$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa File: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (raw, json) Hash identifier: W5tSBqDnCoLoAehwbAErZSn2oT987j+oV/YmasCXyOs= Subject key identifier: 54:01:FD:42:E5:27:DD:60:34:62:CB:6F:5B:93:E7:9D:5B:F6:B0:47 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584B8D477EF4FC8AF53329130680 Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 395153 IP address blocks: 69.12.96.0/24 maxlen: 24 69.12.97.0/24 maxlen: 24 69.12.98.0/24 maxlen: 24 69.12.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7e:f4:fc:8a:f5:33:29:13:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=34eb328f-9351-4460-96b1-ddaa7b1c0b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:ff:ae:2d:f7:84:c5:d5:af:ad:85:1d:02: be:5b:1a:ae:1a:4a:c7:c2:7d:59:05:07:2c:ab:a9: a7:d0:60:8f:b6:03:0b:2f:c2:b0:0c:30:a0:56:da: 10:03:d7:fb:da:ab:7a:2b:26:e2:30:8d:58:2a:92: c6:70:23:7c:dd:db:3e:04:62:91:6c:9c:cc:3f:aa: f4:11:56:dc:5b:da:04:da:f7:16:bd:80:e7:cd:37: e8:ce:3c:63:8d:ed:e5:7e:87:e1:6a:1b:df:11:39: de:2f:ad:e8:dd:95:69:4c:65:8b:53:16:f2:63:53: 0b:15:45:b7:2d:fb:fa:62:49:9f:10:be:fe:e1:2e: cd:a7:a3:8b:5f:7a:05:11:13:31:86:28:ea:0d:4b: f1:97:94:66:20:89:32:08:e0:ea:de:db:fb:56:be: 76:43:7c:6c:67:9a:7a:48:12:4d:88:b4:0f:b9:9d: 00:9a:ca:14:96:f3:6c:f2:3c:b5:f7:41:c2:47:30: da:c2:f1:d7:e0:25:e6:93:bc:aa:04:de:5e:60:16: ad:d8:32:ec:d3:2c:6c:29:62:91:7f:5a:01:2a:fa: 38:b5:81:8f:bb:13:41:82:e9:b5:55:c8:06:7a:3d: da:c8:bb:e9:e7:75:82:94:a8:d3:07:aa:88:9d:ee: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:01:FD:42:E5:27:DD:60:34:62:CB:6F:5B:93:E7:9D:5B:F6:B0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: 69.12.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:44:a1:ef:f7:b5:a0:be:21:f7:e1:79:09:31:7a:95:48:e6: e5:fe:7b:73:85:36:56:38:73:b9:61:e8:e3:5b:dc:2f:f7:74: 20:ec:d7:34:e9:99:82:4c:ee:b6:be:6b:3a:f4:b8:bf:44:e7: 91:f9:b7:1d:17:bb:1d:73:60:6a:75:f6:99:4f:fd:fb:35:54: 29:fe:8f:62:9a:66:07:95:df:32:15:23:44:18:9b:08:e2:52: 6b:aa:47:d4:c9:56:58:0f:9e:3f:22:67:5d:ec:e9:ca:dd:be: 83:b6:d4:58:b9:87:ec:f8:1e:07:7b:70:99:4b:42:ca:4f:67: 11:a0:9b:ef:a8:02:37:3a:5c:95:38:3b:ce:e8:af:1a:10:9a: 30:0c:3c:c8:25:9b:b8:41:f5:eb:19:d4:3f:7a:4a:58:fc:5b: 17:12:b0:a7:42:03:e8:a8:a9:be:0f:f5:50:d7:6b:0d:b7:49: fe:72:51:a8:69:6a:b6:27:8a:75:3a:fa:ec:31:9f:0f:02:9d: 62:e2:b2:b9:a7:b9:af:23:90:bc:a4:7f:df:3f:ef:71:bf:23: 1f:c3:dc:ce:ac:91:0b:49:47:78:fe:d8:c8:a5:b0:46:a1:ee: 99:1b:c4:44:f7:cc:d9:f8:4c:4e:1d:e2:78:ac:9c:57:e1:73: 45:19:56:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR370/Ir1MykTBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk MzRlYjMyOGYtOTM1MS00NDYwLTk2YjEtZGRhYTdiMWMwYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDP/ri33hMXVr62FHQK+WxquGkrHwn1ZBQcs q6mn0GCPtgMLL8KwDDCgVtoQA9f72qt6KybiMI1YKpLGcCN83ds+BGKRbJzMP6r0 EVbcW9oE2vcWvYDnzTfozjxjje3lfofhahvfETneL63o3ZVpTGWLUxbyY1MLFUW3 Lfv6YkmfEL7+4S7Np6OLX3oFERMxhijqDUvxl5RmIIkyCODq3tv7Vr52Q3xsZ5p6 SBJNiLQPuZ0AmsoUlvNs8jy190HCRzDawvHX4CXmk7yqBN5eYBat2DLs0yxsKWKR f1oBKvo4tYGPuxNBgum1VcgGej3ayLvp53WClKjTB6qIne7IpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQB/ULlJ91gNGLLb1uT551b9rBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNTRlOGYwZGItMTZjOC0z MTI2LTljN2EtNWFjNGUwOGQ0ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRQxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxEoe/3taC+IffheQkxepVI5uX+e3OFNlY4c7lh6ONb3C/3dCDs1zTp mYJM7ra+azr0uL9E55H5tx0Xux1zYGp19plP/fs1VCn+j2KaZgeV3zIVI0QYmwji UmuqR9TJVlgPnj8iZ13s6crdvoO21Fi5h+z4Hgd7cJlLQspPZxGgm++oAjc6XJU4 O87orxoQmjAMPMglm7hB9esZ1D96Slj8WxcSsKdCA+ioqb4P9VDXaw23Sf5yUahp arYninU6+uwxnw8CnWLisrmnua8jkLykf98/73G/Ix/D3M6skQtJR3j+2MilsEah 7pkbxET3zNn4TE4d4nisnFfhc0UZVlM= -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:22 2025 by rpki-client