$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa File: d32f3f1b-47a5-3201-b5c4-5f710806e110.roa (raw, json) Hash identifier: oDv8cLL3QxWBRi0rh0NzK02VWRFHxH8cfZahlX3An6s= Subject key identifier: CA:05:42:01:85:D9:8F:95:CB:CF:7C:E6:DA:45:12:E3:3A:C3:BF:E0 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F4328584B8BE21162EA85D32A65DFD3C0 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 20127 IP address blocks: 69.128.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:11:62:ea:85:d3:2a:65:df:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=57423d1d-c6e5-4614-918c-efb18f5282ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:f5:bc:74:11:bc:13:cf:72:16:92:fa:c0: 4e:83:d0:cd:bc:d5:d7:5a:fc:5a:e6:66:ab:cf:0a: fe:9c:71:20:ba:df:1c:8a:12:f4:c4:c9:bd:74:75: 04:58:3f:83:42:84:43:05:0a:05:5e:dd:65:fe:1d: 76:ff:25:4c:9c:ab:38:33:c8:43:e2:3c:c5:63:bc: 38:73:f1:e3:fc:9d:35:9d:de:de:21:38:31:14:6b: cb:c6:6a:c1:ef:29:3c:59:51:0f:d5:03:09:a9:17: 18:27:4f:a5:2b:83:04:cd:5c:a4:e7:8f:5e:84:d5: 4a:cd:25:55:a6:14:87:e1:17:af:9e:9f:b0:aa:e9: 73:ac:fa:6e:8b:d9:4b:09:90:a7:13:09:2e:84:25: 8a:58:09:fc:e2:e9:9a:81:1b:5e:d4:13:c7:e3:88: 80:b8:75:40:7d:bd:9f:d3:c5:23:f8:78:e9:47:57: cd:e4:70:df:a5:38:d8:f4:bf:99:de:c4:e6:39:e8: 31:00:a0:e4:c1:fa:66:ce:a0:ff:d1:da:ee:96:9f: db:91:14:3a:e9:10:b0:18:f4:61:48:ea:7c:30:13: a0:79:b7:c1:05:52:15:7b:a4:6f:ec:2b:5e:7f:e8: c6:97:f4:1a:ae:49:d6:bd:06:fc:ea:24:3b:0e:2f: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:05:42:01:85:D9:8F:95:CB:CF:7C:E6:DA:45:12:E3:3A:C3:BF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 69.128.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:57:37:bc:9a:61:23:44:81:fd:81:84:88:99:bb:8e:94:a3: dd:1d:0a:dd:47:6e:c0:b0:d3:32:46:cf:de:22:64:72:79:3f: ca:28:6d:e4:82:ed:af:07:5a:52:ee:a3:3a:8a:8c:d1:77:98: ae:fd:c7:22:51:1c:e0:71:8d:20:90:89:47:37:69:b8:67:04: ec:74:f9:7c:2e:39:34:7d:e6:8b:ec:b9:86:76:65:23:b0:3b: b1:39:fa:3e:58:ef:45:a9:3c:75:b8:47:98:da:39:01:1e:d9: f1:da:8c:ea:e4:30:63:3b:80:37:e3:18:48:eb:5a:fb:af:3a: d5:98:31:9f:70:65:00:f7:0c:b9:0a:d6:0e:ca:e9:43:94:a6: 1d:89:09:8b:02:da:0b:0c:c6:4b:c6:87:85:9a:b3:72:08:32: 39:75:14:11:05:65:2c:c0:9c:0c:4e:99:13:3a:96:af:b2:9c: 8b:6c:f6:1f:c2:1d:cd:85:30:65:29:22:a8:0e:8e:3a:bb:59: 33:87:d7:29:26:14:74:38:da:a2:27:f1:80:3b:74:a9:48:ce: e1:87:7b:87:5f:77:bb:fb:6a:10:33:b3:4b:f9:fd:f9:1e:74: 50:59:95:65:ea:96:72:af:fc:bf:01:24:e9:99:ab:67:c7:37: 68:f0:2b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hFi6oXTKmXf08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NTc0MjNkMWQtYzZlNS00NjE0LTkxOGMtZWZiMThmNTI4MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05P1vHQRvBPPchaS+sBOg9DNvNXXWvxa5mar zwr+nHEgut8cihL0xMm9dHUEWD+DQoRDBQoFXt1l/h12/yVMnKs4M8hD4jzFY7w4 c/Hj/J01nd7eITgxFGvLxmrB7yk8WVEP1QMJqRcYJ0+lK4MEzVyk549ehNVKzSVV phSH4Revnp+wqulzrPpui9lLCZCnEwkuhCWKWAn84umagRte1BPH44iAuHVAfb2f 08Uj+HjpR1fN5HDfpTjY9L+Z3sTmOegxAKDkwfpmzqD/0drulp/bkRQ66RCwGPRh SOp8MBOgebfBBVIVe6Rv7Ctef+jGl/QarknWvQb86iQ7Di8J8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoFQgGF2Y+Vy8985tpFEuM6w7/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvZDMyZjNmMWItNDdhNS0z MjAxLWI1YzQtNWY3MTA4MDZlMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVXN7yaYSNEgf2BhIiZu46Uo90dCt1HbsCw0zJGz94iZHJ5P8oobeSC 7a8HWlLuozqKjNF3mK79xyJRHOBxjSCQiUc3abhnBOx0+XwuOTR95ovsuYZ2ZSOw O7E5+j5Y70WpPHW4R5jaOQEe2fHajOrkMGM7gDfjGEjrWvuvOtWYMZ9wZQD3DLkK 1g7K6UOUph2JCYsC2gsMxkvGh4Was3IIMjl1FBEFZSzAnAxOmRM6lq+ynIts9h/C Hc2FMGUpIqgOjjq7WTOH1ykmFHQ42qIn8YA7dKlIzuGHe4dfd7v7ahAzs0v5/fke dFBZlWXqlnKv/L8BJOmZq2fHN2jwKzk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:44 2025 by rpki-client