$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa File: 16caa9ad-9e7c-3222-998f-9196456a0581.roa (raw, json) Hash identifier: NZbkb5JJOmt6GBKbuTVf5zRtIin3/YraihqwlpWwpDw= Subject key identifier: 5D:60:BA:97:BA:39:84:94:41:38:D1:C7:ED:31:73:6D:93:F8:7D:3B Certificate issuer: /CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Certificate serial: 010D0C9F4328584B8EACC95F110F996AF09B60E0 Authority key identifier: 5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 21846 IP address blocks: 64.209.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c9:5f:11:0f:99:6a:f0:9b:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=e107b670-9553-4fc4-9b6d-59d7e0e06cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:22:46:e3:85:26:2b:ce:26:3f:3e:25:90:49: bc:68:1b:ac:28:1f:25:a2:4d:46:e4:48:18:cc:4d: f9:5c:da:8c:8c:66:71:d5:6e:3b:f0:1c:42:fc:37: 2a:aa:b8:f9:9a:d2:bb:aa:8b:7f:c1:2d:df:8e:02: f7:97:d5:63:c7:9d:f7:e2:73:4d:b8:a2:4f:1b:af: fa:2b:1a:bc:ff:d4:f9:3b:21:ea:6a:86:70:78:9c: 91:3b:dd:6e:6c:6e:70:20:9b:3e:01:45:e7:17:80: 40:6b:7c:a6:0c:b6:d4:8e:29:f1:95:63:10:9d:62: 8a:8d:7b:21:74:43:7c:9c:2d:9a:3c:a0:ff:52:f9: e3:f1:8e:20:20:44:d5:35:de:25:89:d8:6b:15:e8: ce:d7:e9:52:3c:b3:4d:98:fb:ee:11:6e:39:93:5d: 9b:ae:9a:cc:08:32:a3:30:e0:6d:99:3c:42:d5:08: 90:5c:65:a3:d1:40:bd:05:8c:da:54:91:08:90:35: 13:27:e2:92:4a:bb:63:ce:e5:ae:ad:81:7e:5c:bf: 20:06:98:a2:1f:2e:06:35:28:b7:13:d7:95:80:73: a1:e7:41:82:f7:4e:eb:71:a0:5b:75:c4:af:0b:36: 02:ae:98:d0:3f:90:af:2d:9e:19:6e:61:44:bf:0a: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:60:BA:97:BA:39:84:94:41:38:D1:C7:ED:31:73:6D:93:F8:7D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl X509v3 Authority Key Identifier: keyid:5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer sbgp-ipAddrBlock: critical IPv4: 64.209.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:19:72:33:18:93:25:27:4a:8d:00:83:40:3e:be:bb:b6:6b: 21:79:06:e4:9d:23:a6:0a:f7:71:df:19:24:22:82:46:c0:05: a5:fb:39:05:9a:e6:19:cb:4e:f3:1d:13:8e:a3:cc:07:93:e5: 09:61:9d:ca:39:f0:c7:4e:64:c4:6a:84:ff:5c:a9:11:2f:35: fb:d1:9f:dc:fb:49:68:f4:11:8e:da:67:64:bd:53:88:4d:f5: 7d:c1:52:5a:22:bc:0e:c8:e2:7d:5f:59:f0:33:bc:69:07:99: 2c:86:10:7a:0c:72:b4:0c:c6:b1:72:bb:64:d9:9e:80:b2:8f: 7b:5b:2b:39:c1:b1:7f:4d:63:c8:d9:c7:bc:38:5c:af:f5:24: b5:ef:33:66:60:36:72:4b:26:20:be:42:2a:1d:8f:22:96:c5: cb:b0:57:23:01:7e:ad:38:06:90:14:17:c9:bf:aa:3f:c0:72: 87:f6:a2:7a:7d:46:ac:4a:bf:f2:2f:cf:04:07:74:ce:18:f4: c8:60:17:bd:bb:10:68:f9:af:e4:95:d2:53:32:9b:5e:6c:21: f1:96:04:81:0a:41:87:7f:b3:95:6d:9e:b3:e1:fa:ca:05:f9: 3c:4a:64:de:db:5c:0f:44:54:d4:75:37:0f:5f:9b:7e:f7:30: 34:6e:7b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMlfEQ+ZavCbYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYwODFlZTUtMWFmMS00YTA0LTlmZWUtMjU0MGJjZWY5 NWMzMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZTEwN2I2NzAtOTU1My00ZmM0LTliNmQtNTlkN2UwZTA2Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSJG44UmK84mPz4lkEm8aBusKB8lok1G5EgY zE35XNqMjGZx1W478BxC/Dcqqrj5mtK7qot/wS3fjgL3l9Vjx5334nNNuKJPG6/6 Kxq8/9T5OyHqaoZweJyRO91ubG5wIJs+AUXnF4BAa3ymDLbUjinxlWMQnWKKjXsh dEN8nC2aPKD/Uvnj8Y4gIETVNd4lidhrFejO1+lSPLNNmPvuEW45k12brprMCDKj MOBtmTxC1QiQXGWj0UC9BYzaVJEIkDUTJ+KSSrtjzuWurYF+XL8gBpiiHy4GNSi3 E9eVgHOh50GC907rcaBbdcSvCzYCrpjQP5CvLZ4ZbmFEvwonLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1gupe6OYSUQTjRx+0xc22T+H07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4 MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQwYmNlZjk1YzMvMTZjYWE5YWQtOWU3Yy0z MjIyLTk5OGYtOTE5NjQ1NmEwNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmYwODFlZTUtMWFmMS00YTA0LTlm ZWUtMjU0MGJjZWY5NWMzL2ZmMDgxZWU1LTFhZjEtNGEwNC05ZmVlLTI1NDBiY2Vm OTVjMy5jcmwwHwYDVR0jBBgwFoAUXHpd+mU6MtrmNfmS2mlcrfZ+gsUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQw YmNlZjk1YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQNGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcZcjMYkyUnSo0Ag0A+vru2ayF5BuSdI6YK93HfGSQigkbABaX7OQWa 5hnLTvMdE46jzAeT5Qlhnco58MdOZMRqhP9cqREvNfvRn9z7SWj0EY7aZ2S9U4hN 9X3BUloivA7I4n1fWfAzvGkHmSyGEHoMcrQMxrFyu2TZnoCyj3tbKznBsX9NY8jZ x7w4XK/1JLXvM2ZgNnJLJiC+QiodjyKWxcuwVyMBfq04BpAUF8m/qj/Acof2onp9 RqxKv/IvzwQHdM4Y9MhgF727EGj5r+SV0lMym15sIfGWBIEKQYd/s5VtnrPh+soF +TxKZN7bXA9EVNR1Nw9fm373MDRue9s= -----END CERTIFICATE-----Generated at Tue Oct 21 04:45:42 2025 by rpki-client