$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa File: 53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa (raw, json) Hash identifier: q/rXO1/sB3ihePCDmzRlRjI3I9Rwg/i+x+L0/k1/4co= Subject key identifier: C1:68:7C:82:CD:30:A0:91:1B:AE:A3:8E:D9:45:B4:2D:6D:DA:79:B1 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584B821CD575294C8A8994E6F680 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46253 IP address blocks: 64.145.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d5:75:29:4c:8a:89:94:e6:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=dff76465-6e08-4d5c-8d9b-6d067276863e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:76:3b:5f:a3:12:22:13:13:3d:2f:fa:bd: 86:cb:d2:da:a4:ef:1c:7e:44:d7:fe:7e:43:02:a5: 69:08:2d:8e:9b:ec:59:bd:a3:65:78:f6:00:ff:2a: 02:dd:5a:9e:1f:57:c8:eb:a2:4a:8c:9b:ec:69:1a: 23:b4:a7:c3:dd:21:f2:91:af:38:f1:b4:7a:cd:9e: 65:7b:d4:cf:6c:fc:04:7d:94:2d:d0:e5:0d:5e:06: d2:a9:eb:38:4e:23:2b:e6:9f:42:56:74:90:f2:81: 89:93:cc:c1:61:b7:a5:1e:45:f7:d4:1b:fb:ee:28: c8:06:14:eb:a0:5f:bd:3b:2d:eb:65:87:d0:cb:ad: d1:44:3a:26:a7:89:88:b2:c9:01:0a:41:7c:74:1f: 4b:19:b0:25:c5:e5:31:64:e1:2f:8f:dd:16:1d:f9: 0d:e6:dd:ef:97:f6:48:e7:37:79:5a:c4:9e:54:77: 3a:13:f0:55:a8:26:01:6e:56:9d:01:37:5c:48:0b: ea:b2:2f:89:e4:ea:ca:6d:ae:e7:a1:a1:29:d3:74: 71:1f:0a:a9:38:34:61:0c:bf:0a:a5:94:18:4d:ef: 79:33:45:57:54:c9:34:f5:5d:56:5f:50:f5:6c:21: c7:f1:b5:9c:18:90:36:33:f3:14:af:d2:c5:87:a7: d7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:7C:82:CD:30:A0:91:1B:AE:A3:8E:D9:45:B4:2D:6D:DA:79:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d0:57:d2:7f:e5:c6:c1:80:12:13:05:52:e0:ad:b8:c8:f2: 00:96:ae:c6:fb:69:13:ce:15:d2:b9:95:47:1d:d2:9a:ed:5d: eb:14:c6:ab:64:f7:cc:51:31:3c:88:31:c1:60:eb:21:c0:96: 72:fd:88:83:ed:fb:e6:3a:be:ce:f6:cb:5c:6b:cb:62:0f:01: c4:58:1a:dd:83:02:c2:d1:db:38:b9:4a:2a:79:d6:38:f4:4e: 14:e4:20:05:cd:be:f4:9b:0d:33:9e:49:9a:2c:4f:ca:0c:67: 96:97:44:fc:be:06:e5:de:08:d6:8a:fc:2a:ce:86:94:ff:6e: 53:3b:71:85:b5:e0:8e:2b:3e:19:31:ea:79:1d:06:15:a6:6a: e2:a2:07:42:7a:9a:f7:e7:c9:d9:db:7e:83:f8:45:7d:91:79: a8:42:5f:68:8e:a8:c4:64:5f:43:db:16:ae:eb:3f:d8:6c:67: 0d:35:e5:fe:3c:7e:05:8b:68:2f:83:a2:2a:0e:21:f8:43:fb: 7c:f0:e8:8c:72:5e:cd:27:0b:cc:82:fa:86:06:ba:c3:f1:2d: 19:02:b9:30:c0:01:34:ca:0c:1b:bc:ec:31:69:ab:f7:4b:48: 79:80:7e:2f:70:96:3e:12:aa:3c:f4:cd:77:5e:d8:01:55:8f: 6a:67:27:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNV1KUyKiZTm9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZGZmNzY0NjUtNmUwOC00ZDVjLThkOWItNmQwNjcyNzY4NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW92O1+jEiITEz0v+r2Gy9LapO8cfkTX/n5D AqVpCC2Om+xZvaNlePYA/yoC3VqeH1fI66JKjJvsaRojtKfD3SHyka848bR6zZ5l e9TPbPwEfZQt0OUNXgbSqes4TiMr5p9CVnSQ8oGJk8zBYbelHkX31Bv77ijIBhTr oF+9Oy3rZYfQy63RRDomp4mIsskBCkF8dB9LGbAlxeUxZOEvj90WHfkN5t3vl/ZI 5zd5WsSeVHc6E/BVqCYBbladATdcSAvqsi+J5OrKba7noaEp03RxHwqpODRhDL8K pZQYTe95M0VXVMk09V1WX1D1bCHH8bWcGJA2M/MUr9LFh6fXowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFofILNMKCRG66jjtlFtC1t2nmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvNTMxMjVkNmUtMTMzZi0z NGI2LTllYzgtMGYxYjNhODA4ZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/QV9J/5cbBgBITBVLgrbjI8gCWrsb7aRPOFdK5lUcd0prtXesUxqtk 98xRMTyIMcFg6yHAlnL9iIPt++Y6vs72y1xry2IPAcRYGt2DAsLR2zi5Sip51jj0 ThTkIAXNvvSbDTOeSZosT8oMZ5aXRPy+BuXeCNaK/CrOhpT/blM7cYW14I4rPhkx 6nkdBhWmauKiB0J6mvfnydnbfoP4RX2ReahCX2iOqMRkX0PbFq7rP9hsZw015f48 fgWLaC+DoioOIfhD+3zw6IxyXs0nC8yC+oYGusPxLRkCuTDAATTKDBu87DFpq/dL SHmAfi9wlj4Sqjz0zXde2AFVj2pnJ6k= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:28 2025 by rpki-client