$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa File: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (raw, json) Hash identifier: KhTlQWYwDSbMvGpPH/wFOOs4Zzk9/TBvXLOPL3v5Skw= Subject key identifier: 13:83:B4:0F:7A:D5:A5:FD:D1:DC:96:C4:72:7E:A7:C8:8C:7E:38:D4 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F4328584B5141B32D6C3D61AC87AC4080 Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 8075 IP address blocks: 64.52.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:b3:2d:6c:3d:61:ac:87:ac:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=28c04427-8d02-470b-901f-7e961eb891af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:97:57:15:70:34:f5:b2:da:f4:d2:bf:10:1b: 06:88:0a:7a:50:02:1f:f0:d8:ab:64:34:e7:6a:d7: 84:a0:16:8c:83:db:e3:10:1b:3f:50:68:26:7d:90: 9b:c9:97:46:67:38:45:b8:ef:44:43:ea:88:25:e1: b4:f3:fe:60:db:49:b4:b9:8c:af:40:20:75:7b:27: 2c:fa:03:1f:8e:c8:56:79:74:02:a3:b2:d5:7e:0a: 42:e5:86:5d:08:a5:69:36:00:7a:0a:2d:b6:51:1f: ea:b8:eb:e0:18:ad:55:8e:5c:73:cd:20:cc:2a:7f: ef:96:5d:24:69:86:a8:66:46:cf:93:14:45:9f:d2: 11:e9:02:79:12:10:35:1f:82:cc:f1:27:ee:11:d6: 9b:91:0a:51:b8:df:a7:5f:c1:de:e7:66:4d:4c:f5: ef:e4:bd:bf:74:a9:ae:23:f7:46:1c:e1:b0:4b:41: 33:d8:98:5d:a5:ec:b5:0a:9c:c8:bf:27:47:70:72: 42:0b:68:37:c1:f8:62:0f:e7:44:f1:ab:47:a2:6a: 62:bc:03:06:23:5c:04:89:b4:27:2b:07:1d:fc:9b: 84:8d:72:49:b6:5e:8a:1b:e3:32:09:91:c6:2a:36: 84:30:cb:6b:c7:83:d1:44:e1:65:9b:9c:38:21:1b: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:83:B4:0F:7A:D5:A5:FD:D1:DC:96:C4:72:7E:A7:C8:8C:7E:38:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: 64.52.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:93:2d:8f:27:48:bc:c8:ed:de:d5:4f:d7:0f:9a:d8:cf:2f: ea:74:f5:a3:67:2a:22:75:01:58:79:d9:7f:a8:49:84:ef:03: 64:c4:f8:dc:d5:71:f2:6d:2f:89:6f:ca:73:f8:5a:63:11:7a: 2c:b6:95:c7:98:55:6a:54:54:1c:05:48:09:63:54:8e:a7:f0: 73:5d:67:53:76:86:3e:7f:7e:a0:46:f2:c8:b0:c6:df:6e:3a: a5:51:87:17:32:30:d4:b3:7e:99:23:ae:bb:0e:7b:19:18:93: 3d:9e:ac:fe:b4:27:7d:51:28:7f:81:bf:f4:92:02:5a:2e:fb: e9:e2:54:a9:90:0c:b6:be:a2:ab:da:77:d1:41:34:a3:36:26: ae:9c:20:3d:40:5e:8c:d1:84:3a:fb:0c:9f:ee:5d:71:87:a1: 89:d9:06:9d:8b:ee:48:e4:c6:e1:7b:73:d8:c2:a8:60:e7:62: 97:0f:d3:e8:bb:02:b3:6b:76:33:be:44:77:87:9b:8d:f4:18: 92:9a:0d:43:41:2c:f9:75:14:77:7f:b3:9b:42:e7:8d:71:20: b0:dd:af:69:47:4d:d1:a9:4b:d4:49:42:fd:11:5f:60:e7:3d: 5a:ea:b6:5a:9f:5e:40:40:a1:7b:25:d2:56:30:3c:08:17:21: 8c:5c:fa:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbMtbD1hrIesQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MjhjMDQ0MjctOGQwMi00NzBiLTkwMWYtN2U5NjFlYjg5MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJdXFXA09bLa9NK/EBsGiAp6UAIf8NirZDTn ateEoBaMg9vjEBs/UGgmfZCbyZdGZzhFuO9EQ+qIJeG08/5g20m0uYyvQCB1eycs +gMfjshWeXQCo7LVfgpC5YZdCKVpNgB6Ci22UR/quOvgGK1VjlxzzSDMKn/vll0k aYaoZkbPkxRFn9IR6QJ5EhA1H4LM8SfuEdabkQpRuN+nX8He52ZNTPXv5L2/dKmu I/dGHOGwS0Ez2Jhdpey1CpzIvydHcHJCC2g3wfhiD+dE8atHompivAMGI1wEibQn Kwcd/JuEjXJJtl6KG+MyCZHGKjaEMMtrx4PRROFlm5w4IRueWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBODtA961aX90dyWxHJ+p8iMfjjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvMDQ4YWEwM2EtZDZjZS0z N2JkLTg0NTUtMTc3YzNmZTExYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSTLY8nSLzI7d7VT9cPmtjPL+p09aNnKiJ1AVh52X+oSYTvA2TE+NzV cfJtL4lvynP4WmMReiy2lceYVWpUVBwFSAljVI6n8HNdZ1N2hj5/fqBG8siwxt9u OqVRhxcyMNSzfpkjrrsOexkYkz2erP60J31RKH+Bv/SSAlou++niVKmQDLa+oqva d9FBNKM2Jq6cID1AXozRhDr7DJ/uXXGHoYnZBp2L7kjkxuF7c9jCqGDnYpcP0+i7 ArNrdjO+RHeHm430GJKaDUNBLPl1FHd/s5tC541xILDdr2lHTdGpS9RJQv0RX2Dn PVrqtlqfXkBAoXsl0lYwPAgXIYxc+qk= -----END CERTIFICATE-----Generated at Mon Oct 20 16:24:53 2025 by rpki-client