$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa File: 3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa (raw, json) Hash identifier: Pm3eUQZIe/ozxDy6mDNnGZx7CCjLCeYYlcvSxWdYHyg= Subject key identifier: DD:FA:6A:1C:2D:C9:EA:D5:55:90:A2:84:3A:EB:22:6D:E8:6C:A3:07 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584B4E7724BA8C6C051B98BF7D80 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396185 IP address blocks: 64.178.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:24:ba:8c:6c:05:1b:98:bf:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=a91ca421-6875-4927-b6f9-d2b82a43d834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:17:e4:50:14:a7:93:d3:c6:57:e3:3a:c7:33: 9b:c2:5f:46:04:ad:77:4a:52:e6:aa:17:5c:61:a9: 51:7f:d2:af:09:d1:58:37:dc:85:27:d7:0a:46:9b: ad:c9:99:15:91:cc:15:b6:8a:ff:ad:7e:57:bd:33: 64:67:0c:10:e7:95:c6:a3:03:43:f5:70:a0:83:4e: 08:21:78:3c:98:19:b9:4e:b4:61:e9:f9:84:2b:27: 76:38:9c:3e:02:6a:58:dc:82:af:41:9c:0e:81:a1: fa:7b:ba:30:2e:4c:e3:30:24:13:c6:b0:c7:f9:1c: 32:b3:fb:b9:ef:88:48:8a:56:97:21:c5:39:c6:70: de:ff:90:eb:61:cd:9e:fd:0d:ed:99:f5:65:23:7d: be:b9:f6:fd:06:ec:95:22:18:1e:61:9c:48:c6:4a: 75:61:3d:f1:ef:90:98:57:3d:71:3d:cb:73:cf:fc: 75:36:4a:11:d3:f5:95:66:79:1c:0d:b5:2a:4b:7f: d0:cc:0d:8a:ea:97:3b:9c:ee:c1:12:b3:3d:4f:36: b1:89:4f:c5:12:6d:33:90:81:a9:80:6b:5f:a6:37: 13:8f:ea:c8:af:a0:44:3e:d4:81:49:32:6a:cf:df: 58:ee:6f:2c:15:ae:94:ee:b2:4d:e8:07:71:85:04: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FA:6A:1C:2D:C9:EA:D5:55:90:A2:84:3A:EB:22:6D:E8:6C:A3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 64.178.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a0:10:07:82:2c:ff:5d:f6:cb:48:a5:24:73:f1:ae:a5:79: 2b:36:f7:65:22:00:eb:7a:2b:51:7a:16:05:eb:04:26:67:4a: 17:b3:27:62:43:9a:d7:3f:5a:88:a0:85:67:31:f4:42:3f:15: ef:b0:2a:6d:c2:51:c8:77:8d:0b:46:8e:a1:0c:5d:03:c1:90: be:80:65:81:92:6e:4b:ff:66:f3:9e:33:5e:62:af:c7:b3:3d: e4:48:30:0a:af:63:1f:5f:a4:a7:95:9e:96:86:3b:8f:db:95: c9:b7:2c:fb:25:10:26:f7:c3:55:4d:ee:77:f7:b4:19:af:02: 0d:bb:89:58:b4:ca:4c:ed:d6:52:b1:01:45:c7:5c:af:6f:e1: 12:56:13:11:28:88:b3:49:68:18:c3:e4:43:e9:62:cc:ae:b6: db:b1:f3:6e:bf:07:41:22:fc:a5:c3:c3:19:22:f8:4b:51:c0: ee:03:70:f1:ab:97:50:3b:b9:26:7e:fd:74:35:f0:65:07:14: 56:19:16:8d:cd:f8:d4:12:6a:20:22:a1:82:04:69:d6:eb:35: 30:8a:b6:ba:3d:bd:87:6c:e2:b7:52:5d:3a:c9:16:c1:cf:5a: de:e2:38:a6:9a:d8:7e:c0:a8:a2:de:35:6b:ad:25:57:64:37: e9:ec:48:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyS6jGwFG5i/fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YTkxY2E0MjEtNjg3NS00OTI3LWI2ZjktZDJiODJhNDNkODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxfkUBSnk9PGV+M6xzObwl9GBK13SlLmqhdc YalRf9KvCdFYN9yFJ9cKRputyZkVkcwVtor/rX5XvTNkZwwQ55XGowND9XCgg04I IXg8mBm5TrRh6fmEKyd2OJw+AmpY3IKvQZwOgaH6e7owLkzjMCQTxrDH+Rwys/u5 74hIilaXIcU5xnDe/5DrYc2e/Q3tmfVlI32+ufb9BuyVIhgeYZxIxkp1YT3x75CY Vz1xPctzz/x1NkoR0/WVZnkcDbUqS3/QzA2K6pc7nO7BErM9TzaxiU/FEm0zkIGp gGtfpjcTj+rIr6BEPtSBSTJqz99Y7m8sFa6U7rJN6AdxhQQEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN36ahwtyerVVZCihDrrIm3obKMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMzg3MWQ1YmItMDllYy0z OWJmLTg1ODYtNmFhOWZjOTI1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLLmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECgEAeCLP9d9stIpSRz8a6leSs292UiAOt6K1F6FgXrBCZnShezJ2JD mtc/WoighWcx9EI/Fe+wKm3CUch3jQtGjqEMXQPBkL6AZYGSbkv/ZvOeM15ir8ez PeRIMAqvYx9fpKeVnpaGO4/blcm3LPslECb3w1VN7nf3tBmvAg27iVi0ykzt1lKx AUXHXK9v4RJWExEoiLNJaBjD5EPpYsyuttux826/B0Ei/KXDwxki+EtRwO4DcPGr l1A7uSZ+/XQ18GUHFFYZFo3N+NQSaiAioYIEadbrNTCKtro9vYds4rdSXTrJFsHP Wt7iOKaa2H7AqKLeNWutJVdkN+nsSNk= -----END CERTIFICATE-----Generated at Tue Oct 21 04:45:39 2025 by rpki-client