$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa File: b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa (raw, json) Hash identifier: 1ZRlWAUAbzvZXKUiJqupFD8SvxfhMsBOXIyZ0miFtjw= Subject key identifier: 76:BA:40:94:37:A9:AB:3E:32:6C:FD:C3:75:69:8E:23:5C:98:99:1B Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B84E77ABE9B67C0F19921DB80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 206092 IP address blocks: 64.64.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7a:be:9b:67:c0:f1:99:21:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=8c6f172a-cd74-45be-b766-710f093d9048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2b:8a:81:6e:5c:28:e0:90:ba:74:85:da:a3: 6c:8e:58:55:18:a0:3a:61:46:f4:74:d3:17:85:df: 43:4b:7e:b3:fe:b3:42:65:bb:a6:95:0b:6d:d8:17: 50:65:cc:ad:22:99:7f:bd:52:90:50:ab:96:59:f6: bb:75:21:d4:4c:47:52:9b:c6:da:78:14:bc:ac:3b: 97:c4:70:b7:d0:d0:de:a2:85:96:73:97:df:c9:58: 74:fc:e3:f1:5f:92:76:03:a5:99:fe:74:44:de:e6: 71:5e:91:92:02:7d:db:ff:ea:95:4c:6d:6a:d0:80: 2a:a9:91:b2:67:9e:27:a4:43:58:38:5e:1b:19:50: a3:b2:3d:4a:97:b9:6b:5d:16:de:87:12:18:cf:7d: b2:25:b7:03:a0:51:18:20:a8:71:90:c8:45:a9:43: 90:d0:9d:e1:ef:af:b3:8b:ab:da:13:7d:d3:dc:84: dd:cf:b7:e2:18:43:c8:2b:a8:3e:ac:41:43:fe:bc: 37:64:35:ba:26:14:43:ad:ad:41:8c:fa:63:cf:e0: e1:96:16:35:b7:c9:61:a7:73:67:54:3b:58:53:57: 49:c9:75:fa:3f:d6:af:9a:4a:63:db:fa:c9:58:a6: e3:2b:df:1c:53:c5:60:4a:86:b3:ca:4f:ac:5e:d4: fd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BA:40:94:37:A9:AB:3E:32:6C:FD:C3:75:69:8E:23:5C:98:99:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 64.64.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1d:03:fe:bb:16:e1:78:21:bc:63:db:6b:5c:3a:d0:8d:b6: 66:bd:50:1d:48:a3:3e:6f:88:5c:3f:74:a2:24:46:8d:e0:49: c5:9b:0b:5b:91:fd:08:a3:06:4a:c8:1b:5f:ac:7f:ed:9e:25: 4d:81:d3:29:d7:57:45:0f:fd:87:a2:29:ad:0c:ec:63:eb:31: aa:89:d1:a0:5c:f9:88:57:bd:98:27:0d:d0:b6:29:34:06:28: b5:28:30:09:4b:d4:11:57:5d:5a:01:53:14:9a:b8:15:05:5c: 27:22:81:dc:5e:fa:29:94:1b:ae:da:25:50:6a:55:cd:d9:0b: 80:a1:99:e4:b6:bd:c0:99:a3:7b:25:21:80:62:3e:c6:48:a4: f5:99:8a:e8:80:07:16:12:2b:a6:66:66:0d:4f:5b:ec:d6:d8: c5:1e:26:7d:2e:2c:45:f3:97:b6:4d:98:7a:1c:47:6f:d8:b6: 9e:e3:d8:6e:ea:54:34:97:85:0b:ab:7f:c4:e7:fe:8a:64:2c: d5:cc:e2:5d:f5:8d:ba:5a:16:11:e3:19:67:9c:5b:b4:2a:90: e4:61:97:49:30:df:52:41:99:67:e3:5e:83:af:57:12:9a:22: bd:c7:01:52:af:5d:c9:4e:7d:3e:dc:3a:4b:e7:99:4e:a9:77: f5:34:03:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53q+m2fA8Zkh24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OGM2ZjE3MmEtY2Q3NC00NWJlLWI3NjYtNzEwZjA5M2Q5MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iuKgW5cKOCQunSF2qNsjlhVGKA6YUb0dNMX hd9DS36z/rNCZbumlQtt2BdQZcytIpl/vVKQUKuWWfa7dSHUTEdSm8baeBS8rDuX xHC30NDeooWWc5ffyVh0/OPxX5J2A6WZ/nRE3uZxXpGSAn3b/+qVTG1q0IAqqZGy Z54npENYOF4bGVCjsj1Kl7lrXRbehxIYz32yJbcDoFEYIKhxkMhFqUOQ0J3h76+z i6vaE33T3ITdz7fiGEPIK6g+rEFD/rw3ZDW6JhRDra1BjPpjz+DhlhY1t8lhp3Nn VDtYU1dJyXX6P9avmkpj2/rJWKbjK98cU8VgSoazyk+sXtT9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa6QJQ3qas+Mmz9w3VpjiNcmJkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYjE4YTg4OWEtNTczOS0z OTY1LThkZmEtZmE2ZTk4YzlhM2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUdA/67FuF4Ibxj22tcOtCNtma9UB1Ioz5viFw/dKIkRo3gScWbC1uR /QijBkrIG1+sf+2eJU2B0ynXV0UP/YeiKa0M7GPrMaqJ0aBc+YhXvZgnDdC2KTQG KLUoMAlL1BFXXVoBUxSauBUFXCcigdxe+imUG67aJVBqVc3ZC4ChmeS2vcCZo3sl IYBiPsZIpPWZiuiABxYSK6ZmZg1PW+zW2MUeJn0uLEXzl7ZNmHocR2/Ytp7j2G7q VDSXhQurf8Tn/opkLNXM4l31jbpaFhHjGWecW7QqkORhl0kw31JBmWfjXoOvVxKa Ir3HAVKvXclOfT7cOkvnmU6pd/U0A1I= -----END CERTIFICATE-----Generated at Sun Oct 19 22:49:30 2025 by rpki-client