxDYTfOug= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:40 2025 by rpki-client