$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa File: 1dafa895-ce97-3c2b-9067-e9ff7279b148.roa (raw, json) Hash identifier: CSL4nh4QBG9SCBGLvsHqzLbQg5zBKgMs86EDZ7vQnTs= Subject key identifier: 29:75:28:64:18:80:15:EF:59:06:BC:11:D2:0A:35:69:30:FC:79:1E Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584B87B21FEC61B3ED1232A65D00 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 46672 IP address blocks: 199.30.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1f:ec:61:b3:ed:12:32:a6:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=48d81dc8-6ec5-4891-874d-3fc44f979960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:90:02:9d:fb:c0:3f:03:29:c6:c7:80:87:0e: 73:9a:17:38:49:55:7d:b0:20:d2:1c:9a:1e:cc:be: 66:ce:eb:fb:74:a5:7c:a0:c6:30:98:72:4e:ac:eb: d0:8c:4a:f8:93:af:cc:3c:64:6c:8d:84:e9:53:df: 82:ed:9c:67:b7:07:3d:0a:f0:6b:f7:20:50:38:c2: 27:d3:8a:6d:1f:0b:5d:92:b1:26:20:1d:7b:8a:0e: 01:2c:bf:59:ae:72:3a:16:29:0b:6e:0a:57:2c:0f: 17:0c:37:55:f7:00:77:10:12:1c:ab:1a:e5:87:61: d3:76:62:ae:01:4e:80:2f:75:d3:b0:ea:39:df:39: d3:13:ac:6a:c9:4f:ce:34:a6:51:d0:b8:7b:01:95: 61:97:e8:e5:11:13:b7:7f:79:38:3e:75:92:f9:5e: b7:b2:36:d7:80:0e:f2:a4:13:33:64:31:d2:47:fd: 94:e5:5c:5e:a0:f0:b1:59:17:4a:bd:ca:8a:ca:8b: 3b:a0:23:98:62:ad:7c:ae:b0:d4:de:89:89:af:75: c8:5f:37:d5:a2:40:17:8a:ae:16:94:bf:b9:a7:26: c1:b8:3f:02:cf:42:c2:d3:bb:69:7a:97:00:18:9a: c0:13:2e:97:12:d3:94:43:fd:fb:e3:dc:be:1e:51: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:75:28:64:18:80:15:EF:59:06:BC:11:D2:0A:35:69:30:FC:79:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ff:04:32:f3:9d:ce:31:a8:a7:b5:ed:92:31:91:7f:7a:aa: b1:35:03:27:81:be:9e:3e:d6:7b:c7:08:19:2d:1b:2f:fa:f0: 08:03:cd:03:0a:5c:6c:27:6e:a7:51:8f:37:98:b0:ff:cb:5c: 1b:d7:24:1e:cf:24:c3:33:86:d2:bb:89:a2:5b:fe:8d:84:71: dd:6a:24:58:dd:f6:c0:fe:66:1d:f0:96:15:55:7f:91:e1:e8: ce:2d:ce:36:d1:4c:97:8c:08:a2:c7:e7:03:1e:e6:df:65:4a: c1:d5:a3:5f:07:2c:4c:e3:ed:df:1d:cf:45:60:c5:f6:83:3c: 95:f1:be:67:0e:f9:73:30:f2:eb:a8:1a:9d:d5:34:7e:54:7c: 65:69:86:9b:c0:31:06:ad:bd:22:de:4b:f6:50:42:c4:27:c7: 38:7f:07:51:5d:9e:46:5b:f9:90:f8:1c:dc:05:eb:b7:2f:dd: 4c:74:52:85:67:74:37:5a:98:1a:21:1a:a6:a3:3a:f0:78:72: 1f:93:5c:13:27:4b:c9:fa:f1:0e:c1:ae:2a:de:2d:44:f5:72: b9:23:20:f0:0a:21:04:ed:77:73:b9:1b:4f:94:52:d4:ce:f5: d6:e5:75:4b:f3:fa:c8:f0:42:a3:42:ba:a4:44:fe:2e:a9:f2: a3:ce:a4:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh/sYbPtEjKmXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NDhkODFkYzgtNmVjNS00ODkxLTg3NGQtM2ZjNDRmOTc5OTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZACnfvAPwMpxseAhw5zmhc4SVV9sCDSHJoe zL5mzuv7dKV8oMYwmHJOrOvQjEr4k6/MPGRsjYTpU9+C7Zxntwc9CvBr9yBQOMIn 04ptHwtdkrEmIB17ig4BLL9ZrnI6FikLbgpXLA8XDDdV9wB3EBIcqxrlh2HTdmKu AU6AL3XTsOo53znTE6xqyU/ONKZR0Lh7AZVhl+jlERO3f3k4PnWS+V63sjbXgA7y pBMzZDHSR/2U5VxeoPCxWRdKvcqKyos7oCOYYq18rrDU3omJr3XIXzfVokAXiq4W lL+5pybBuD8Cz0LC07tpepcAGJrAEy6XEtOUQ/3749y+HlE3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl1KGQYgBXvWQa8EdIKNWkw/HkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMWRhZmE4OTUtY2U5Ny0z YzJiLTkwNjctZTlmZjcyNzliMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxx6CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv/BDLznc4xqKe17ZIxkX96qrE1AyeBvp4+1nvHCBktGy/68AgDzQMK XGwnbqdRjzeYsP/LXBvXJB7PJMMzhtK7iaJb/o2Ecd1qJFjd9sD+Zh3wlhVVf5Hh 6M4tzjbRTJeMCKLH5wMe5t9lSsHVo18HLEzj7d8dz0VgxfaDPJXxvmcO+XMw8uuo Gp3VNH5UfGVphpvAMQatvSLeS/ZQQsQnxzh/B1FdnkZb+ZD4HNwF67cv3Ux0UoVn dDdamBohGqajOvB4ch+TXBMnS8n68Q7BrireLUT1crkjIPAKIQTtd3O5G0+UUtTO 9dbldUvz+sjwQqNCuqRE/i6p8qPOpPs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:31 2025 by rpki-client