$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d810d72d-baf6-3b7d-b487-6ed1e08edc88.roa File: d810d72d-baf6-3b7d-b487-6ed1e08edc88.roa (raw, json) Hash identifier: wZPf8JTpuxB7mICT3hRyLzdhz6CHnaCrioEA2yxHiz4= Subject key identifier: D8:3C:4D:55:11:52:11:D0:09:DD:85:B3:B1:C5:F7:8C:85:F2:64:BB Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584BA0D25152EE752979357C21E0 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d810d72d-baf6-3b7d-b487-6ed1e08edc88.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 11127 IP address blocks: 64.49.128.0/18 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:51:52:ee:75:29:79:35:7c:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=81c97333-a2eb-427d-99e0-05fa8474f0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:5b:42:94:70:bc:da:6d:96:ef:16:32:70: 5e:29:15:0e:e6:3a:62:6c:6b:6c:99:a4:77:76:1c: c8:b0:0d:07:6f:a1:ad:91:13:3d:e9:d8:98:5e:0b: b6:c4:1c:a7:5e:93:41:4e:36:b7:bd:ed:c4:69:a2: 3e:6a:87:26:c2:16:27:d0:08:13:1e:c2:09:1a:ef: 85:61:4a:9d:10:c9:e5:bb:ff:a0:3b:5d:fb:b7:40: ce:2a:eb:af:c7:6a:52:1e:a9:2c:a5:73:c0:dc:9b: 8a:80:be:b3:57:c0:15:0e:0b:03:cd:81:b0:a4:22: 49:7b:f0:54:26:ff:3c:0b:f5:2b:a3:0a:28:7b:38: be:c0:dd:dd:94:15:22:59:a1:9d:41:19:58:97:85: 36:10:c6:b5:e4:30:26:11:ef:ed:d7:46:87:26:a4: a9:f4:25:1a:dd:f0:90:03:df:08:b1:0b:5b:99:26: c8:db:3e:29:59:ce:d4:2e:8a:14:b4:3d:67:6d:91: 0b:0d:35:43:8c:62:3b:8b:ef:0f:b9:48:e4:f8:a3: 79:a7:06:d2:5f:0f:97:18:48:e6:68:cc:fe:08:74: e4:6e:0f:b9:d5:43:c2:eb:17:99:a2:c6:20:98:4a: ef:48:1f:ee:36:2c:fd:ca:6d:93:d9:2a:f0:55:7b: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:4D:55:11:52:11:D0:09:DD:85:B3:B1:C5:F7:8C:85:F2:64:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d810d72d-baf6-3b7d-b487-6ed1e08edc88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6f:a1:3b:f7:f5:52:f3:18:18:27:4d:7d:62:11:3a:ee:0f: 44:9c:b0:86:ea:ab:69:57:98:f4:43:9a:70:e0:75:78:ca:5a: e3:cd:4d:50:df:70:37:ca:37:a5:ee:04:ab:4f:52:dd:08:8c: d1:06:af:bc:50:f0:4f:83:7f:62:90:1d:b9:af:db:27:c3:54: 22:4a:b6:0e:31:07:d4:0e:0e:08:30:72:f3:01:b8:28:02:4b: d4:28:be:be:64:b1:77:42:3c:35:a3:8c:90:8a:23:a4:c0:10: dc:9b:ea:3d:7d:5f:18:e5:49:4c:44:65:22:90:97:45:5a:37: f8:01:11:e2:ba:9d:30:2f:25:6c:c1:6b:f9:47:fa:3b:8f:62: 6b:33:27:54:43:ab:50:07:13:18:32:e9:25:a7:1b:a0:da:a2: 3a:83:e6:ca:6c:fd:1d:2c:88:8d:9c:1b:9f:5c:1e:eb:3d:16: 63:02:a4:21:b0:ca:ad:90:f6:14:d8:4f:c2:5e:23:47:81:82: 1e:6c:20:8c:b5:6d:d3:c7:1c:19:0d:93:57:7c:db:a5:24:06: 65:8c:50:8f:83:08:bb:32:6f:f1:15:03:dc:72:2a:8d:78:23: 76:15:a9:0c:c7:65:80:a2:c2:48:21:28:05:d9:57:85:dc:e6: d8:c8:dd:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lFS7nUpeTV8IeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ODFjOTczMzMtYTJlYi00MjdkLTk5ZTAtMDVmYTg0NzRmMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQBbQpRwvNptlu8WMnBeKRUO5jpibGtsmaR3 dhzIsA0Hb6GtkRM96diYXgu2xBynXpNBTja3ve3EaaI+aocmwhYn0AgTHsIJGu+F YUqdEMnlu/+gO137t0DOKuuvx2pSHqkspXPA3JuKgL6zV8AVDgsDzYGwpCJJe/BU Jv88C/Urowooezi+wN3dlBUiWaGdQRlYl4U2EMa15DAmEe/t10aHJqSp9CUa3fCQ A98IsQtbmSbI2z4pWc7ULooUtD1nbZELDTVDjGI7i+8PuUjk+KN5pwbSXw+XGEjm aMz+CHTkbg+51UPC6xeZosYgmErvSB/uNiz9ym2T2SrwVXuGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg8TVURUhHQCd2Fs7HF94yF8mS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZDgxMGQ3MmQtYmFmNi0z YjdkLWI0ODctNmVkMWUwOGVkYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJvoTv39VLzGBgnTX1iETruD0ScsIbqq2lXmPRDmnDgdXjKWuPNTVDf cDfKN6XuBKtPUt0IjNEGr7xQ8E+Df2KQHbmv2yfDVCJKtg4xB9QODggwcvMBuCgC S9Qovr5ksXdCPDWjjJCKI6TAENyb6j19XxjlSUxEZSKQl0VaN/gBEeK6nTAvJWzB a/lH+juPYmszJ1RDq1AHExgy6SWnG6DaojqD5sps/R0siI2cG59cHus9FmMCpCGw yq2Q9hTYT8JeI0eBgh5sIIy1bdPHHBkNk1d826UkBmWMUI+DCLsyb/EVA9xyKo14 I3YVqQzHZYCiwkghKAXZV4Xc5tjI3c8= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:02 2025 by rpki-client