$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa File: 5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa (raw, json) Hash identifier: HrnMisbgkjRGHOc39RhpJREdD198JbjEinsO9oZwhoA= Subject key identifier: A3:5E:F0:54:E6:6C:4B:B7:2B:15:36:18:E6:35:DB:DB:A7:C0:71:01 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584B6B825F0B8685CB7CC46E7760 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa Signing time: Sun 05 Oct 2025 10:41:53 +0000 ROA not before: Sun 05 Oct 2025 10:41:53 +0000 ROA not after: Sat 03 Jan 2026 11:41:53 +0000 asID: 30456 IP address blocks: 64.112.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:82:5f:0b:86:85:cb:7c:c4:6e:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Oct 5 10:41:53 2025 GMT Not After : Jan 3 11:41:53 2026 GMT Subject: CN=0b3a6c43-2169-4cff-b0bd-f54f5614fb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:82:ad:0f:4b:04:c6:39:8d:1a:05:e1:af:fe: 7f:ef:95:2f:3c:83:f3:2f:6a:e7:40:ad:d5:7c:2c: 1a:de:4d:cc:d6:d3:73:25:0c:58:a6:82:a9:84:cb: d5:d0:00:de:36:ef:94:3b:db:ca:5b:6f:68:6a:22: 7a:20:d0:d5:51:63:db:b6:00:19:00:c7:43:3c:52: 83:5b:b8:bc:e5:e4:2c:fa:95:25:7a:e4:3a:fa:87: 77:97:f8:d0:e1:41:5a:fb:7a:89:48:de:f9:05:e3: 62:d7:d7:77:1d:31:e2:af:8f:52:a5:af:9c:ad:78: b0:27:a2:6f:50:b2:bf:d3:b7:27:53:5d:80:42:ec: 9d:99:41:5c:93:a7:8c:57:5b:62:f9:f6:34:e4:22: 92:ce:54:2a:1a:ad:96:aa:15:82:86:4a:35:60:f0: f5:2e:a2:0a:13:94:20:9f:a6:a9:a2:4f:1a:85:d7: 8d:0d:ba:3c:c5:09:12:c7:b0:e2:e8:71:b7:12:bb: ff:65:b0:07:52:81:c7:82:1c:a8:21:e2:46:cc:6d: 89:52:ae:91:bb:89:ac:9b:f4:81:5d:d5:2b:11:1b: e2:b5:d7:22:a2:4e:80:30:74:8e:16:bf:a6:1c:5e: 0a:ce:20:45:62:8a:31:c1:3b:6d:93:5c:ea:77:fa: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5E:F0:54:E6:6C:4B:B7:2B:15:36:18:E6:35:DB:DB:A7:C0:71:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:cd:99:44:e7:b2:48:04:43:50:38:3f:ae:f3:ca:1b:80:5a: 87:b0:c3:d1:02:6a:f7:38:f9:0b:d7:da:9b:fd:cd:40:06:4d: d3:3c:96:ac:87:3b:8e:49:1b:d9:db:ff:75:71:b1:ed:a4:49: b3:5c:49:11:f6:8a:80:15:68:8b:df:84:5a:b4:37:9c:3a:75: b0:09:07:6e:3c:23:fd:72:0e:8d:8a:3e:07:d4:78:7e:3f:e8: e2:70:ee:1e:7f:47:05:d9:e3:95:41:ec:3a:a0:c3:25:a5:70: ff:9b:14:a1:a4:24:01:70:6b:97:ce:ef:56:9f:fb:fe:69:7e: 7b:24:15:cd:c2:66:cd:40:1a:aa:a6:f5:3b:87:22:d9:23:4d: de:62:5b:84:96:4f:be:18:f7:b2:b0:d2:f8:db:7d:dd:a4:02: ea:51:67:a6:d4:87:2f:40:0f:d6:fe:eb:69:3b:00:e3:93:3c: cd:aa:ed:ee:42:3f:dd:93:de:39:59:66:12:9c:f3:04:ec:ed: a9:8f:53:7c:15:89:c8:e7:82:24:21:1d:9c:89:a6:32:7a:57: aa:35:ca:d8:6b:d0:75:ae:e3:ea:89:fa:de:66:ee:29:38:54: 90:f9:09:6c:a3:88:fb:17:5e:ba:32:62:9a:ba:3b:c9:04:c2: 1a:3c:e0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrgl8LhoXLfMRud2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI1MTAwNTEwNDE1M1oXDTI2MDEwMzExNDE1M1owLzEtMCsGA1UEAxMk MGIzYTZjNDMtMjE2OS00Y2ZmLWIwYmQtZjU0ZjU2MTRmYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4KtD0sExjmNGgXhr/5/75UvPIPzL2rnQK3V fCwa3k3M1tNzJQxYpoKphMvV0ADeNu+UO9vKW29oaiJ6INDVUWPbtgAZAMdDPFKD W7i85eQs+pUleuQ6+od3l/jQ4UFa+3qJSN75BeNi19d3HTHir49Spa+crXiwJ6Jv ULK/07cnU12AQuydmUFck6eMV1ti+fY05CKSzlQqGq2WqhWChko1YPD1LqIKE5Qg n6apok8ahdeNDbo8xQkSx7Di6HG3Erv/ZbAHUoHHghyoIeJGzG2JUq6Ru4msm/SB XdUrERvitdciok6AMHSOFr+mHF4KziBFYooxwTttk1zqd/oxGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNe8FTmbEu3KxU2GOY129unwHEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvNWQ3ZTY4MjMtYTk0OS0z MTk3LWI3YTYtZTBhNWFiNjg4YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvNmUTnskgEQ1A4P67zyhuAWoeww9ECavc4+QvX2pv9zUAGTdM8lqyH O45JG9nb/3Vxse2kSbNcSRH2ioAVaIvfhFq0N5w6dbAJB248I/1yDo2KPgfUeH4/ 6OJw7h5/RwXZ45VB7DqgwyWlcP+bFKGkJAFwa5fO71af+/5pfnskFc3CZs1AGqqm 9TuHItkjTd5iW4SWT74Y97Kw0vjbfd2kAupRZ6bUhy9AD9b+62k7AOOTPM2q7e5C P92T3jlZZhKc8wTs7amPU3wVicjngiQhHZyJpjJ6V6o1ythr0HWu4+qJ+t5m7ik4 VJD5CWyjiPsXXroyYpq6O8kEwho84K0= -----END CERTIFICATE-----Generated at Mon Oct 20 01:55:19 2025 by rpki-client