$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa File: eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa (raw, json) Hash identifier: Gf+c94fklZzXVgXaN8r/WKFMH3+URJoqhqT+oOTK9N8= Subject key identifier: 54:42:23:AF:E0:A3:97:DB:78:71:F7:82:FD:0F:8C:74:D8:4F:55:6E Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584B477C737668AC43AD82BFF200 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 8075 IP address blocks: 64.18.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:73:76:68:ac:43:ad:82:bf:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=bf91ecb9-3f0a-417b-aabc-cfcb3b7881af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:71:3f:d7:81:b3:ea:d5:34:bf:97:37:00: c0:19:f4:57:31:28:37:b4:9d:96:9a:d0:2a:c4:6b: 28:7e:26:3f:dc:e5:4c:ee:f4:9c:0e:54:5b:6d:65: 80:7c:22:45:fe:84:8a:cb:fc:d9:f6:52:77:a3:fa: 9a:d7:18:08:4d:73:8f:3c:b4:85:9a:01:c2:77:a1: a4:3b:f3:15:19:45:8d:68:2f:90:ec:c2:6f:21:d0: 53:97:fa:e5:04:0c:a6:7e:06:5b:9d:98:e0:b4:5c: 92:f0:c9:7b:9b:19:9b:6b:bc:08:33:13:5d:08:f1: 56:6d:71:38:88:a4:ad:68:c2:e7:ce:25:79:24:32: 2b:96:9f:05:b4:7b:f5:d5:d8:d9:e7:42:38:35:18: ab:59:a1:e8:b3:c7:b3:fa:5d:59:3a:3d:73:64:0f: 67:fc:0d:0d:59:e5:be:1e:36:3a:05:2e:ce:5f:fb: a6:93:46:de:fd:98:88:17:36:e7:98:51:b5:df:92: 2f:7d:38:15:a3:2a:ae:95:c1:c6:95:a2:a5:a1:f8: 8a:8e:64:08:cb:a0:4d:79:9e:7e:8c:bc:6d:90:6e: d2:b3:f2:ae:d6:ff:22:f1:73:0b:39:a6:ff:43:17: 16:6f:36:76:b7:c1:3f:ea:96:22:01:b3:79:82:79: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:23:AF:E0:A3:97:DB:78:71:F7:82:FD:0F:8C:74:D8:4F:55:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 64.18.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d7:86:08:4f:30:97:d6:9b:9e:29:ec:a2:e4:9f:1a:d7:01: b7:0e:0f:32:9c:89:fa:01:54:fc:33:43:41:db:5f:73:9b:77: af:06:d9:65:f3:18:31:78:80:ca:91:2e:2f:8b:dc:6b:b1:dc: 5c:e2:eb:bd:90:85:f6:20:29:7d:27:0b:e6:4b:27:18:a1:b3: 03:36:84:7e:4f:02:53:f9:b7:44:5b:d8:95:03:de:d6:45:4b: b2:e2:b8:f6:3a:a1:72:e8:ca:4b:a2:75:fc:b3:3c:da:b5:95: b5:cc:a6:b4:59:63:1f:f2:a1:c5:3c:01:60:ef:43:59:3e:f6: 9e:1b:63:ff:94:ec:2d:c5:81:eb:7b:97:c6:40:3f:9d:42:09: bc:0d:ca:05:43:3c:99:e1:5e:e8:d1:91:06:c5:96:eb:7b:7c: 11:a1:31:54:77:5d:19:73:4d:20:53:1d:69:63:5e:fb:14:25: 56:12:44:2c:26:7d:18:5a:56:03:ce:15:cd:82:28:f3:11:a4: ef:8a:f0:17:d1:d1:d6:ff:eb:4b:71:83:c1:52:41:69:ad:d9: 38:3c:a2:db:38:62:ea:b0:12:07:cb:22:31:4d:70:51:70:61: 00:34:1b:86:04:61:b3:47:0e:e8:ca:22:27:86:d9:d1:c9:73: 1d:79:1d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHN2aKxDrYK/8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YmY5MWVjYjktM2YwYS00MTdiLWFhYmMtY2ZjYjNiNzg4MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopNxP9eBs+rVNL+XNwDAGfRXMSg3tJ2WmtAq xGsofiY/3OVM7vScDlRbbWWAfCJF/oSKy/zZ9lJ3o/qa1xgITXOPPLSFmgHCd6Gk O/MVGUWNaC+Q7MJvIdBTl/rlBAymfgZbnZjgtFyS8Ml7mxmba7wIMxNdCPFWbXE4 iKStaMLnziV5JDIrlp8FtHv11djZ50I4NRirWaHos8ez+l1ZOj1zZA9n/A0NWeW+ HjY6BS7OX/umk0be/ZiIFzbnmFG135IvfTgVoyqulcHGlaKlofiKjmQIy6BNeZ5+ jLxtkG7Ss/Ku1v8i8XMLOab/QxcWbzZ2t8E/6pYiAbN5gnkfGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRCI6/go5fbeHH3gv0PjHTYT1VuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZWI4NzBiMTQtYWM4My0z ZjRjLTgxNmYtMjJiYmY1ZmVkZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBKfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvXhghPMJfWm54p7KLknxrXAbcODzKcifoBVPwzQ0HbX3Obd68G2WXz GDF4gMqRLi+L3Gux3Fzi672QhfYgKX0nC+ZLJxihswM2hH5PAlP5t0Rb2JUD3tZF S7LiuPY6oXLoykuidfyzPNq1lbXMprRZYx/yocU8AWDvQ1k+9p4bY/+U7C3Fget7 l8ZAP51CCbwNygVDPJnhXujRkQbFlut7fBGhMVR3XRlzTSBTHWljXvsUJVYSRCwm fRhaVgPOFc2CKPMRpO+K8BfR0db/60txg8FSQWmt2Tg8ots4YuqwEgfLIjFNcFFw YQA0G4YEYbNHDujKIieG2dHJcx15HUY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:55 2025 by rpki-client