$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa File: 956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa (raw, json) Hash identifier: Fv1n3ie3IVOxV9AAvotuTeVuzxSZRnAM4PoObUD6baY= Subject key identifier: 62:3A:42:89:B4:29:1C:AA:92:58:F7:EF:A7:D8:E6:81:C7:AF:05:1F Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584AFEE69FCD7D34769918950D80 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 16795 IP address blocks: 64.136.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9f:cd:7d:34:76:99:18:95:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=246c91d6-0715-4bdb-95fe-72bb9eac1e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:2e:a1:71:4d:d8:e9:9f:8f:6d:93:50:33: 7f:f0:50:25:27:ec:59:80:0e:f9:86:83:75:3e:12: 5d:d9:81:3c:4f:5e:e4:09:a6:f9:20:5d:ab:0b:1a: 4e:9b:ad:e5:c8:11:f0:fd:15:5f:64:5b:39:4f:7c: 24:62:ab:3c:96:b2:f2:7d:5f:5a:75:f6:f7:2b:ed: 6a:29:6b:de:80:90:05:b4:9e:0a:72:6d:c0:12:3a: ef:ee:1f:94:9e:61:75:6c:70:9a:c7:aa:20:66:ff: fd:8c:ce:d7:a5:aa:ae:c1:c8:e3:16:e5:90:80:38: f0:92:07:a5:b1:aa:1d:cd:3d:d9:32:62:7b:cf:13: 7b:e4:bd:94:ad:4f:ed:14:50:49:c0:05:92:04:32: 77:11:f4:30:fe:e9:0a:cf:7b:f4:a8:e6:0a:5c:3f: 76:08:2f:de:3f:e5:2e:61:81:96:c5:c0:07:df:f8: 89:ef:50:8e:d3:a1:96:8e:55:58:7d:eb:3f:e8:16: 5f:0e:ad:4d:bf:95:e4:fe:8b:e3:55:75:39:2c:65: f9:f2:f3:27:d7:f4:42:48:6a:a9:f2:3f:98:51:ef: 58:c4:f7:41:d2:cb:8d:54:2e:81:56:1e:0f:91:7c: 33:19:c3:56:1d:96:63:e0:7b:b7:63:f4:c1:89:53: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3A:42:89:B4:29:1C:AA:92:58:F7:EF:A7:D8:E6:81:C7:AF:05:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:16:ed:37:76:94:3b:42:cb:42:84:76:70:3e:4a:86:b4:3d: c2:7a:7e:60:4e:6a:c2:20:2f:59:10:8b:ff:90:6d:ee:78:d8: 25:05:17:af:a8:5c:e1:89:07:0a:3c:d2:2a:a2:14:3c:a1:b9: b1:df:39:bb:86:7d:a0:cf:ae:29:7e:3a:80:51:3b:de:4b:76: ad:a2:fd:01:6a:5c:2c:00:40:12:1b:38:db:88:b3:74:c8:ae: 8d:cc:fc:a7:e5:15:98:1c:d7:8f:46:4c:55:bf:f4:3d:4b:ed: bc:3a:31:e5:91:3b:69:38:89:5b:49:66:ad:58:48:66:b7:44: 07:ed:3e:a7:c5:44:41:d3:3b:74:ff:b9:f3:9d:96:fb:db:ce: ff:6b:58:28:7c:ab:f2:2b:80:f9:39:7e:85:68:6e:89:6c:ad: 5d:20:e0:9e:fd:3b:1d:99:96:01:90:77:3f:56:81:7d:37:98: ed:ba:d7:bf:67:3e:df:81:44:c8:59:62:50:38:36:ed:ce:5e: b2:73:82:a1:b9:de:86:33:27:bb:0f:21:0a:9a:b9:e0:17:46: 23:f1:7c:04:4e:af:3e:f6:7d:e9:05:b1:2b:f7:b4:0d:97:0f: cc:33:96:ca:7b:46:cf:5c:ed:7f:b1:35:ec:a8:d6:9c:e4:b1: ae:3e:35:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5p/NfTR2mRiVDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MjQ2YzkxZDYtMDcxNS00YmRiLTk1ZmUtNzJiYjllYWMxZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVsuoXFN2Omfj22TUDN/8FAlJ+xZgA75hoN1 PhJd2YE8T17kCab5IF2rCxpOm63lyBHw/RVfZFs5T3wkYqs8lrLyfV9adfb3K+1q KWvegJAFtJ4Kcm3AEjrv7h+UnmF1bHCax6ogZv/9jM7XpaquwcjjFuWQgDjwkgel saodzT3ZMmJ7zxN75L2UrU/tFFBJwAWSBDJ3EfQw/ukKz3v0qOYKXD92CC/eP+Uu YYGWxcAH3/iJ71CO06GWjlVYfes/6BZfDq1Nv5Xk/ovjVXU5LGX58vMn1/RCSGqp 8j+YUe9YxPdB0suNVC6BVh4PkXwzGcNWHZZj4Hu3Y/TBiVP41wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI6Qom0KRyqklj376fY5oHHrwUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTU2YzJkYzYtZmQyYi0z ZmJkLThkYzgtNmYwYzQ2M2MxNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQW7Td2lDtCy0KEdnA+Soa0PcJ6fmBOasIgL1kQi/+Qbe542CUFF6+o XOGJBwo80iqiFDyhubHfObuGfaDPril+OoBRO95Ldq2i/QFqXCwAQBIbONuIs3TI ro3M/KflFZgc149GTFW/9D1L7bw6MeWRO2k4iVtJZq1YSGa3RAftPqfFREHTO3T/ ufOdlvvbzv9rWCh8q/IrgPk5foVobolsrV0g4J79Ox2ZlgGQdz9WgX03mO26179n Pt+BRMhZYlA4Nu3OXrJzgqG53oYzJ7sPIQqaueAXRiPxfAROrz72fekFsSv3tA2X D8wzlsp7Rs9c7X+xNeyo1pzksa4+NfY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:31 2025 by rpki-client