$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/88b48ebc-8d78-33c3-8999-36f6c19edbf6.roa File: 88b48ebc-8d78-33c3-8999-36f6c19edbf6.roa (raw, json) Hash identifier: mI2pLiFVDyLKTenLYjjuJ+j3TxUr/ZlyPGZxJrm2oPg= Subject key identifier: C3:52:C5:94:EF:07:15:FD:D3:83:48:56:A1:FF:66:8A:F7:5E:CD:0F Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584B477C6BAC889DF663A698CCC8 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/88b48ebc-8d78-33c3-8999-36f6c19edbf6.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 25849 IP address blocks: 64.113.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6b:ac:88:9d:f6:63:a6:98:cc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=3adeb53f-a556-40e4-b0fd-c1b447f5bd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:0d:7c:78:b6:42:65:ab:ee:ae:81:83:09: 03:48:65:69:f3:53:61:cb:fa:7d:06:33:58:75:af: 00:06:be:40:12:13:29:9b:a1:d4:cb:25:15:c0:51: 65:33:92:52:87:13:36:56:2b:7e:8b:5b:e6:e1:8f: ba:41:43:5c:d7:95:30:0f:8b:ec:67:03:98:39:d8: ff:ac:df:59:6a:0e:53:8a:f4:36:fe:21:16:a0:f6: 95:b0:46:c6:93:69:26:48:90:da:96:fa:bc:51:d9: 84:a0:77:0a:11:96:ce:2c:31:86:00:ed:86:1a:56: 2a:3b:a4:4a:69:7f:f0:d4:5d:db:33:98:fe:a9:09: e4:47:11:ac:4c:78:0c:22:7b:84:c6:4a:14:ba:27: 61:cb:d5:b0:0e:eb:ca:c7:bb:28:be:f5:1e:dc:aa: 61:25:29:66:cd:23:37:c6:cd:fd:64:60:03:f8:56: 09:6b:dc:ce:9b:10:26:74:89:67:e9:47:61:df:89: 7a:aa:72:69:19:f2:2f:b0:8c:37:c4:b3:14:9f:6d: 37:43:70:fe:e0:db:4f:18:e9:71:8b:7d:79:f9:ad: 10:62:40:70:f1:7e:13:8a:38:e8:82:da:85:35:db: 19:cf:97:4e:79:65:99:ec:0a:9c:1a:6c:ec:a4:f0: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:52:C5:94:EF:07:15:FD:D3:83:48:56:A1:FF:66:8A:F7:5E:CD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/88b48ebc-8d78-33c3-8999-36f6c19edbf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fb:db:a1:47:38:33:51:67:a2:ec:85:bc:25:1f:8e:82:28: b6:34:93:42:b5:57:44:d8:e9:22:d1:1b:05:54:5d:50:e9:a9: d9:30:7a:b7:1b:cc:e6:42:9e:41:be:19:54:87:6e:e9:a4:05: 47:83:a8:9f:aa:34:59:5e:ef:14:08:15:07:68:32:3b:6b:a9: 66:94:84:a7:a7:91:4d:21:04:89:12:50:20:d0:f0:56:ad:b6: 19:36:08:8f:d2:ea:a6:0d:dd:48:2e:2e:af:f1:e4:5b:8d:11: a7:0c:75:48:50:2a:b5:6b:8c:5d:56:3f:72:73:92:79:b1:e0: a0:7e:de:b9:7e:50:43:03:1f:bf:d2:07:45:01:3f:e6:07:0a: 51:d6:0c:f9:ce:4f:51:8c:e2:89:c9:78:ff:f3:7b:70:25:3c: 32:3e:0e:3d:27:df:74:37:18:00:d4:c6:9a:4b:89:de:3e:2e: 0b:bd:ca:e1:94:a7:ae:b9:3e:93:44:54:c2:0b:d0:5c:a1:72: 87:90:8f:d0:7a:b2:b2:ca:66:28:cb:82:f9:cf:3f:5f:61:a8: d0:72:39:e8:8e:99:38:2f:fd:23:a0:61:d3:58:18:da:3f:cd: 12:d4:92:b1:12:75:b1:29:5e:d2:a9:20:f6:5b:c8:ab:d3:d4: 80:bd:6a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGusiJ32Y6aYzMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk M2FkZWI1M2YtYTU1Ni00MGU0LWIwZmQtYzFiNDQ3ZjViZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UoNfHi2QmWr7q6BgwkDSGVp81Nhy/p9BjNY da8ABr5AEhMpm6HUyyUVwFFlM5JShxM2Vit+i1vm4Y+6QUNc15UwD4vsZwOYOdj/ rN9Zag5TivQ2/iEWoPaVsEbGk2kmSJDalvq8UdmEoHcKEZbOLDGGAO2GGlYqO6RK aX/w1F3bM5j+qQnkRxGsTHgMInuExkoUuidhy9WwDuvKx7sovvUe3KphJSlmzSM3 xs39ZGAD+FYJa9zOmxAmdIln6Udh34l6qnJpGfIvsIw3xLMUn203Q3D+4NtPGOlx i315+a0QYkBw8X4TijjogtqFNdsZz5dOeWWZ7AqcGmzspPAedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNSxZTvBxX904NIVqH/Zor3Xs0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvODhiNDhlYmMtOGQ3OC0z M2MzLTg5OTktMzZmNmMxOWVkYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj726FHODNRZ6LshbwlH46CKLY0k0K1V0TY6SLRGwVUXVDpqdkwercb zOZCnkG+GVSHbumkBUeDqJ+qNFle7xQIFQdoMjtrqWaUhKenkU0hBIkSUCDQ8Fat thk2CI/S6qYN3UguLq/x5FuNEacMdUhQKrVrjF1WP3Jzknmx4KB+3rl+UEMDH7/S B0UBP+YHClHWDPnOT1GM4onJeP/ze3AlPDI+Dj0n33Q3GADUxppLid4+Lgu9yuGU p665PpNEVMIL0FyhcoeQj9B6srLKZijLgvnPP19hqNByOeiOmTgv/SOgYdNYGNo/ zRLUkrESdbEpXtKpIPZbyKvT1IC9ajE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:40:46 2025 by rpki-client