$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1e8fdcf4-715f-3906-b118-035cab07a6ad.roa File: 1e8fdcf4-715f-3906-b118-035cab07a6ad.roa (raw, json) Hash identifier: 5Z1F03Lep50zQCrDRCixNUli/XDgc8hbcWPvap+CIx8= Subject key identifier: A8:00:75:3C:48:A2:F0:9D:AF:57:0B:BC:60:BC:A7:14:F0:D4:B2:3B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BA0D264648EB4246763E13280 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1e8fdcf4-715f-3906-b118-035cab07a6ad.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 399439 IP address blocks: 64.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:64:64:8e:b4:24:67:63:e1:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=7ccdebc3-838a-4ed0-b99c-e995923140d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:05:12:29:82:82:eb:f1:11:fb:cf:88:d1: 8b:b5:5a:c3:03:71:23:78:5a:23:14:41:ec:61:cd: 46:f3:f1:bb:bd:48:91:c3:b1:31:a1:3c:41:b8:ea: c3:a1:ff:66:48:af:9e:c3:77:24:99:3f:54:77:25: 7d:5c:d9:b5:4c:69:bd:fd:eb:ea:01:0a:16:f6:58: ac:13:d2:23:e5:0a:8d:fb:10:3a:44:fd:90:73:dd: b8:4a:86:17:b6:43:da:00:93:4e:c8:41:6e:54:5d: ec:b1:e6:31:d9:20:58:39:af:ad:80:97:f4:6f:4c: 17:0f:53:a7:7a:0c:af:1a:cb:d8:1b:f9:b5:c5:0d: ca:ac:7c:90:28:91:74:21:cf:47:72:30:ec:6d:45: 88:3a:ef:b7:a4:c2:ea:6a:70:20:df:67:a7:00:85: ca:2a:a5:26:f6:a5:94:ae:4a:f9:ff:f8:d0:a1:0e: 54:fa:b4:e0:26:51:f6:e5:27:ff:97:25:5a:6d:f0: ad:62:9f:5e:bb:26:98:ae:12:77:c1:0d:c5:90:10: a7:5a:6c:ca:d5:8a:f9:28:be:44:8f:0c:c7:34:51: 06:45:9e:c5:30:a9:49:28:0a:32:36:0d:6a:42:e5: 41:91:25:96:cd:63:8a:61:3b:02:d0:f3:b9:05:2f: 41:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:00:75:3C:48:A2:F0:9D:AF:57:0B:BC:60:BC:A7:14:F0:D4:B2:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1e8fdcf4-715f-3906-b118-035cab07a6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d0:4c:48:bf:2a:76:26:84:a8:9c:1d:6a:de:f2:84:25:ab: fd:50:73:55:62:2c:e5:b8:22:dc:fa:68:58:34:0a:30:eb:8f: 25:49:a8:38:28:6e:cd:5c:95:76:12:bb:5d:54:0f:61:f6:4a: a6:7e:97:1d:6e:eb:30:7c:4b:45:5b:93:94:77:3f:a0:70:e0: ab:c5:52:d6:9d:c1:52:03:d8:f4:fb:aa:51:26:c3:fc:c7:0f: 1d:bc:63:a6:cd:ee:4e:c4:e4:37:b5:97:c5:37:9a:22:73:a4: a5:25:9a:dd:53:7c:7c:46:1d:21:15:1e:32:d4:ae:9a:fa:aa: db:6a:3f:ad:14:72:9f:80:a4:95:67:f7:75:22:24:f0:a1:50: 8d:83:0f:06:6e:98:4b:ae:03:2d:4e:37:26:8a:c3:20:6e:6c: 1d:ee:b2:4b:b9:5f:36:da:27:e8:05:1d:fa:c3:db:1f:5a:dd: 07:77:d2:fd:69:d4:c1:14:3d:bc:3b:f0:c2:46:c7:0d:07:00: fa:12:43:8a:57:9d:9e:21:73:84:ba:50:93:b0:39:49:6d:a5: f0:84:ff:40:c8:e3:b4:94:99:ff:69:22:6a:7f:28:20:f9:80: aa:8e:b5:73:c5:3c:a8:57:32:08:46:aa:84:6a:02:fe:b8:e9: 7d:0a:37:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mRkjrQkZ2PhMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk N2NjZGViYzMtODM4YS00ZWQwLWI5OWMtZTk5NTkyMzE0MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvgFEimCguvxEfvPiNGLtVrDA3EjeFojFEHs Yc1G8/G7vUiRw7ExoTxBuOrDof9mSK+ew3ckmT9UdyV9XNm1TGm9/evqAQoW9lis E9Ij5QqN+xA6RP2Qc924SoYXtkPaAJNOyEFuVF3sseYx2SBYOa+tgJf0b0wXD1On egyvGsvYG/m1xQ3KrHyQKJF0Ic9HcjDsbUWIOu+3pMLqanAg32enAIXKKqUm9qWU rkr5//jQoQ5U+rTgJlH25Sf/lyVabfCtYp9euyaYrhJ3wQ3FkBCnWmzK1Yr5KL5E jwzHNFEGRZ7FMKlJKAoyNg1qQuVBkSWWzWOKYTsC0PO5BS9BLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgAdTxIovCdr1cLvGC8pxTw1LI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWU4ZmRjZjQtNzE1Zi0z OTA2LWIxMTgtMDM1Y2FiMDdhNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHQTEi/KnYmhKicHWre8oQlq/1Qc1ViLOW4Itz6aFg0CjDrjyVJqDgo bs1clXYSu11UD2H2SqZ+lx1u6zB8S0Vbk5R3P6Bw4KvFUtadwVID2PT7qlEmw/zH Dx28Y6bN7k7E5De1l8U3miJzpKUlmt1TfHxGHSEVHjLUrpr6qttqP60Ucp+ApJVn 93UiJPChUI2DDwZumEuuAy1ONyaKwyBubB3usku5XzbaJ+gFHfrD2x9a3Qd30v1p 1MEUPbw78MJGxw0HAPoSQ4pXnZ4hc4S6UJOwOUltpfCE/0DI47SUmf9pImp/KCD5 gKqOtXPFPKhXMghGqoRqAv646X0KN8A= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:12 2025 by rpki-client