$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa File: 9faef993-81b7-3486-a305-4bb2df44e2a6.roa (raw, json) Hash identifier: dJZlu6WCvpGbNCNFbpNehUX47iKqzH7HxVL3og/jXt4= Subject key identifier: 76:6C:57:DA:D9:64:4F:B5:35:E9:03:80:DE:10:D2:45:52:F1:8D:C3 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584B4FDC7A4C700E112EBB16EC40 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 55039 IP address blocks: 64.190.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7a:4c:70:0e:11:2e:bb:16:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=82a5cc47-5bd2-47d0-906d-3a3609db3e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:a2:3f:e1:4f:74:ce:0d:bf:15:50:e8:8e: ef:bf:1c:70:d1:a9:17:d3:96:7a:f1:3a:10:9f:65: 3e:33:37:51:15:2a:6d:c9:db:84:55:bc:61:80:61: 9b:a8:67:bb:9c:84:29:97:5c:ea:f2:8f:a9:59:41: 7b:45:d0:44:04:c5:c7:04:38:79:92:a2:c0:c9:6c: 00:97:e2:55:8e:52:70:cb:07:fa:32:a6:d8:c9:ff: 5c:7c:d2:68:d6:98:7a:b4:e8:be:8f:40:2c:fa:2a: 55:48:3e:fc:d1:2f:07:e0:64:de:41:b3:3c:bc:8e: e5:29:1d:7c:59:7c:15:d0:fe:70:48:b0:27:7b:74: f7:b7:03:fe:c9:c2:d4:eb:ae:f1:b8:eb:35:51:93: 98:48:0b:e6:c3:48:99:e5:72:08:a9:0c:e2:58:68: 2c:84:0f:ba:5b:06:45:e1:a5:4f:e2:4e:ac:d5:88: 2b:65:69:43:ea:9e:e0:38:bc:41:74:bb:2b:7c:b8: ab:a2:97:53:8e:33:d1:e1:f5:76:85:b8:fd:08:21: cf:ba:ba:0a:e3:e7:d4:6d:26:9b:dd:bf:39:9e:81: 12:fd:8d:4a:d8:b7:bc:7e:8d:e7:f6:a5:f8:7d:ab: d6:66:cb:ce:dc:f7:33:4d:34:4e:a4:3e:1b:8c:85: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6C:57:DA:D9:64:4F:B5:35:E9:03:80:DE:10:D2:45:52:F1:8D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 64.190.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a2:b8:22:a6:92:04:9b:43:3f:e0:c5:b3:09:8a:df:33:57: ce:c4:e1:88:93:ec:74:d1:8a:5f:a6:80:ff:17:e3:2b:39:2e: 55:b5:ac:5d:18:d5:c5:84:38:d4:30:ee:74:d5:ad:d8:1d:03: 17:2f:ea:3b:90:12:33:b0:e2:0d:60:52:9b:74:cb:00:a1:b2: a1:df:17:7a:b8:e4:59:68:2d:ad:46:bc:d5:11:6c:af:bc:ba: 1d:4f:69:8c:cd:5d:bb:15:84:ee:1c:85:59:9f:8a:75:50:33: 12:06:6a:19:19:2a:79:ab:65:43:4b:5b:88:6c:b5:f5:8c:c1: b9:6b:20:68:15:bc:03:2c:3c:6d:60:57:5b:12:d1:63:3d:89: 8a:e8:a2:b0:20:a0:fc:82:88:69:0d:8b:af:40:1f:89:ae:77: 1a:02:dd:1d:13:82:83:41:0c:d3:76:11:1b:35:61:04:84:ab: fd:08:14:73:2b:ed:ab:87:43:2b:a6:14:8a:2b:48:86:c0:6f: 08:65:c8:8e:1e:12:3b:d8:e6:b1:59:c0:9e:d1:95:d9:86:b1: 19:d4:73:89:e7:f1:0f:7c:68:83:c6:43:58:42:6d:d9:8e:6c: 0c:6e:6c:3f:07:b0:fc:02:15:f3:ff:63:52:48:7e:a7:8b:fd: b2:b1:1f:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HpMcA4RLrsW7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ODJhNWNjNDctNWJkMi00N2QwLTkwNmQtM2EzNjA5ZGIzZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9OiP+FPdM4NvxVQ6I7vvxxw0akX05Z68ToQ n2U+MzdRFSptyduEVbxhgGGbqGe7nIQpl1zq8o+pWUF7RdBEBMXHBDh5kqLAyWwA l+JVjlJwywf6MqbYyf9cfNJo1ph6tOi+j0As+ipVSD780S8H4GTeQbM8vI7lKR18 WXwV0P5wSLAne3T3twP+ycLU667xuOs1UZOYSAvmw0iZ5XIIqQziWGgshA+6WwZF 4aVP4k6s1YgrZWlD6p7gOLxBdLsrfLiropdTjjPR4fV2hbj9CCHPuroK4+fUbSab 3b85noES/Y1K2Le8fo3n9qX4favWZsvO3PczTTROpD4bjIUjRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZsV9rZZE+1NekDgN4Q0kVS8Y3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvOWZhZWY5OTMtODFiNy0z NDg2LWEzMDUtNGJiMmRmNDRlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQL4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2iuCKmkgSbQz/gxbMJit8zV87E4YiT7HTRil+mgP8X4ys5LlW1rF0Y 1cWEONQw7nTVrdgdAxcv6juQEjOw4g1gUpt0ywChsqHfF3q45FloLa1GvNURbK+8 uh1PaYzNXbsVhO4chVmfinVQMxIGahkZKnmrZUNLW4hstfWMwblrIGgVvAMsPG1g V1sS0WM9iYroorAgoPyCiGkNi69AH4mudxoC3R0TgoNBDNN2ERs1YQSEq/0IFHMr 7auHQyumFIorSIbAbwhlyI4eEjvY5rFZwJ7RldmGsRnUc4nn8Q98aIPGQ1hCbdmO bAxubD8HsPwCFfP/Y1JIfqeL/bKxH0U= -----END CERTIFICATE-----Generated at Tue Oct 21 09:08:31 2025 by rpki-client