$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa File: a29feace-471c-3bbd-813c-81620749951b.roa (raw, json) Hash identifier: upA4Jw7EojCqJrg6gOR0EO5d0SUtRnjBTEd4KNs/Skw= Subject key identifier: 23:CD:51:EA:74:99:37:A6:50:B3:15:9D:48:4F:3B:24:36:45:42:0C Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584B540C65DE571DFC88B16B4100 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 4213 IP address blocks: 97.64.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:65:de:57:1d:fc:88:b1:6b:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=612f02a0-3a02-44f6-a1c9-3a594b4265c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:2b:e2:6f:74:eb:06:27:a6:b0:34:c4:77: ed:41:a7:ad:d0:cc:2f:4e:18:4b:62:82:28:96:9d: 33:3c:98:8b:54:c1:b4:4b:07:d5:43:a7:bc:70:e7: 99:0e:c8:e0:33:78:69:61:0f:85:69:d4:7a:1e:44: e2:ee:8d:64:c9:7c:9c:e7:9b:0b:bd:72:48:87:a6: 7f:52:b9:b7:78:e3:a3:46:4b:74:13:74:1d:97:9a: 55:19:49:bb:c2:3c:46:d7:c8:6c:92:d2:06:f8:fd: 81:78:8e:4c:34:25:73:f4:1f:87:c2:72:45:cd:e6: 0c:17:e8:18:7a:08:ba:c2:2d:b2:74:d2:fb:1d:16: c7:c1:62:6f:99:59:ea:f3:d0:8a:26:55:db:2f:a4: 32:bc:fc:fc:1b:b7:3c:d4:8d:b0:c1:9a:94:f9:9d: 4c:33:9d:94:e2:d2:b1:a7:92:80:12:a4:dc:45:13: e1:74:af:19:c6:a0:b8:05:1f:0d:39:00:e8:df:eb: 88:f7:02:c2:23:fb:4e:fa:79:2f:57:fd:27:63:4f: dd:bb:57:3d:df:c5:74:0b:bd:ba:48:64:9a:39:9f: 1b:a5:6a:d7:31:c4:44:28:7d:07:8c:27:bd:f2:59: 3b:e1:80:28:81:b5:e4:ed:9b:76:0a:ef:94:4d:25: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CD:51:EA:74:99:37:A6:50:B3:15:9D:48:4F:3B:24:36:45:42:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 97.64.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fa:fb:db:89:29:4b:63:74:11:b9:68:99:b5:54:37:59:cf: 7c:81:f6:9a:29:40:38:8b:e7:f8:12:02:0b:d2:a5:35:a8:47: ec:7e:b5:bb:db:18:03:f2:e4:4c:4d:94:38:ef:82:44:27:8b: 32:b4:63:96:43:a6:91:f6:88:ea:3a:88:91:54:d3:c7:1a:4b: df:aa:20:c0:f6:61:0e:c1:4b:ac:f6:00:bf:2a:5b:5a:26:77: cd:cd:69:e0:a2:9a:81:72:99:52:b6:82:f8:34:2b:a1:27:7a: d3:ee:e1:c5:1a:39:2f:c0:b5:db:b5:59:e0:3c:6d:49:dd:46: af:8d:34:2b:19:7b:36:79:72:16:bb:f5:d4:4d:a3:fa:ee:80: 6b:d6:0a:9a:14:c8:86:a2:65:5b:d0:d9:b7:67:d2:1d:68:4e: bc:d0:79:5c:9a:5b:4b:d7:a2:ed:75:db:91:f0:1f:c2:1b:7e: e5:34:7e:51:57:ba:e0:51:b9:fd:dd:e2:08:d1:75:99:c2:68: ad:88:21:38:98:34:b8:8e:44:f2:93:d0:28:c6:84:75:09:2e: 2c:fc:7a:32:54:46:11:88:a3:59:df:fa:62:fb:70:25:02:73: ca:bb:eb:04:b4:86:82:fe:3a:14:93:4c:58:2f:89:92:3e:42: 44:0b:b7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGXeVx38iLFrQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NjEyZjAyYTAtM2EwMi00NGY2LWExYzktM2E1OTRiNDI2NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu8r4m906wYnprA0xHftQaet0MwvThhLYoIo lp0zPJiLVMG0SwfVQ6e8cOeZDsjgM3hpYQ+FadR6HkTi7o1kyXyc55sLvXJIh6Z/ Urm3eOOjRkt0E3Qdl5pVGUm7wjxG18hsktIG+P2BeI5MNCVz9B+HwnJFzeYMF+gY egi6wi2ydNL7HRbHwWJvmVnq89CKJlXbL6QyvPz8G7c81I2wwZqU+Z1MM52U4tKx p5KAEqTcRRPhdK8ZxqC4BR8NOQDo3+uI9wLCI/tO+nkvV/0nY0/du1c938V0C726 SGSaOZ8bpWrXMcREKH0HjCe98lk74YAogbXk7Zt2Cu+UTSWmRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPNUep0mTemULMVnUhPOyQ2RUIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvYTI5ZmVhY2UtNDcxYy0z YmJkLTgxM2MtODE2MjA3NDk5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYUBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX6+9uJKUtjdBG5aJm1VDdZz3yB9popQDiL5/gSAgvSpTWoR+x+tbvb GAPy5ExNlDjvgkQnizK0Y5ZDppH2iOo6iJFU08caS9+qIMD2YQ7BS6z2AL8qW1om d83NaeCimoFymVK2gvg0K6EnetPu4cUaOS/Atdu1WeA8bUndRq+NNCsZezZ5cha7 9dRNo/rugGvWCpoUyIaiZVvQ2bdn0h1oTrzQeVyaW0vXou1125HwH8IbfuU0flFX uuBRuf3d4gjRdZnCaK2IITiYNLiORPKT0CjGhHUJLiz8ejJURhGIo1nf+mL7cCUC c8q76wS0hoL+OhSTTFgviZI+QkQLt3Q= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:38 2025 by rpki-client