$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/378c976a-d982-36d5-a250-f2a0fedc1089.roa File: 378c976a-d982-36d5-a250-f2a0fedc1089.roa (raw, json) Hash identifier: S3S9HeABRCuef1bjdUUotEBW8lJ70dJ4z05A/fKKmh4= Subject key identifier: 9F:E0:AA:07:8F:2E:11:29:E3:DD:CD:22:5F:AB:C8:AB:2E:D0:61:A3 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584AFF16EF73887E8F158D05E260 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/378c976a-d982-36d5-a250-f2a0fedc1089.roa Signing time: Wed 27 Aug 2025 14:38:06 +0000 ROA not before: Wed 27 Aug 2025 14:38:06 +0000 ROA not after: Tue 25 Nov 2025 15:38:06 +0000 asID: 26967 IP address blocks: 64.136.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:16:ef:73:88:7e:8f:15:8d:05:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Aug 27 14:38:06 2025 GMT Not After : Nov 25 15:38:06 2025 GMT Subject: CN=db5e97e6-148c-430e-810c-ea2559636539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:35:a2:da:67:c1:e0:a1:48:b8:c8:ca:47: b5:ae:28:c5:48:6c:70:89:42:fd:34:0a:b0:ef:5f: 95:46:33:1e:95:b9:0c:92:c5:66:aa:37:f3:e6:4a: 1c:10:8a:a7:86:57:68:f9:2e:27:89:be:e4:f9:c0: ad:72:2a:af:b7:89:1d:88:10:2f:63:5f:bf:6d:5b: 3c:79:ba:8b:95:77:90:e9:11:67:3e:18:b8:95:26: 7a:4f:5d:ef:ce:b6:87:95:0c:d2:f1:0c:8b:3c:90: b7:b5:b7:fb:bd:64:a7:ac:2f:86:ae:b6:98:3f:31: 10:92:50:17:59:7f:7b:a7:7c:83:76:e2:66:33:3b: ef:60:ef:ea:e8:19:20:db:98:6f:a5:57:32:42:ba: 77:09:c9:65:91:1d:62:15:ca:4b:dc:88:14:5f:af: cc:f1:3c:7f:58:1f:66:80:8c:d6:bd:8b:77:66:3b: a3:a3:fe:ae:e5:40:2d:18:dc:b7:35:5b:ec:f2:5f: a5:80:bb:f6:e6:64:10:d7:5d:55:0f:04:4b:90:cb: 32:a1:16:6b:5e:e4:bc:dd:9f:9f:61:52:1c:ca:c6: 3a:fc:b4:9e:f5:db:21:aa:a9:3a:6d:63:e6:5b:6e: 27:94:99:4e:ef:cb:43:eb:e6:dd:88:e5:7b:9d:3a: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E0:AA:07:8F:2E:11:29:E3:DD:CD:22:5F:AB:C8:AB:2E:D0:61:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/378c976a-d982-36d5-a250-f2a0fedc1089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:03:ce:3e:49:4b:a4:61:5b:73:24:a5:de:67:23:09:6a:33: f7:90:a5:91:64:0a:6f:ec:9e:6d:21:d4:9a:10:d1:7e:2f:d0: c9:66:58:f6:1f:90:b0:85:31:49:9a:e4:bf:9c:57:05:aa:80: 4b:00:ee:f0:d8:18:04:86:99:9d:9d:de:04:c6:0d:6d:ec:98: e7:16:c9:49:44:80:ca:f0:de:f1:0c:64:13:a1:67:c5:f2:7b: 41:57:2b:c4:8c:6f:a3:8f:f3:69:d2:0b:91:2b:fe:b4:9c:a1: 6a:0d:27:11:57:dc:bb:e4:46:39:2c:99:e9:ef:c0:df:1a:b5: 78:1e:fe:f1:c7:91:c1:83:f9:73:a7:50:bb:4d:ac:9b:39:ee: 1c:b2:23:71:17:19:34:5b:cc:bc:ed:cb:a4:53:a2:d3:a0:3a: 8d:b0:d8:33:70:e9:5b:c2:00:50:f3:f0:27:9a:01:10:f6:7b: 6a:be:d5:b3:e0:38:e1:a2:f2:b5:05:2e:b3:ac:7d:16:32:ae: e7:c8:64:b6:a5:d9:e8:f6:6e:ce:30:30:5d:2a:e0:ac:b3:c8: b0:06:65:57:f6:90:1b:18:47:39:29:c4:3b:cb:dd:a0:da:74: 05:7c:05:b4:7f:83:dc:0c:27:f9:df:cb:34:42:2b:05:4c:33: ad:04:d2:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/Fu9ziH6PFY0F4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDgyNzE0MzgwNloXDTI1MTEyNTE1MzgwNlowLzEtMCsGA1UEAxMk ZGI1ZTk3ZTYtMTQ4Yy00MzBlLTgxMGMtZWEyNTU5NjM2NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+U1otpnweChSLjIyke1rijFSGxwiUL9NAqw 71+VRjMelbkMksVmqjfz5kocEIqnhldo+S4nib7k+cCtciqvt4kdiBAvY1+/bVs8 ebqLlXeQ6RFnPhi4lSZ6T13vzraHlQzS8QyLPJC3tbf7vWSnrC+GrraYPzEQklAX WX97p3yDduJmMzvvYO/q6Bkg25hvpVcyQrp3CcllkR1iFcpL3IgUX6/M8Tx/WB9m gIzWvYt3Zjujo/6u5UAtGNy3NVvs8l+lgLv25mQQ111VDwRLkMsyoRZrXuS83Z+f YVIcysY6/LSe9dshqqk6bWPmW24nlJlO78tD6+bdiOV7nTr8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/gqgePLhEp493NIl+ryKsu0GGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMzc4Yzk3NmEtZDk4Mi0z NmQ1LWEyNTAtZjJhMGZlZGMxMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIitMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsDzj5JS6RhW3Mkpd5nIwlqM/eQpZFkCm/snm0h1JoQ0X4v0MlmWPYf kLCFMUma5L+cVwWqgEsA7vDYGASGmZ2d3gTGDW3smOcWyUlEgMrw3vEMZBOhZ8Xy e0FXK8SMb6OP82nSC5Er/rScoWoNJxFX3LvkRjksmenvwN8atXge/vHHkcGD+XOn ULtNrJs57hyyI3EXGTRbzLzty6RTotOgOo2w2DNw6VvCAFDz8CeaARD2e2q+1bPg OOGi8rUFLrOsfRYyrufIZLal2ej2bs4wMF0q4KyzyLAGZVf2kBsYRzkpxDvL3aDa dAV8BbR/g9wMJ/nfyzRCKwVMM60E0sM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:10:25 2025 by rpki-client