$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa File: 603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa (raw, json) Hash identifier: vypXl+d8thVfF3qa0D1bmr+ke+kDRKMvEoz4SBYBt14= Subject key identifier: 5C:FF:DA:71:5B:9A:CC:1A:8E:FD:3F:14:44:E4:E5:12:B1:8F:CD:F3 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584B891773C1B534A4EEEBBCA30A Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:73:c1:b5:34:a4:ee:eb:bc:a3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=a8ef57a8-adba-4241-ae47-dfcec54f05a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4e:b0:db:4a:75:fd:75:b8:72:90:a9:8e:a1: fe:b9:86:20:9b:5b:0e:23:ec:d0:14:0b:78:53:77: d8:0d:59:22:3a:19:a8:bb:8b:23:36:44:e9:e0:08: 53:48:86:51:a3:d8:28:cf:3d:39:01:d4:fb:46:8e: 34:a5:f6:da:13:96:54:8c:32:b3:7a:1c:25:0c:33: d7:e4:0f:2c:ab:ef:2c:8e:7b:d5:56:c9:d7:58:80: 59:8d:9e:c6:75:9a:f9:04:b2:43:91:3a:2e:4c:e7: 11:d8:0d:36:77:40:e4:39:28:67:4e:87:85:9a:56: 93:dd:df:39:ba:d5:37:f9:d1:fb:98:ec:f3:ed:2f: d4:e2:62:93:86:20:31:09:c6:8b:30:e7:57:36:40: 25:9e:43:6b:98:64:0e:f6:72:46:10:06:bd:11:16: c0:65:01:be:e4:48:49:a0:9d:9e:21:4e:31:aa:59: 3e:b7:87:31:49:a6:6a:ec:b4:e6:28:60:91:a2:cb: f8:8f:20:16:6d:a5:0a:e9:2a:1c:c1:49:e5:69:34: 44:25:80:ae:ff:0e:c5:b4:a5:51:32:d1:e4:ba:a3: 82:43:be:c0:1e:23:e8:da:3e:1c:f7:58:0b:59:15: a4:e1:a5:e0:c2:10:db:5f:ff:d3:12:c5:6d:01:d9: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:DA:71:5B:9A:CC:1A:8E:FD:3F:14:44:E4:E5:12:B1:8F:CD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2d:52:36:4a:8b:85:a0:53:95:d6:62:e2:4d:e1:66:69:01: cc:84:1d:1f:15:93:96:42:6f:2c:83:d5:7e:28:36:e9:7e:84: 43:21:eb:30:a4:12:e1:6b:ab:6f:3f:3e:22:a2:2d:2d:35:39: 27:18:ae:14:b2:44:34:f7:7a:cc:21:f3:06:45:0b:fd:50:5a: d5:34:10:13:9a:9f:77:f4:60:ed:78:26:1f:ce:5a:47:2a:ec: 40:01:cf:a3:fa:db:a6:16:35:4a:8d:29:df:6a:0b:65:e4:db: 24:ee:98:21:ee:75:e7:bd:21:ec:c7:df:4b:fb:fe:f9:d6:aa: 97:19:3e:c0:2b:88:41:11:15:f0:89:3f:b3:4c:59:7e:4c:57: 7a:85:4c:4c:51:e4:fd:62:84:89:01:b3:0d:c9:43:9b:96:53: 86:fe:f4:c6:9c:2f:b0:f5:57:f1:37:4e:05:f1:b2:4f:e8:54: 1d:d9:b7:12:b7:b8:2c:70:83:06:a9:11:18:91:16:7c:99:dc: 1d:f6:14:e7:48:cc:9f:77:f4:35:5d:c1:0b:4e:33:41:d5:a3: 7f:95:ce:0f:7e:3b:63:c3:60:7a:cc:29:9e:dc:19:69:34:3a: 77:c9:c7:ca:dc:f9:51:2d:08:a5:65:e9:13:2f:e4:74:dd:3a: 2a:0c:3b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3PBtTSk7uu8owowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YThlZjU3YTgtYWRiYS00MjQxLWFlNDctZGZjZWM1NGYwNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk06w20p1/XW4cpCpjqH+uYYgm1sOI+zQFAt4 U3fYDVkiOhmou4sjNkTp4AhTSIZRo9gozz05AdT7Ro40pfbaE5ZUjDKzehwlDDPX 5A8sq+8sjnvVVsnXWIBZjZ7GdZr5BLJDkTouTOcR2A02d0DkOShnToeFmlaT3d85 utU3+dH7mOzz7S/U4mKThiAxCcaLMOdXNkAlnkNrmGQO9nJGEAa9ERbAZQG+5EhJ oJ2eIU4xqlk+t4cxSaZq7LTmKGCRosv4jyAWbaUK6SocwUnlaTREJYCu/w7FtKVR MtHkuqOCQ77AHiPo2j4c91gLWRWk4aXgwhDbX//TEsVtAdlMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz/2nFbmswajv0/FETk5RKxj83zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvNjAzYTUwYmEtOTMwOC0z ZjRjLWFmNGItN2Y4MWMxODNmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4tUjZKi4WgU5XWYuJN4WZpAcyEHR8Vk5ZCbyyD1X4oNul+hEMh6zCk EuFrq28/PiKiLS01OScYrhSyRDT3eswh8wZFC/1QWtU0EBOan3f0YO14Jh/OWkcq 7EABz6P626YWNUqNKd9qC2Xk2yTumCHudee9IezH30v7/vnWqpcZPsAriEERFfCJ P7NMWX5MV3qFTExR5P1ihIkBsw3JQ5uWU4b+9MacL7D1V/E3TgXxsk/oVB3ZtxK3 uCxwgwapERiRFnyZ3B32FOdIzJ939DVdwQtOM0HVo3+Vzg9+O2PDYHrMKZ7cGWk0 OnfJx8rc+VEtCKVl6RMv5HTdOioMO8A= -----END CERTIFICATE-----Generated at Sun Oct 19 23:03:23 2025 by rpki-client