$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e5af689c-c7f7-3133-aaec-4d729c08b79b.roa File: e5af689c-c7f7-3133-aaec-4d729c08b79b.roa (raw, json) Hash identifier: k/EAG8Ey+Z5d1+1R9DEU6S6KHCTb/Kh9WSQsIF52PIs= Subject key identifier: E0:9F:89:97:A0:7F:09:EE:69:91:25:B9:B0:95:86:BF:E7:D7:81:60 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B6797BF68CF5B59BE2FE34480 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e5af689c-c7f7-3133-aaec-4d729c08b79b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 36040 IP address blocks: 64.15.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:bf:68:cf:5b:59:be:2f:e3:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b9bc524e-0951-4178-8320-1acf0309c56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:63:8f:11:e9:a7:9b:cd:1d:0f:53:31:09: 0b:7a:dc:67:48:82:23:48:28:c3:17:a3:89:ed:92: 39:ad:b1:2f:28:56:b3:f3:5e:41:5f:14:a7:42:74: 0a:24:cc:f1:44:8c:b1:50:17:91:d8:df:0e:72:ff: 35:a1:bf:64:96:70:5c:e5:76:6f:98:36:6b:a0:0b: 70:a0:35:48:b4:f4:f0:28:e9:24:ac:33:47:5e:98: 13:e3:10:4a:4a:30:78:aa:3f:9e:95:23:42:6d:66: 67:94:e6:07:ee:2f:b5:aa:1d:58:0e:50:02:09:73: 29:2a:08:fe:f4:78:5a:24:ad:69:9a:9f:8f:1b:b9: c9:3d:42:86:33:e1:ce:23:91:03:8a:7d:f9:74:fc: dc:3e:c7:21:25:71:df:db:b4:8d:f5:42:71:bc:7d: a4:c2:d0:71:8e:97:51:ef:6a:c7:6e:b4:fc:28:eb: 1a:12:31:f9:44:48:0e:fc:15:62:88:42:59:f9:fc: 34:78:ae:d3:d2:6c:81:4d:f8:56:d7:2d:70:04:f6: 24:dc:0d:02:1b:a2:01:40:b5:b9:d1:4f:99:34:f5: 95:29:ba:d9:5e:54:d0:50:45:9e:7a:57:09:3b:f5: 45:5a:4c:51:88:19:60:54:a5:d2:5d:aa:72:94:bd: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9F:89:97:A0:7F:09:EE:69:91:25:B9:B0:95:86:BF:E7:D7:81:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e5af689c-c7f7-3133-aaec-4d729c08b79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 64.15.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8b:83:a8:10:13:3d:9a:59:e5:75:89:ad:36:6f:92:e8:da: a2:f9:37:ac:16:cf:36:4f:48:14:4b:2c:ed:54:2c:fa:c4:5a: e6:04:a5:1a:7c:0e:43:b8:7c:50:59:06:df:f3:84:8d:9c:43: a5:2a:83:5f:e3:9d:57:e7:a9:b5:e4:1e:0c:f1:08:81:17:e5: 2c:d9:5c:59:c0:22:cb:8a:5d:9e:e6:1c:1c:d6:56:30:33:80: a5:13:8d:92:c9:90:15:ae:92:43:a0:7a:e3:ed:af:49:ce:1e: ac:41:4d:d0:e7:fe:b9:5c:52:91:59:04:35:5d:29:67:23:c5: c2:aa:14:92:34:db:d9:db:5b:c5:10:55:e8:da:87:c3:00:7d: 5d:0c:da:d4:f7:29:33:c8:f3:60:70:64:be:25:80:e7:e8:d9: 31:3a:ea:e3:c1:42:13:55:8d:f1:4b:04:f5:e2:0c:ac:d5:11: 4e:d1:0e:a8:57:0a:69:c6:ce:43:d8:33:b2:d3:93:f4:9a:f2: 9a:c2:a1:27:44:d0:e1:23:df:b0:a2:62:9c:93:39:a6:58:82: 24:78:74:a7:fd:b7:74:03:87:c0:9e:1c:28:62:25:9a:ea:7b: 25:41:5c:16:2f:ee:8f:8c:ad:2c:6a:5e:eb:c5:8a:f5:2d:ad: f3:a9:78:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl79oz1tZvi/jRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjliYzUyNGUtMDk1MS00MTc4LTgzMjAtMWFjZjAzMDljNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iRjjxHpp5vNHQ9TMQkLetxnSIIjSCjDF6OJ 7ZI5rbEvKFaz815BXxSnQnQKJMzxRIyxUBeR2N8Ocv81ob9klnBc5XZvmDZroAtw oDVItPTwKOkkrDNHXpgT4xBKSjB4qj+elSNCbWZnlOYH7i+1qh1YDlACCXMpKgj+ 9HhaJK1pmp+PG7nJPUKGM+HOI5EDin35dPzcPschJXHf27SN9UJxvH2kwtBxjpdR 72rHbrT8KOsaEjH5REgO/BViiEJZ+fw0eK7T0myBTfhW1y1wBPYk3A0CG6IBQLW5 0U+ZNPWVKbrZXlTQUEWeelcJO/VFWkxRiBlgVKXSXapylL14ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCfiZegfwnuaZElubCVhr/n14FgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZTVhZjY4OWMtYzdmNy0z MTMzLWFhZWMtNGQ3MjljMDhiNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQA94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Lg6gQEz2aWeV1ia02b5Lo2qL5N6wWzzZPSBRLLO1ULPrEWuYEpRp8 DkO4fFBZBt/zhI2cQ6Uqg1/jnVfnqbXkHgzxCIEX5SzZXFnAIsuKXZ7mHBzWVjAz gKUTjZLJkBWukkOgeuPtr0nOHqxBTdDn/rlcUpFZBDVdKWcjxcKqFJI029nbW8UQ Vejah8MAfV0M2tT3KTPI82BwZL4lgOfo2TE66uPBQhNVjfFLBPXiDKzVEU7RDqhX CmnGzkPYM7LTk/Sa8prCoSdE0OEj37CiYpyTOaZYgiR4dKf9t3QDh8CeHChiJZrq eyVBXBYv7o+MrSxqXuvFivUtrfOpeKk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:22 2025 by rpki-client