$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/7e421b60-b473-3684-baab-6577d1f6c5e5.roa File: 7e421b60-b473-3684-baab-6577d1f6c5e5.roa (raw, json) Hash identifier: l1h5s334OY4MhxexygEteQJAeNAZ0/Jzhh0LqVddy98= Subject key identifier: EE:CB:C3:C2:E2:D2:4B:ED:C8:57:2F:9C:71:B6:40:4F:5D:D5:C5:E0 Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584B25FC32F085A45A8BB44F1600 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/7e421b60-b473-3684-baab-6577d1f6c5e5.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 61317 IP address blocks: 64.113.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:32:f0:85:a4:5a:8b:b4:4f:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=72d7fe24-de50-404e-bb3e-c907b392e346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:11:54:fe:b2:3c:dc:c7:1f:18:8e:84:c1:86: 04:6f:79:13:dc:c5:ac:97:51:8d:12:a7:d4:ea:67: 39:95:84:e9:ea:bd:f0:42:6f:c5:d6:b1:26:55:42: be:e4:47:e4:76:1b:03:27:62:1d:d8:5a:50:fb:9e: b1:c2:e1:db:b6:3e:02:8d:05:bb:a0:39:60:fa:64: 88:4f:0b:f8:00:69:94:13:a9:64:42:00:99:5d:30: e2:43:7d:9d:39:95:cd:cd:95:61:c6:42:95:1c:5d: 42:aa:bf:22:23:aa:b6:e1:3e:82:da:f3:93:ba:69: c9:cc:0e:ab:05:2d:3a:65:a1:25:8c:f1:27:53:b3: 52:55:79:c7:d3:25:e9:3a:b4:a1:7c:6f:9a:15:29: 06:86:f6:0e:41:5c:ef:e5:46:b6:41:a3:e2:5a:c6: ba:c7:62:23:24:ca:97:7e:91:8c:e3:ce:2c:c1:1a: d3:f8:e9:7c:ff:c8:0f:5b:d5:07:ff:8a:e2:bb:be: 89:83:3b:e1:e8:50:6c:80:53:88:c7:11:76:10:44: a0:44:68:65:06:bc:b0:df:d8:1b:b3:c5:42:d9:a7: ab:57:3e:ce:cb:91:b0:21:e4:40:53:81:ce:b3:41: 5a:00:dd:31:a6:92:dc:d9:42:ed:35:42:ce:b6:e4: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CB:C3:C2:E2:D2:4B:ED:C8:57:2F:9C:71:B6:40:4F:5D:D5:C5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/7e421b60-b473-3684-baab-6577d1f6c5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c2:37:b2:4f:e3:6c:69:17:1c:08:23:45:66:5e:f2:77:4c: 68:8e:5b:40:69:d7:dc:6b:0d:7e:6f:68:a1:d6:40:76:8a:ad: e7:35:04:ee:20:48:6e:64:a6:6c:b8:8c:c4:49:59:cf:2a:f4: 42:ed:bb:7d:f9:d5:8f:2a:56:48:82:a9:bf:a5:a9:86:bc:27: 05:98:d8:23:9e:b5:68:37:68:f6:cf:f4:dd:2a:d8:e1:06:86: b8:f1:2b:05:77:ce:7a:89:7f:15:7e:08:9f:87:5b:77:15:e1: 66:3b:a8:9d:77:fa:b8:cd:85:37:24:6c:e5:ad:67:63:93:08: f5:50:cc:0b:49:20:8c:c4:35:b5:28:10:a3:5b:33:69:d4:47: 15:cf:13:cb:06:b6:38:69:18:8e:0c:eb:73:2c:90:6c:cc:c6: b8:3f:3c:f1:a4:db:0c:e2:8f:dd:42:5e:e2:26:a3:eb:2b:7a: 25:8c:42:b2:fc:a3:a2:4a:d1:64:35:94:c6:5c:fd:54:32:96: 76:c0:18:f2:c2:25:66:25:c2:df:67:20:b3:98:95:9e:1b:85: 70:67:6f:fd:d8:cd:7e:5d:c6:fb:4a:c7:6d:7d:d6:bb:40:11: 44:3a:15:88:f7:af:09:5d:22:23:99:9d:6a:53:c5:e5:96:80: 37:36:ec:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DLwhaRai7RPFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NzJkN2ZlMjQtZGU1MC00MDRlLWJiM2UtYzkwN2IzOTJlMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xFU/rI83McfGI6EwYYEb3kT3MWsl1GNEqfU 6mc5lYTp6r3wQm/F1rEmVUK+5EfkdhsDJ2Id2FpQ+56xwuHbtj4CjQW7oDlg+mSI Twv4AGmUE6lkQgCZXTDiQ32dOZXNzZVhxkKVHF1Cqr8iI6q24T6C2vOTumnJzA6r BS06ZaEljPEnU7NSVXnH0yXpOrShfG+aFSkGhvYOQVzv5Ua2QaPiWsa6x2IjJMqX fpGM484swRrT+Ol8/8gPW9UH/4riu76Jgzvh6FBsgFOIxxF2EESgRGhlBryw39gb s8VC2aerVz7Oy5GwIeRAU4HOs0FaAN0xppLc2ULtNULOtuTYJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7Lw8Li0kvtyFcvnHG2QE9d1cXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvN2U0MjFiNjAtYjQ3My0z Njg0LWJhYWItNjU3N2QxZjZjNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzCN7JP42xpFxwII0VmXvJ3TGiOW0Bp19xrDX5vaKHWQHaKrec1BO4g SG5kpmy4jMRJWc8q9ELtu3351Y8qVkiCqb+lqYa8JwWY2COetWg3aPbP9N0q2OEG hrjxKwV3znqJfxV+CJ+HW3cV4WY7qJ13+rjNhTckbOWtZ2OTCPVQzAtJIIzENbUo EKNbM2nURxXPE8sGtjhpGI4M63MskGzMxrg/PPGk2wzij91CXuImo+sreiWMQrL8 o6JK0WQ1lMZc/VQylnbAGPLCJWYlwt9nILOYlZ4bhXBnb/3YzX5dxvtKx2191rtA EUQ6FYj3rwldIiOZnWpTxeWWgDc27M8= -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:55 2025 by rpki-client