$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa File: dce5c758-03d9-3603-a303-530c88930fa0.roa (raw, json) Hash identifier: p1WfWZJlCG8LNeIImlaMijH+BwZ5XBzjK3X/sthoEW0= Subject key identifier: 58:A7:CE:FB:47:AC:83:CD:3F:3A:08:E4:12:AF:54:EC:90:AE:BE:30 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584BABFCFEC6DAE16EF401594F40 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 11300 IP address blocks: 64.49.152.0/24 maxlen: 25 207.241.180.0/24 maxlen: 25 207.241.181.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fe:c6:da:e1:6e:f4:01:59:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=dd37e6e3-d558-4686-a084-c1006c5c7c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:a6:ba:b7:93:ac:48:a3:09:97:e2:44:29: 31:a7:9c:33:90:12:62:93:27:44:ca:cd:d7:4d:00: eb:e9:d6:bc:cf:15:4d:14:c0:e9:eb:75:94:58:2a: 7d:ad:34:12:2d:d3:f0:b0:ec:74:ac:d1:dd:31:18: b2:cc:d7:1d:b9:aa:5c:ef:6b:3f:65:2f:a5:13:ae: c6:35:38:d3:6d:b3:4c:bb:54:c6:d1:56:b0:d3:7c: 0b:f9:c9:17:86:09:c3:0e:48:6e:86:38:0a:68:b7: 0c:ea:7a:81:fc:b6:37:bc:5d:5c:18:4b:71:1a:63: 5d:5a:b4:0f:f4:f5:eb:8b:38:12:3c:ad:23:b6:32: ba:6b:af:20:a4:9e:03:79:68:15:c0:31:8a:0d:8a: 40:24:29:43:31:c6:ca:8b:ee:2d:fb:92:4e:6e:3a: 77:b0:5d:89:98:59:73:ff:6b:cd:f0:19:5c:0e:56: 24:4c:42:a4:2f:f6:bb:18:2a:d1:d0:08:06:e2:d8: 38:9a:b2:30:b0:0f:5b:3a:dc:d0:de:cb:db:7b:e4: 2f:9f:38:49:88:e7:39:a9:08:8e:db:8a:98:63:68: f8:c2:01:47:bc:0c:e4:39:67:5c:14:27:1d:00:4a: da:06:80:5f:d4:15:4d:79:bc:a2:b1:bb:e1:71:72: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:CE:FB:47:AC:83:CD:3F:3A:08:E4:12:AF:54:EC:90:AE:BE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.152.0/24 207.241.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:74:59:9a:c2:39:51:78:25:30:aa:e9:4d:b5:70:3d:f3:60: e8:43:7b:ea:5c:5c:d2:8c:f3:ff:e4:6b:ae:80:5d:57:aa:55: 95:cf:6f:0f:df:97:5a:20:bf:3c:f2:33:5e:cd:c2:92:51:bf: a5:b2:b6:9b:b0:f7:f2:3d:af:00:ce:1a:38:1d:74:53:19:93: cb:16:7d:7e:63:da:da:b5:a3:50:92:b0:27:86:11:f2:f8:c3: 5b:a0:28:0d:ca:60:67:a9:e0:e7:a3:bd:c3:79:42:fd:12:56: cd:90:55:67:38:f5:f9:08:58:0d:00:5b:0d:31:b8:eb:cc:bf: 95:37:6e:be:94:00:6d:68:55:d5:62:e8:2c:53:42:7b:2c:6f: 87:61:8e:30:5e:55:f2:95:cd:dc:15:7d:56:70:35:ab:d3:1b: 70:ab:18:1a:3e:78:bd:7b:a4:34:35:d0:7d:00:fa:4a:81:a0: cd:d8:0c:98:97:c1:17:9f:e4:ea:74:69:c1:88:a5:83:59:cb: e1:b0:f7:38:c9:0d:98:c1:e3:18:a3:02:69:31:0d:24:cb:b2: ff:ee:f8:2f:94:95:c3:98:8a:82:5e:d9:62:c6:79:04:e6:54: 2b:cf:92:5a:51:57:83:9d:a6:33:c1:85:84:ba:b6:ea:4a:b1: d1:35:2f:02 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEur/P7G2uFu9AFZT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZGQzN2U2ZTMtZDU1OC00Njg2LWEwODQtYzEwMDZjNWM3YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXmmureTrEijCZfiRCkxp5wzkBJikydEys3X TQDr6da8zxVNFMDp63WUWCp9rTQSLdPwsOx0rNHdMRiyzNcduapc72s/ZS+lE67G NTjTbbNMu1TG0Vaw03wL+ckXhgnDDkhuhjgKaLcM6nqB/LY3vF1cGEtxGmNdWrQP 9PXrizgSPK0jtjK6a68gpJ4DeWgVwDGKDYpAJClDMcbKi+4t+5JObjp3sF2JmFlz /2vN8BlcDlYkTEKkL/a7GCrR0AgG4tg4mrIwsA9bOtzQ3svbe+QvnzhJiOc5qQiO 24qYY2j4wgFHvAzkOWdcFCcdAEraBoBf1BVNebyisbvhcXLUlQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFinzvtHrIPNPzoI5BKvVOyQrr4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZGNlNWM3NTgtMDNkOS0z NjAzLWEzMDMtNTMwYzg4OTMwZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQDGYAwQB z/G0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKF0WZrCOVF4JTCq6U21cD3zYOhDe+pcXNKM8//ka66AXVeq VZXPbw/fl1ogvzzyM17NwpJRv6Wytpuw9/I9rwDOGjgddFMZk8sWfX5j2tq1o1CS sCeGEfL4w1ugKA3KYGep4OejvcN5Qv0SVs2QVWc49fkIWA0AWw0xuOvMv5U3br6U AG1oVdVi6CxTQnssb4dhjjBeVfKVzdwVfVZwNavTG3CrGBo+eL17pDQ10H0A+kqB oM3YDJiXwRef5Op0acGIpYNZy+Gw9zjJDZjB4xijAmkxDSTLsv/u+C+UlcOYioJe 2WLGeQTmVCvPklpRV4OdpjPBhYS6tupKsdE1LwI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:30 2025 by rpki-client