$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: DVKEH/EVs98wgQp/NcnsNfWYwZhmfSXWfw7uhbre2rA= Subject key identifier: 07:6E:B4:D8:24:9E:45:E9:00:2E:97:D1:D6:E5:15:74:2A:BA:09:05 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584BA39D08001F858F9CEDFFA180 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:08:00:1f:85:8f:9c:ed:ff:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=ad9bc751-69e3-478d-b015-414351f4e49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:85:2d:62:ac:ae:a5:89:a8:fc:3a:c7:87: 5d:ea:60:5f:ba:5e:a1:77:5e:4b:5e:bd:75:ce:8f: e5:2b:6a:d6:d7:cb:d1:93:79:50:66:9c:e6:b9:60: fc:9e:21:dc:c7:0f:9d:8e:a1:e6:4c:4a:42:5c:d0: 10:f0:2a:a6:46:ac:33:2b:26:0e:9c:e4:82:69:9b: 2e:af:0f:75:1a:d6:32:b6:e5:ad:3f:19:f4:a7:14: 68:4e:2e:8b:71:29:04:08:48:77:18:ce:07:95:80: 41:cb:89:9a:f1:9e:ef:ce:b9:26:92:2c:d8:ba:e1: 71:6c:cc:6f:20:a5:c4:71:79:81:82:59:f9:76:0e: 2c:87:65:03:b6:7a:17:42:a3:2a:9a:fb:d7:b9:68: 85:c3:45:94:c1:90:16:b7:66:f9:c4:5f:b3:d0:a7: b2:03:46:72:d4:e0:84:c5:6e:a0:52:5a:41:95:9a: 4b:13:0e:80:2a:19:13:7e:96:1b:b3:b5:1f:1e:69: 7d:ec:de:cb:e4:b3:13:f8:d5:a0:53:f9:a1:d9:88: d4:51:79:ed:9f:bc:3f:63:04:6c:89:f2:9a:7c:b8: 45:18:ef:d0:f0:01:b4:ba:14:3b:5d:35:7d:0d:ea: 95:a9:69:35:74:7c:f1:9a:f0:c9:ba:99:bd:18:9e: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6E:B4:D8:24:9E:45:E9:00:2E:97:D1:D6:E5:15:74:2A:BA:09:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:76:85:4e:c2:33:ca:fa:9e:8f:05:96:05:95:f7:73:d0:d3: a1:09:79:09:aa:4b:2f:24:2f:42:c0:e3:87:27:49:14:18:1d: 7a:aa:1f:ba:7e:56:41:c2:2b:da:80:86:63:aa:bd:fc:9a:4a: e2:af:c1:c4:9a:8d:04:63:b8:82:77:1a:13:a7:bb:75:79:1b: a5:f7:7d:c8:32:81:72:1e:27:a4:a0:16:8a:84:a2:03:f9:92: 6c:26:6e:c7:3f:0e:e6:a7:cd:6e:54:11:70:0e:2f:e9:71:e2: 6f:6e:c2:d9:f7:c0:db:45:ae:08:21:3d:84:2c:bf:65:bb:64: 0c:05:c3:f4:aa:c0:ac:03:db:ca:49:2a:3b:72:26:3f:82:6d: f0:c2:56:af:7e:50:3e:c4:b1:f0:59:f7:4e:af:06:7b:76:26: a6:ae:bd:67:39:fd:6f:ca:2b:0f:6d:ea:1a:98:6f:37:1e:11: b2:2c:6b:a5:9f:fd:df:9b:ca:cf:6a:70:e4:6c:0b:e0:1d:62: 0e:05:50:fe:1d:85:c6:e8:8c:52:c1:d5:b3:39:59:e1:b2:02: b2:b3:61:cc:78:5e:15:b8:99:bc:0f:c9:a5:98:10:0e:f1:94: cd:44:45:7d:0b:4b:00:01:ce:6c:e5:42:22:9f:b0:18:08:a5: 7d:bd:7c:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQgAH4WPnO3/oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YWQ5YmM3NTEtNjllMy00NzhkLWIwMTUtNDE0MzUxZjRlNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9mFLWKsrqWJqPw6x4dd6mBful6hd15LXr11 zo/lK2rW18vRk3lQZpzmuWD8niHcxw+djqHmTEpCXNAQ8CqmRqwzKyYOnOSCaZsu rw91GtYytuWtPxn0pxRoTi6LcSkECEh3GM4HlYBBy4ma8Z7vzrkmkizYuuFxbMxv IKXEcXmBgln5dg4sh2UDtnoXQqMqmvvXuWiFw0WUwZAWt2b5xF+z0KeyA0Zy1OCE xW6gUlpBlZpLEw6AKhkTfpYbs7UfHml97N7L5LMT+NWgU/mh2YjUUXntn7w/YwRs ifKafLhFGO/Q8AG0uhQ7XTV9DeqVqWk1dHzxmvDJupm9GJ41xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdutNgknkXpAC6X0dblFXQqugkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD92hU7CM8r6no8FlgWV93PQ06EJeQmqSy8kL0LA44cnSRQYHXqqH7p+ VkHCK9qAhmOqvfyaSuKvwcSajQRjuIJ3GhOnu3V5G6X3fcgygXIeJ6SgFoqEogP5 kmwmbsc/DuanzW5UEXAOL+lx4m9uwtn3wNtFrgghPYQsv2W7ZAwFw/SqwKwD28pJ KjtyJj+CbfDCVq9+UD7EsfBZ906vBnt2JqauvWc5/W/KKw9t6hqYbzceEbIsa6Wf /d+bys9qcORsC+AdYg4FUP4dhcbojFLB1bM5WeGyArKzYcx4XhW4mbwPyaWYEA7x lM1ERX0LSwABzmzlQiKfsBgIpX29fKM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:09 2025 by rpki-client