$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa File: fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa (raw, json) Hash identifier: voZUx+udy1aKQDEcNy5qYj8CVRuLEeajpCP4Ixv/3UQ= Subject key identifier: 64:38:06:DF:FE:1F:56:85:04:B2:EA:23:39:F9:BF:83:5C:0F:93:3F Certificate issuer: /CN=4049ac35-71e1-42c8-878b-af94c9280b59 Certificate serial: 010D0C9F4328584B33F1A5F151B5493A8502E500 Authority key identifier: 21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 14737 IP address blocks: 164.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a5:f1:51:b5:49:3a:85:02:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4049ac35-71e1-42c8-878b-af94c9280b59 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=ba9da478-63c1-4478-9df3-b5f684a705d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:bf:3c:e5:e9:63:65:58:9b:a0:3b:85:43: 55:ec:40:26:97:bb:e3:95:ee:25:7b:c1:78:c6:72: ca:8f:a8:d3:7f:6d:48:51:15:ee:24:49:bb:d8:9e: 7a:de:3f:8c:a6:58:2a:ba:87:ab:12:4b:63:59:87: 7f:94:1d:2d:ad:f5:38:2d:87:fd:ae:3a:a0:74:5c: 90:5f:e7:44:8c:d6:c6:7e:49:08:ae:74:91:ea:b7: 3f:59:fd:5c:59:32:31:eb:45:93:0e:15:8f:bd:4d: 1f:0c:b2:08:02:02:c2:70:0b:d3:2d:c2:1b:f8:9f: 6b:c1:33:de:84:95:41:aa:4f:cf:99:14:fc:01:18: ae:0d:93:a8:15:2f:e8:d9:0c:a2:ad:86:ca:a3:a5: bb:f6:03:5e:97:75:5a:b9:12:7b:5b:cf:fc:59:87: cb:5b:c9:60:a4:77:cb:cc:84:09:97:c5:2a:7c:76: d3:dd:3c:01:49:fe:db:0c:06:31:0b:ec:1f:41:08: d2:0c:1d:76:66:71:36:cb:5b:ed:a1:a2:50:9b:03: f9:c9:31:05:cc:0b:cf:89:e5:a7:03:3d:4d:2f:33: fe:73:27:1f:06:92:47:be:64:74:37:98:91:3b:9c: b1:e6:c5:58:7f:d7:b3:3c:11:cd:4c:28:cd:b5:7c: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:06:DF:FE:1F:56:85:04:B2:EA:23:39:F9:BF:83:5C:0F:93:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/fa4ba8d2-4c17-3670-9471-1ee9bf293e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.crl X509v3 Authority Key Identifier: keyid:21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer sbgp-ipAddrBlock: critical IPv4: 164.47.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9e:57:d7:14:38:5f:9f:74:70:b1:3b:2f:74:8a:33:87:ac: 4e:8e:20:df:52:5a:5b:48:d7:75:0a:71:5d:05:4c:d3:02:5f: 03:43:db:92:f9:91:fc:dc:d2:5a:dc:a0:c0:ed:39:5c:a8:73: f3:26:5a:ba:6d:b4:dc:f7:d3:78:d5:e6:e4:5c:da:ba:52:1e: 98:72:e7:b6:36:be:fa:80:f1:12:01:f1:36:9b:93:bb:6f:c3: cc:5b:c6:72:05:6e:c3:dc:c8:d3:27:82:40:a9:47:8c:d3:0f: 2f:45:32:b8:a5:d1:c5:78:8b:26:41:04:8f:0f:14:e1:ae:97: b4:06:57:d6:14:29:f5:59:16:fc:c3:0c:c0:b9:51:d4:0c:b8: 18:2e:c3:a8:f3:d0:29:4d:d6:29:c0:3b:8f:42:3d:a6:9a:e4: ef:3e:f3:c4:ec:75:3c:3f:2b:36:ee:16:6d:c8:09:bb:22:7f: 13:67:30:9f:82:07:d0:6d:73:92:71:87:5f:e5:22:8f:06:80: 11:20:4c:73:0a:1d:05:9b:da:ff:ae:a1:85:2b:36:4d:00:27: c8:92:2d:13:0d:6c:8b:29:3e:a5:c1:fe:c1:b9:d8:0f:d2:94: 58:cf:ac:33:e1:5e:74:54:cf:e8:bf:dd:0c:80:d4:ea:b5:0a: 7b:83:45:88 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsz8aXxUbVJOoUC5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA0OWFjMzUtNzFlMS00MmM4LTg3OGItYWY5NGM5Mjgw YjU5MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YmE5ZGE0NzgtNjNjMS00NDc4LTlkZjMtYjVmNjg0YTcwNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/e/POXpY2VYm6A7hUNV7EAml7vjle4le8F4 xnLKj6jTf21IURXuJEm72J563j+MplgquoerEktjWYd/lB0trfU4LYf9rjqgdFyQ X+dEjNbGfkkIrnSR6rc/Wf1cWTIx60WTDhWPvU0fDLIIAgLCcAvTLcIb+J9rwTPe hJVBqk/PmRT8ARiuDZOoFS/o2QyirYbKo6W79gNel3VauRJ7W8/8WYfLW8lgpHfL zIQJl8UqfHbT3TwBSf7bDAYxC+wfQQjSDB12ZnE2y1vtoaJQmwP5yTEFzAvPieWn Az1NLzP+cycfBpJHvmR0N5iRO5yx5sVYf9ezPBHNTCjNtXygcwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGQ4Bt/+H1aFBLLqIzn5v4NcD5M/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MDQ5 YWMzNS03MWUxLTQyYzgtODc4Yi1hZjk0YzkyODBiNTkvZmE0YmE4ZDItNGMxNy0z NjcwLTk0NzEtMWVlOWJmMjkzZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDA0OWFjMzUtNzFlMS00MmM4LTg3 OGItYWY5NGM5MjgwYjU5LzQwNDlhYzM1LTcxZTEtNDJjOC04NzhiLWFmOTRjOTI4 MGI1OS5jcmwwHwYDVR0jBBgwFoAUIa28i+hIqom+c4jNmIUyyqiqbDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MDQ5YWMzNS03MWUxLTQyYzgtODc4Yi1hZjk0 YzkyODBiNTkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApC8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAap5X1xQ4X590cLE7L3SKM4esTo4g31JaW0jXdQpxXQVM0wJfA0PbkvmR /NzSWtygwO05XKhz8yZaum203PfTeNXm5FzaulIemHLntja++oDxEgHxNpuTu2/D zFvGcgVuw9zI0yeCQKlHjNMPL0UyuKXRxXiLJkEEjw8U4a6XtAZX1hQp9VkW/MMM wLlR1Ay4GC7DqPPQKU3WKcA7j0I9pprk7z7zxOx1PD8rNu4WbcgJuyJ/E2cwn4IH 0G1zknGHX+UijwaAESBMcwodBZva/66hhSs2TQAnyJItEw1siyk+pcH+wbnYD9KU WM+sM+FedFTP6L/dDIDU6rUKe4NFiA== -----END CERTIFICATE-----Generated at Wed Oct 22 00:07:58 2025 by rpki-client