$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa File: b276deed-b654-31aa-aead-607837be5406.roa (raw, json) Hash identifier: 4zjiBEB7bOUN1el8eNjQH+NEaH92kOOAkKChJTucetw= Subject key identifier: 31:71:AA:48:66:C3:45:3E:D5:B5:68:4C:D9:73:D9:5A:C1:8A:35:4D Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584B7F5214317D87675A9E9A7870 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 64.239.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:14:31:7d:87:67:5a:9e:9a:78:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=53282de1-2c42-4079-b803-9390049ad33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:8b:4a:11:b1:d5:be:18:84:d4:84:a9:d3: 7a:0d:84:a8:ff:f0:e9:7c:a6:ab:67:db:e2:ed:d6: 15:a5:69:57:31:3d:e8:33:4a:58:c8:f3:95:64:c9: a9:ba:76:be:51:0b:6e:df:02:81:24:6b:a0:56:a4: 6b:e0:02:22:52:a5:3d:6c:cd:68:20:64:b6:e9:aa: 87:fb:91:93:c3:b6:33:b6:0a:46:b4:37:b9:0d:a3: b7:54:c6:a7:06:8f:bd:3a:8f:73:12:52:be:51:05: 21:c3:cf:e2:d6:b3:2b:fa:73:4e:6e:87:a6:ed:69: c0:70:82:6f:d2:bd:2f:98:38:55:64:55:64:77:e8: d7:af:0e:92:56:bf:58:73:b1:58:13:b7:0a:e2:53: 44:c8:55:fc:57:9b:ea:c8:ad:95:07:6d:37:e7:1c: 9d:ef:9e:d2:b8:b2:d6:d4:72:2e:19:17:ae:e5:c2: 80:b0:d6:07:b9:53:7b:7e:b0:32:99:1c:b0:58:d9: 00:33:35:a2:0b:1f:27:5f:d8:f1:b4:e4:2e:b5:13: 03:44:f1:c9:f0:10:24:27:e1:5a:e7:28:48:df:fe: d2:d7:a7:96:f6:cf:ba:da:f8:13:21:28:cc:dc:79: 2b:8f:01:f9:96:7e:c7:59:be:94:08:d3:e5:b1:9f: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:AA:48:66:C3:45:3E:D5:B5:68:4C:D9:73:D9:5A:C1:8A:35:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.239.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:71:b9:8f:f0:7d:39:9e:14:c6:8e:92:c8:76:4d:4e:f1:5b: cd:25:f0:ce:83:ae:30:c2:dc:9e:d1:9f:51:33:a4:aa:0a:65: e0:b0:90:9c:c5:53:2b:85:04:ad:bc:f0:85:dd:eb:02:0a:8d: 0b:c3:2e:08:0f:36:17:fb:93:be:25:b6:c9:a8:f0:79:07:ca: ea:c5:79:52:45:9c:24:fe:1c:df:42:ad:55:cf:be:d0:3a:2d: 3d:82:5f:e9:93:9d:2d:74:06:6c:58:e1:a9:15:01:b3:e2:0d: 3a:d4:16:a3:92:22:e7:73:83:3b:99:72:8d:cd:c4:5d:b3:5f: 2c:84:ee:3a:48:e9:89:76:de:2b:73:86:33:72:4d:fc:17:39: 9f:17:1d:34:af:86:51:3c:ae:c2:99:13:77:78:09:9c:8a:99: 89:8d:c9:2c:a1:73:7f:45:b3:76:d3:32:07:9c:38:b9:0f:5e: 5c:8f:72:3a:75:60:60:e7:37:12:84:e2:c3:d7:72:45:1a:73: 56:55:8c:ba:8d:9d:25:68:4b:d8:eb:f3:8a:b6:e9:ea:6c:e3: ae:70:f0:0a:7d:c5:20:18:17:e6:2f:7b:78:41:a0:59:43:ec: 38:98:10:06:ff:17:46:18:d3:19:11:12:af:29:82:b3:3c:80: 5d:2b:f4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhQxfYdnWp6aeHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTMyODJkZTEtMmM0Mi00MDc5LWI4MDMtOTM5MDA0OWFkMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFWLShGx1b4YhNSEqdN6DYSo//DpfKarZ9vi 7dYVpWlXMT3oM0pYyPOVZMmpuna+UQtu3wKBJGugVqRr4AIiUqU9bM1oIGS26aqH +5GTw7YztgpGtDe5DaO3VManBo+9Oo9zElK+UQUhw8/i1rMr+nNOboem7WnAcIJv 0r0vmDhVZFVkd+jXrw6SVr9Yc7FYE7cK4lNEyFX8V5vqyK2VB2035xyd757SuLLW 1HIuGReu5cKAsNYHuVN7frAymRywWNkAMzWiCx8nX9jxtOQutRMDRPHJ8BAkJ+Fa 5yhI3/7S16eW9s+62vgTISjM3HkrjwH5ln7HWb6UCNPlsZ+rCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFxqkhmw0U+1bVoTNlz2VrBijVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvYjI3NmRlZWQtYjY1NC0z MWFhLWFlYWQtNjA3ODM3YmU1NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOVxuY/wfTmeFMaOksh2TU7xW80l8M6DrjDC3J7Rn1EzpKoKZeCwkJzF UyuFBK288IXd6wIKjQvDLggPNhf7k74ltsmo8HkHyurFeVJFnCT+HN9CrVXPvtA6 LT2CX+mTnS10BmxY4akVAbPiDTrUFqOSIudzgzuZco3NxF2zXyyE7jpI6Yl23itz hjNyTfwXOZ8XHTSvhlE8rsKZE3d4CZyKmYmNySyhc39Fs3bTMgecOLkPXlyPcjp1 YGDnNxKE4sPXckUac1ZVjLqNnSVoS9jr84q26eps465w8Ap9xSAYF+Yve3hBoFlD 7DiYEAb/F0YY0xkREq8pgrM8gF0r9Lc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:59 2025 by rpki-client