$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa File: 285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa (raw, json) Hash identifier: bFisy2/tmnAOWoA3B5tZ4DvuLCT3uoLnOPcxgOoEtuk= Subject key identifier: 6C:76:9D:D5:21:2A:8D:55:60:5B:23:D3:4A:25:CB:15:44:E0:14:35 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584B75F5EB4ED2C52E679267D260 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa Signing time: Thu 09 Oct 2025 04:32:46 +0000 ROA not before: Thu 09 Oct 2025 04:32:46 +0000 ROA not after: Wed 07 Jan 2026 05:32:46 +0000 asID: 22079 IP address blocks: 64.136.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:f5:eb:4e:d2:c5:2e:67:92:67:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Oct 9 04:32:46 2025 GMT Not After : Jan 7 05:32:46 2026 GMT Subject: CN=fd7f5faf-7a75-4d18-a0c0-33ffaf5e1a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:ec:9a:7d:fc:75:b8:4b:fe:1f:fe:c4:55: 66:f1:38:2a:22:12:19:28:f9:c4:fd:df:bb:42:7a: 0c:5b:4b:b5:79:b1:4f:0c:cf:26:10:d3:e4:1d:7e: 13:28:7a:75:39:de:58:d2:34:32:06:f3:f6:a6:41: 93:45:b0:c7:b0:1a:e0:93:cd:b4:4d:dd:3f:66:e7: ad:3b:bd:9b:05:03:a8:52:b6:44:8e:4e:34:f8:ec: 34:8d:01:d2:14:39:1c:a3:f3:01:2c:77:c3:5c:1f: 29:cf:29:fc:50:e5:81:9c:41:95:24:a4:d4:4e:e1: 09:d9:26:4c:53:79:cf:e9:f1:f9:e8:e2:b5:ab:d1: ed:71:42:65:40:3f:e3:08:27:05:6b:b6:07:67:3a: f3:d5:4d:fa:1e:0d:71:5e:b2:a7:58:8c:16:2d:66: 52:fe:bd:72:bb:f2:4c:9e:70:90:e9:66:1c:b7:d7: 7d:d4:0f:4d:f1:32:33:f8:ee:b4:5c:6c:5a:83:cf: c8:f2:48:48:ad:bd:b5:b4:da:c8:46:42:28:ff:c0: c6:8a:8e:5f:ab:6f:06:e6:20:7e:30:e7:82:93:eb: 59:cb:09:93:f5:6b:3b:5a:d4:3b:61:04:8f:22:db: 6f:bd:4b:f1:89:10:88:19:93:2f:af:38:5a:d5:d5: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:76:9D:D5:21:2A:8D:55:60:5B:23:D3:4A:25:CB:15:44:E0:14:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.136.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e0:20:bb:3f:49:de:e8:04:59:22:0b:1e:c6:04:fb:5f:47: 78:b5:0b:35:6c:d2:82:8e:79:f2:43:4c:15:d5:6d:8b:40:b3: f2:ed:89:9a:78:fb:40:37:e4:33:50:62:61:18:5c:1d:f7:6f: 75:ba:87:8c:b8:06:8b:74:80:92:d6:5a:25:e8:23:4d:75:04: cd:23:f2:6b:1b:16:16:cc:8f:ab:90:67:a8:5a:ec:13:49:ec: 55:46:d2:fd:1e:ff:d0:93:8b:3e:e8:1e:b7:f7:83:e9:8c:0a: 3e:ba:de:0f:1c:1d:ed:a9:fb:d6:11:95:a5:5c:23:8c:8b:fc: 1f:6c:0d:34:36:35:0c:24:88:a9:8b:60:8c:fb:2a:47:6b:c3: 02:2e:73:8a:af:52:f4:42:ad:49:b3:7f:c1:3e:69:cb:73:7f: d9:0a:0b:1d:e8:e8:7a:22:26:ca:6e:66:de:64:29:7d:7c:3f: 87:57:d2:aa:55:9e:61:b6:b4:51:f0:af:d9:9a:ac:a7:a7:00: a2:5e:0b:e0:9a:49:40:a3:be:46:37:55:e4:6f:98:97:89:e3: ed:d2:a8:5c:fd:93:44:79:0e:9f:e3:b6:cb:ec:11:9c:5f:4f: f0:7d:c7:c2:6f:b4:0c:5a:3a:08:10:d8:f1:ac:53:19:36:fa: 06:77:5f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt19etO0sUuZ5Jn0mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI1MTAwOTA0MzI0NloXDTI2MDEwNzA1MzI0NlowLzEtMCsGA1UEAxMk ZmQ3ZjVmYWYtN2E3NS00ZDE4LWEwYzAtMzNmZmFmNWUxYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nnsmn38dbhL/h/+xFVm8TgqIhIZKPnE/d+7 QnoMW0u1ebFPDM8mENPkHX4TKHp1Od5Y0jQyBvP2pkGTRbDHsBrgk820Td0/Zuet O72bBQOoUrZEjk40+Ow0jQHSFDkco/MBLHfDXB8pzyn8UOWBnEGVJKTUTuEJ2SZM U3nP6fH56OK1q9HtcUJlQD/jCCcFa7YHZzrz1U36Hg1xXrKnWIwWLWZS/r1yu/JM nnCQ6WYct9d91A9N8TIz+O60XGxag8/I8khIrb21tNrIRkIo/8DGio5fq28G5iB+ MOeCk+tZywmT9Ws7WtQ7YQSPIttvvUvxiRCIGZMvrzha1dXp8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx2ndUhKo1VYFsj00olyxVE4BQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMjg1Y2I1YTUtM2UzZS0z ODk5LWI4Y2ItNDFkMWE5OTJjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrgILs/Sd7oBFkiCx7GBPtfR3i1CzVs0oKOefJDTBXVbYtAs/LtiZp4 +0A35DNQYmEYXB33b3W6h4y4Bot0gJLWWiXoI011BM0j8msbFhbMj6uQZ6ha7BNJ 7FVG0v0e/9CTiz7oHrf3g+mMCj663g8cHe2p+9YRlaVcI4yL/B9sDTQ2NQwkiKmL YIz7KkdrwwIuc4qvUvRCrUmzf8E+actzf9kKCx3o6HoiJspuZt5kKX18P4dX0qpV nmG2tFHwr9marKenAKJeC+CaSUCjvkY3VeRvmJeJ4+3SqFz9k0R5Dp/jtsvsEZxf T/B9x8JvtAxaOggQ2PGsUxk2+gZ3X14= -----END CERTIFICATE-----Generated at Tue Oct 21 12:48:29 2025 by rpki-client