$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/323cde66-c5fc-350a-bd11-09a43f4eb07d.roa File: 323cde66-c5fc-350a-bd11-09a43f4eb07d.roa (raw, json) Hash identifier: 9+JF1AbWj4DosBPVe9IQI/IMMGHSlSCfp/4tAQmPYlM= Subject key identifier: 72:DC:D9:B4:78:99:98:14:69:61:14:03:47:72:00:73:72:9A:AC:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB907D1F34385EB69F4EEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/323cde66-c5fc-350a-bd11-09a43f4eb07d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 20214 IP address blocks: 65.34.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:07:d1:f3:43:85:eb:69:f4:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=98043f23-0af7-4d96-8e9d-265d1c3f4bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:65:98:28:24:b5:96:f3:70:86:e5:52:5f:63: 65:1a:51:84:02:8c:6f:7b:32:36:76:87:7b:06:65: c3:e5:44:3c:75:95:64:f1:f8:fd:5b:cd:d6:33:1b: 1d:67:77:7a:9c:19:a9:b1:9e:a2:f3:20:16:13:f4: b0:2f:70:7b:b5:59:83:12:fd:8d:48:89:6a:48:54: f8:9d:15:f8:d8:24:92:80:7a:f4:cf:82:5d:af:bb: 2d:49:be:f1:df:d8:da:38:20:fc:b4:5b:ca:4b:b6: e1:ab:1f:d1:0a:81:36:97:18:8c:f0:e8:c5:ea:76: 1f:91:8b:10:74:66:70:13:60:1d:3a:5d:c7:a3:60: 03:bb:7b:7c:0a:2b:07:c3:48:d8:5d:f5:f0:01:7d: 3b:bc:1a:c8:e7:23:d2:e5:79:0e:92:dc:28:83:83: 0f:b6:83:66:07:29:31:d0:c3:3c:d6:c5:14:08:f1: 64:ca:a4:e9:cc:de:b5:5b:18:4a:4c:29:47:28:0a: bc:92:34:a1:72:35:ac:18:f4:59:49:25:39:83:8e: 5f:0d:31:01:c8:7e:f2:5a:26:e0:40:a1:07:9a:78: ae:92:e8:cc:52:b1:5c:39:c2:75:de:30:96:26:b6: 9f:55:0f:8a:bf:59:45:12:45:3c:32:e3:79:51:df: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:D9:B4:78:99:98:14:69:61:14:03:47:72:00:73:72:9A:AC:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/323cde66-c5fc-350a-bd11-09a43f4eb07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 65.34.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:e1:ba:67:58:61:04:08:ae:3b:fd:6f:df:a1:71:1c:d7:1f: e6:8b:3a:2d:51:33:58:12:8a:cb:0c:1e:3a:27:ac:b0:99:bb: dc:0f:14:aa:8f:70:6e:eb:dd:42:bb:6e:b6:ce:85:c5:a7:3a: 37:6e:59:b4:ba:76:3b:82:73:5e:24:87:b7:e3:b7:50:bb:85: f3:d4:4b:a7:59:1a:44:1d:80:cb:81:6b:bb:fb:1a:e3:f9:60: 99:78:d9:0e:d0:ea:2e:99:6d:21:b0:0c:ac:9c:e8:89:06:79: a4:1e:21:f7:43:98:a0:e2:a9:24:fb:cc:cb:b3:49:e6:e1:be: 3a:b8:9d:7c:91:93:14:2d:38:0a:97:3c:20:18:13:ec:13:db: ef:34:a5:a8:b6:0e:30:28:3c:92:42:bf:da:37:0a:d8:ab:2e: ac:55:33:da:07:8e:94:40:91:73:3e:02:29:ed:26:da:c8:fc: 75:2d:b7:23:a5:4c:bc:e3:d1:65:b3:d2:9c:31:25:ce:77:42: f1:56:da:d1:d8:3a:02:0a:3c:62:9d:30:61:70:1a:53:0f:53: d1:9c:34:df:7f:3b:14:2c:41:6f:3f:cf:f3:75:87:c0:5d:ac: 3d:cd:1d:c9:cb:85:11:5f:aa:0e:85:fa:2f:b4:b9:06:f6:1d: 58:d5:3b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uQfR80OF62n07sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTgwNDNmMjMtMGFmNy00ZDk2LThlOWQtMjY1ZDFjM2Y0YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2WYKCS1lvNwhuVSX2NlGlGEAoxvezI2dod7 BmXD5UQ8dZVk8fj9W83WMxsdZ3d6nBmpsZ6i8yAWE/SwL3B7tVmDEv2NSIlqSFT4 nRX42CSSgHr0z4Jdr7stSb7x39jaOCD8tFvKS7bhqx/RCoE2lxiM8OjF6nYfkYsQ dGZwE2AdOl3Ho2ADu3t8CisHw0jYXfXwAX07vBrI5yPS5XkOktwog4MPtoNmBykx 0MM81sUUCPFkyqTpzN61WxhKTClHKAq8kjShcjWsGPRZSSU5g45fDTEByH7yWibg QKEHmniukujMUrFcOcJ13jCWJrafVQ+Kv1lFEkU8MuN5Ud9VdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLc2bR4mZgUaWEUA0dyAHNymqxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzIzY2RlNjYtYzVmYy0z NTBhLWJkMTEtMDlhNDNmNGViMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQSLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPhumdYYQQIrjv9b9+hcRzXH+aLOi1RM1gSissMHjonrLCZu9wPFKqP cG7r3UK7brbOhcWnOjduWbS6djuCc14kh7fjt1C7hfPUS6dZGkQdgMuBa7v7GuP5 YJl42Q7Q6i6ZbSGwDKyc6IkGeaQeIfdDmKDiqST7zMuzSebhvjq4nXyRkxQtOAqX PCAYE+wT2+80pai2DjAoPJJCv9o3CtirLqxVM9oHjpRAkXM+AintJtrI/HUttyOl TLzj0WWz0pwxJc53QvFW2tHYOgIKPGKdMGFwGlMPU9GcNN9/OxQsQW8/z/N1h8Bd rD3NHcnLhRFfqg6F+i+0uQb2HVjVO5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:54 2025 by rpki-client