$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723/f646e71d-a495-3eb0-83b1-92ed73c2e30c.roa File: f646e71d-a495-3eb0-83b1-92ed73c2e30c.roa (raw, json) Hash identifier: x3EGh3tuIwx7ViL0bhfJZqBFYh1SQlG4GAERhTyWJSw= Subject key identifier: 07:7B:6A:E3:A3:1B:46:F4:31:66:92:D6:97:FA:04:DB:58:1B:B4:0A Certificate issuer: /CN=e13d4f21-869f-4f84-b14f-e9c493253723 Certificate serial: 010D0C9F4328584BBCDAE54DF63847F638EBAA80 Authority key identifier: D7:6F:C3:18:44:98:3B:F8:36:DE:48:7F:49:B6:A6:50:12:C2:09:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723/f646e71d-a495-3eb0-83b1-92ed73c2e30c.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 400271 IP address blocks: 64.39.230.0/24 maxlen: 24 174.136.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723/e13d4f21-869f-4f84-b14f-e9c493253723.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723/e13d4f21-869f-4f84-b14f-e9c493253723.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e5:4d:f6:38:47:f6:38:eb:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13d4f21-869f-4f84-b14f-e9c493253723 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=4b5fc447-3d75-4ae6-bfef-4022192082bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:bf:09:97:c4:1d:31:a8:81:20:9a:ea:34: 72:1f:28:21:99:5e:e6:e5:d8:c0:fb:ba:10:d6:89: a5:ce:bb:b8:5b:7e:a8:ed:66:4b:da:e3:86:04:6e: a4:80:5a:35:7e:d8:06:d2:d3:06:93:e2:ef:dc:62: 3f:49:65:2e:ba:f9:f2:e5:21:b3:cd:e8:76:e1:2a: b1:4d:44:a3:f8:01:69:68:6e:8c:15:4e:1c:d7:19: 3f:ef:7e:0c:3b:ed:87:e4:c4:3a:c4:c3:b7:aa:44: 35:91:a5:f1:aa:b2:f5:3b:1b:62:5d:e8:04:24:a9: c8:80:05:11:be:21:93:3e:6a:e4:9a:07:0c:a5:ba: 2a:56:96:6f:49:45:98:e5:be:75:e5:42:91:ba:51: 2c:0d:85:e7:de:91:bb:d9:f6:c0:f1:b0:02:dc:ce: 4c:d7:53:76:11:1e:4c:d8:07:72:4f:89:46:e2:4a: 62:60:69:eb:f8:b6:e9:5e:ec:c0:d4:9e:2c:05:8f: ab:45:f4:a2:64:01:d4:8e:f5:d4:ac:7e:59:31:ee: 6f:ff:f9:7b:b1:e1:78:95:12:df:dc:55:a6:75:a2: 5e:1e:dd:0f:82:99:64:37:e2:87:44:51:4f:c4:e8: 75:ef:b4:45:a7:aa:00:b8:a6:bc:f8:62:20:33:18: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7B:6A:E3:A3:1B:46:F4:31:66:92:D6:97:FA:04:DB:58:1B:B4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723/f646e71d-a495-3eb0-83b1-92ed73c2e30c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723/e13d4f21-869f-4f84-b14f-e9c493253723.crl X509v3 Authority Key Identifier: keyid:D7:6F:C3:18:44:98:3B:F8:36:DE:48:7F:49:B6:A6:50:12:C2:09:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e13d4f21-869f-4f84-b14f-e9c493253723.cer sbgp-ipAddrBlock: critical IPv4: 64.39.230.0/24 174.136.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8e:7d:08:43:3c:d5:3c:75:22:30:15:f6:a1:ee:b5:69:b8: 15:d0:8e:22:70:08:2b:13:3f:05:c2:31:20:3e:f3:a4:47:c5: 4f:78:28:96:97:b0:cf:3e:b1:98:f1:5a:fa:0f:b8:01:5e:cf: 4a:dc:c3:34:6d:fe:e4:6f:4c:92:6e:52:5f:e8:c4:76:c3:10: 70:15:3a:73:f0:d3:b3:3a:ac:68:ea:7e:ed:ae:79:5d:be:1b: ab:46:3d:a8:d6:92:48:16:09:0c:83:77:ab:54:9b:8e:55:11: f4:44:b8:11:5f:7d:5f:cb:bd:b8:64:96:9d:a4:7e:c4:df:94: 21:53:12:39:ec:03:72:4e:07:92:29:69:bd:92:a5:45:c1:7d: c4:51:25:fc:bb:41:c8:05:ca:64:71:03:57:46:9b:ad:11:a4: f1:a8:ca:a5:01:82:35:7f:d3:64:f7:58:37:1f:20:3e:66:69: 3d:a3:9b:71:c6:be:6c:92:78:3f:1d:6e:18:6d:7d:72:f8:d4: 50:28:e7:73:9c:c7:6d:ae:d1:8d:8e:01:c3:3c:b5:06:23:cd: db:23:1c:52:cc:8e:ed:58:99:e2:51:5f:71:12:0a:fd:d7:fb: fe:cb:2e:08:c4:9e:b1:06:04:2c:3e:98:9d:ff:c9:44:38:07: 9a:eb:84:c0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu82uVN9jhH9jjrqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEzZDRmMjEtODY5Zi00Zjg0LWIxNGYtZTljNDkzMjUz NzIzMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk NGI1ZmM0NDctM2Q3NS00YWU2LWJmZWYtNDAyMjE5MjA4MmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNq/CZfEHTGogSCa6jRyHyghmV7m5djA+7oQ 1omlzru4W36o7WZL2uOGBG6kgFo1ftgG0tMGk+Lv3GI/SWUuuvny5SGzzeh24Sqx TUSj+AFpaG6MFU4c1xk/734MO+2H5MQ6xMO3qkQ1kaXxqrL1OxtiXegEJKnIgAUR viGTPmrkmgcMpboqVpZvSUWY5b515UKRulEsDYXn3pG72fbA8bAC3M5M11N2ER5M 2AdyT4lG4kpiYGnr+LbpXuzA1J4sBY+rRfSiZAHUjvXUrH5ZMe5v//l7seF4lRLf 3FWmdaJeHt0PgplkN+KHRFFPxOh177RFp6oAuKa8+GIgMxj14wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAd7auOjG0b0MWaS1pf6BNtYG7QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMTNk NGYyMS04NjlmLTRmODQtYjE0Zi1lOWM0OTMyNTM3MjMvZjY0NmU3MWQtYTQ5NS0z ZWIwLTgzYjEtOTJlZDczYzJlMzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTEzZDRmMjEtODY5Zi00Zjg0LWIx NGYtZTljNDkzMjUzNzIzL2UxM2Q0ZjIxLTg2OWYtNGY4NC1iMTRmLWU5YzQ5MzI1 MzcyMy5jcmwwHwYDVR0jBBgwFoAU12/DGESYO/g23kh/SbamUBLCCUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMTNkNGYyMS04NjlmLTRmODQtYjE0Zi1lOWM0 OTMyNTM3MjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQCfmAwQA rojCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIGOfQhDPNU8dSIwFfah7rVpuBXQjiJwCCsTPwXCMSA+86RH xU94KJaXsM8+sZjxWvoPuAFez0rcwzRt/uRvTJJuUl/oxHbDEHAVOnPw07M6rGjq fu2ueV2+G6tGPajWkkgWCQyDd6tUm45VEfREuBFffV/Lvbhklp2kfsTflCFTEjns A3JOB5Ipab2SpUXBfcRRJfy7QcgFymRxA1dGm60RpPGoyqUBgjV/02T3WDcfID5m aT2jm3HGvmySeD8dbhhtfXL41FAo53Ocx22u0Y2OAcM8tQYjzdsjHFLMju1YmeJR X3ESCv3X+/7LLgjEnrEGBCw+mJ3/yUQ4B5rrhMA= -----END CERTIFICATE-----Generated at Wed Nov 5 23:21:10 2025 by rpki-client