$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa File: 2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa (raw, json) Hash identifier: AVcqw87m8xkjtBY+Qi+unETGT18FcrW1TxNrZVbMIYE= Subject key identifier: E0:A4:13:81:0C:7A:5D:76:7C:78:8F:53:8C:83:CE:7E:82:D9:DB:56 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584B4A471968F207D1517C4D5B40 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 396905 IP address blocks: 64.72.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:19:68:f2:07:d1:51:7c:4d:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=541c2e1e-8212-495a-ba49-36f65c6eac6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:03:4b:cd:1a:4c:d5:13:1f:fa:e1:97:33: 76:c2:11:fd:40:46:1a:f0:82:3e:31:49:66:da:bf: 29:13:c3:0d:56:08:8f:79:ec:67:92:cd:2c:56:55: d7:e8:13:9c:43:97:5a:0f:7c:d4:65:86:e3:03:bc: a5:be:19:87:47:b8:f7:15:b6:2b:87:96:5a:85:bf: 47:f0:ca:d8:c5:91:bb:27:b0:84:26:6a:50:c4:ca: 4c:b6:53:58:bd:e5:5c:f3:ad:59:08:2d:6c:2e:c1: d8:8e:ad:e3:eb:66:15:77:9a:3c:0a:b3:82:f6:bd: c9:97:e9:94:92:f0:19:4e:7d:e0:a7:54:d5:94:e8: e1:d8:14:9f:a9:b1:10:93:44:32:ab:9c:4d:31:b7: 85:28:21:69:0a:b9:2a:3e:87:77:39:4a:8e:5a:62: cf:e1:f1:e0:d9:5b:17:c5:d3:4a:57:60:ce:44:38: 00:b9:3b:05:d5:27:b4:3b:8d:71:38:1a:de:27:a9: 73:75:70:d4:67:13:44:a3:35:b2:97:c2:42:79:1c: 94:b6:8d:21:b2:ad:9f:b4:4c:ae:74:61:60:02:5c: 7e:f0:a2:1b:ae:80:cd:c0:2d:0a:38:b1:db:64:b9: 4c:a9:5b:db:33:a0:64:d1:fc:31:a6:a2:f5:b0:29: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A4:13:81:0C:7A:5D:76:7C:78:8F:53:8C:83:CE:7E:82:D9:DB:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 64.72.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:4d:19:34:a6:70:6e:e7:5f:32:a6:bf:70:e2:9a:40:32:77: d5:e7:bb:11:9a:7d:45:2f:09:3c:3d:70:4a:ca:81:7c:89:eb: 11:5a:06:c9:47:a4:df:eb:a8:a8:1f:86:cc:b0:04:0c:7a:b1: 81:fe:63:6f:51:04:6e:3b:f5:19:fc:58:af:f0:e8:97:f1:b9: b9:ab:03:81:c4:a4:7e:96:06:50:e2:9e:fa:e9:9c:c0:a1:db: 22:08:c8:91:1b:71:60:cd:de:1d:ec:49:2b:8e:77:af:31:79: 56:d2:80:f7:91:80:53:97:e5:2c:22:c7:74:c5:78:50:bf:dc: 32:e1:fc:b3:f5:2a:be:4e:94:e4:11:09:ca:5a:02:06:a4:0d: 14:c2:77:38:f0:ce:bb:79:25:7a:ff:82:e6:92:c0:d9:34:ff: ea:6f:68:4f:cc:55:0d:97:92:46:96:a8:40:5b:aa:9c:06:e4: 2e:e9:ed:2e:cf:2a:b2:04:c5:c9:aa:2f:21:9c:52:ea:b2:33: 36:16:db:c6:ea:38:16:63:55:55:2f:42:8e:c5:77:cf:e6:f5: d2:9d:18:bf:23:e0:2b:e0:10:33:32:94:6d:da:1b:fe:12:c1: f7:e1:3d:d9:af:02:00:78:0d:bf:fb:b0:2b:0e:32:83:c1:dc: 5a:70:f9:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxlo8gfRUXxNW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NTQxYzJlMWUtODIxMi00OTVhLWJhNDktMzZmNjVjNmVhYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gwDS80aTNUTH/rhlzN2whH9QEYa8II+MUlm 2r8pE8MNVgiPeexnks0sVlXX6BOcQ5daD3zUZYbjA7ylvhmHR7j3FbYrh5Zahb9H 8MrYxZG7J7CEJmpQxMpMtlNYveVc861ZCC1sLsHYjq3j62YVd5o8CrOC9r3Jl+mU kvAZTn3gp1TVlOjh2BSfqbEQk0Qyq5xNMbeFKCFpCrkqPod3OUqOWmLP4fHg2VsX xdNKV2DORDgAuTsF1Se0O41xOBreJ6lzdXDUZxNEozWyl8JCeRyUto0hsq2ftEyu dGFgAlx+8KIbroDNwC0KOLHbZLlMqVvbM6Bk0fwxpqL1sCk3QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCkE4EMel12fHiPU4yDzn6C2dtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMmU0YmJiNzQtY2NiYy0z NTZlLThmMzUtZTk1ZjYyMGMxYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANpNGTSmcG7nXzKmv3DimkAyd9XnuxGafUUvCTw9cErKgXyJ6xFaBslH pN/rqKgfhsywBAx6sYH+Y29RBG479Rn8WK/w6JfxubmrA4HEpH6WBlDinvrpnMCh 2yIIyJEbcWDN3h3sSSuOd68xeVbSgPeRgFOX5Swix3TFeFC/3DLh/LP1Kr5OlOQR CcpaAgakDRTCdzjwzrt5JXr/guaSwNk0/+pvaE/MVQ2XkkaWqEBbqpwG5C7p7S7P KrIExcmqLyGcUuqyMzYW28bqOBZjVVUvQo7Fd8/m9dKdGL8j4CvgEDMylG3aG/4S wffhPdmvAgB4Db/7sCsOMoPB3Fpw+W4= -----END CERTIFICATE-----Generated at Wed Oct 22 05:00:50 2025 by rpki-client