$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa File: 80fdb0a9-6208-3f9e-a314-da6a439aac56.roa (raw, json) Hash identifier: fEvpp3RKOMvptfmGpIF0PeY2u40AU9sMEhZxNrxO41c= Subject key identifier: EF:7E:40:D1:77:EE:2D:CF:6C:88:D1:32:15:0D:BE:9A:D1:F7:22:9B Certificate issuer: /CN=eeff816f-42ef-47a6-ba61-7075adb85329 Certificate serial: 010D0C9F4328584B7C876444928B6FDFD5E846C0 Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 393457 IP address blocks: 64.59.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:64:44:92:8b:6f:df:d5:e8:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=f3d95e4d-3355-42c6-8330-e690f477545c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:b5:d8:95:d5:5f:19:c6:0e:cb:39:20:b6: 13:27:56:80:51:17:60:37:ea:c5:4e:3c:28:02:e4: 40:56:b0:ef:f4:a2:e6:73:c7:2f:97:99:27:9e:b9: d1:e8:fa:26:eb:34:ea:1a:b3:18:bc:c8:21:24:1e: 01:f6:ad:59:5c:c3:24:4a:de:3f:e1:8f:1a:b2:66: 11:e0:5b:da:a8:5f:a1:70:13:3a:87:59:17:e5:3b: a7:50:a0:d4:b9:b7:c9:33:95:c4:7b:5e:8f:9b:69: 62:d7:ce:ae:29:b2:87:40:7a:f9:02:91:bd:d7:e8: bd:e3:d1:71:07:60:46:96:87:1a:86:e4:7e:c7:49: 45:f0:f0:e4:51:86:20:1a:f8:6a:ef:4b:b0:e3:74: ef:c1:15:ca:76:0b:a5:fe:84:4e:b7:f9:31:2f:f2: b2:c0:0a:07:cc:da:db:75:d5:31:54:37:f0:52:47: a7:cc:a7:13:70:4c:af:f8:3e:7a:5e:f4:7f:61:b6: 16:cb:50:36:e7:6d:7c:8c:53:3f:6d:4a:90:66:75: 25:b4:bc:f5:01:67:82:62:2b:f1:99:73:de:75:d5: a7:73:a1:31:fa:e8:fe:49:05:4c:ed:cf:1b:26:94: e8:f1:6c:36:fa:45:71:0d:6e:07:75:1e:06:14:36: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:40:D1:77:EE:2D:CF:6C:88:D1:32:15:0D:BE:9A:D1:F7:22:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl X509v3 Authority Key Identifier: keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer sbgp-ipAddrBlock: critical IPv4: 64.59.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:77:f8:d2:9c:96:7d:cd:62:44:98:48:64:a0:ee:cb:3a:6d: ea:c2:43:6d:2a:f8:ed:5f:54:5d:c9:74:39:d4:ed:7e:09:cf: 39:b5:17:ea:ed:6e:e6:77:1f:77:90:8d:6d:df:b2:ca:1c:b6: 65:a9:6f:57:67:0e:84:4e:81:c9:0d:0b:cb:a1:37:d2:4d:c6: 0a:e6:ce:9c:2b:51:ca:8a:b2:79:56:f0:6d:df:e0:d1:46:f8: 74:fb:05:26:d4:03:93:b8:45:ea:de:7e:7d:8e:81:aa:01:14: 8d:72:7b:59:54:4b:52:e7:e4:39:e1:48:85:2a:00:70:1c:8f: c5:cc:34:31:a1:4c:63:30:72:8d:15:11:58:02:69:59:3e:d4: 5e:bd:15:82:47:a2:c8:25:36:91:f0:05:71:38:39:d3:98:b4: c9:e6:ae:ad:2a:08:fc:35:af:75:9c:cd:c6:36:61:84:8b:88: 7e:d3:1a:c2:a9:04:bb:fa:b5:63:eb:ad:cc:f6:e3:c8:cd:0d: f8:4c:77:d6:4d:2b:90:a9:35:1d:73:5f:57:ec:76:d1:22:94: 32:07:e5:c9:ba:78:4b:2b:7f:ef:f4:55:63:33:9c:bf:54:48: 13:38:17:69:78:fd:0b:38:dd:bb:f1:e3:bf:7a:f4:a4:3b:90: 46:66:8d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2REkotv39XoRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1 MzI5MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZjNkOTVlNGQtMzM1NS00MmM2LTgzMzAtZTY5MGY0Nzc1NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2u12JXVXxnGDss5ILYTJ1aAURdgN+rFTjwo AuRAVrDv9KLmc8cvl5knnrnR6Pom6zTqGrMYvMghJB4B9q1ZXMMkSt4/4Y8asmYR 4FvaqF+hcBM6h1kX5TunUKDUubfJM5XEe16Pm2li186uKbKHQHr5ApG91+i949Fx B2BGlocahuR+x0lF8PDkUYYgGvhq70uw43TvwRXKdgul/oROt/kxL/KywAoHzNrb ddUxVDfwUkenzKcTcEyv+D56XvR/YbYWy1A25218jFM/bUqQZnUltLz1AWeCYivx mXPeddWnc6Ex+uj+SQVM7c8bJpTo8Ww2+kVxDW4HdR4GFDYmAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9+QNF37i3PbIjRMhUNvprR9yKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvODBmZGIwYTktNjIwOC0z ZjllLWEzMTQtZGE2YTQzOWFhYzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4 NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1 YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQDvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN3+NKcln3NYkSYSGSg7ss6berCQ20q+O1fVF3JdDnU7X4Jzzm1F+rt buZ3H3eQjW3fssoctmWpb1dnDoROgckNC8uhN9JNxgrmzpwrUcqKsnlW8G3f4NFG +HT7BSbUA5O4Rerefn2OgaoBFI1ye1lUS1Ln5DnhSIUqAHAcj8XMNDGhTGMwco0V EVgCaVk+1F69FYJHosglNpHwBXE4OdOYtMnmrq0qCPw1r3WczcY2YYSLiH7TGsKp BLv6tWPrrcz248jNDfhMd9ZNK5CpNR1zX1fsdtEilDIH5cm6eEsrf+/0VWMznL9U SBM4F2l4/Qs43bvx47969KQ7kEZmjXA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:23 2025 by rpki-client