$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba9a3132-5ea9-38ec-bfe1-42f43f6d710c.roa File: ba9a3132-5ea9-38ec-bfe1-42f43f6d710c.roa (raw, json) Hash identifier: jKMI+ZX4SO2n5ucZM5RWoD02StZ9kxmNjFHMamYKloU= Subject key identifier: B2:8C:6B:9E:A3:78:3E:41:2C:E2:4E:CC:79:A1:BA:76:73:FE:F2:A2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B901232FFC1C11221918D3AC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba9a3132-5ea9-38ec-bfe1-42f43f6d710c.roa Signing time: Sat 18 Oct 2025 13:00:39 +0000 ROA not before: Sat 18 Oct 2025 13:00:39 +0000 ROA not after: Fri 16 Jan 2026 14:00:39 +0000 asID: 27176 IP address blocks: 64.81.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:12:32:ff:c1:c1:12:21:91:8d:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 18 13:00:39 2025 GMT Not After : Jan 16 14:00:39 2026 GMT Subject: CN=ed7eebdc-61da-4c0a-8376-511ce806b1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:2e:04:a4:a8:bc:97:4f:09:e2:59:68:74: d6:40:b7:f0:59:6e:a5:4e:24:ba:eb:8c:54:f1:dd: 84:b4:4e:f6:ab:38:d3:a7:aa:8e:f6:cc:42:7d:0d: 88:d8:c3:96:b5:e8:d8:f6:2b:a8:22:1e:5b:92:9a: 08:cf:a8:7f:65:cd:47:9c:7c:d8:a6:0e:c2:ce:be: a6:a6:e8:a6:51:7d:f4:17:9b:26:6b:5f:26:2d:af: 67:c4:c8:00:0a:9f:e9:64:3a:15:ca:90:f8:27:6b: a1:92:19:69:87:e4:9f:1b:d0:4a:8a:e2:90:3d:89: 2e:93:1a:c1:c1:1f:4a:2c:5f:0b:cd:f5:95:ac:63: 49:da:2a:73:d1:3e:52:b4:b3:57:45:e4:57:f6:f7: 4f:75:5f:73:21:16:a3:19:ab:f8:a9:7c:89:e8:63: 2b:5f:4b:d9:c5:25:c7:3d:51:24:95:7c:b3:88:51: 55:ea:cb:7c:46:75:14:44:65:77:43:db:a6:d1:3e: 5d:b5:d1:0e:b9:7d:90:bb:e2:7b:d6:fb:f1:4f:72: c0:ac:29:d9:30:1f:b6:1f:d2:89:db:ab:7a:f5:6c: 9b:ae:16:16:2b:4d:43:c6:1a:ea:e9:37:45:7c:4c: 70:86:a0:a7:9b:86:0e:fc:11:7a:97:c3:38:a9:04: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:6B:9E:A3:78:3E:41:2C:E2:4E:CC:79:A1:BA:76:73:FE:F2:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba9a3132-5ea9-38ec-bfe1-42f43f6d710c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:db:9c:fd:8c:e4:2c:7c:11:89:86:5b:3c:35:3e:dc:ae:29: b9:4f:92:96:97:33:b8:1d:d7:26:72:c9:a3:fc:2f:04:1e:58: 60:38:70:59:61:ff:61:17:8b:d6:0b:0e:92:fa:2a:1b:d1:95: e3:93:af:95:89:0f:72:4a:c2:cb:f4:ee:52:b1:28:ed:a9:ff: 5c:e1:9b:ea:22:ae:32:92:fd:7a:4f:a8:e5:13:e0:3b:1c:16: c2:a1:a6:39:9e:92:fb:74:26:50:ee:b4:69:ea:9c:1b:d7:fc: d9:da:d4:5d:63:f2:ce:6d:fe:8b:04:5b:11:82:64:4a:14:32: 2a:0d:94:54:b5:a5:b4:ad:17:a2:53:c9:0d:70:20:01:42:ae: f6:65:6d:81:11:4c:61:00:46:7f:ce:35:d6:78:de:88:81:22: 69:91:33:2a:cd:c7:d1:17:2c:e8:f8:c8:e6:5b:bc:22:d7:75: ea:70:9c:3e:04:c8:88:e9:e7:2c:b1:7c:70:2c:a8:91:5e:40: ec:49:d4:04:5f:63:8d:6a:9c:79:fb:63:06:8d:a0:c0:54:06: 57:ae:b2:16:10:08:f1:c7:d3:b0:98:08:ae:45:8e:97:f7:19: fa:c2:52:17:47:92:9a:72:d2:3c:b7:d4:52:95:6e:dd:05:b9: 6d:fe:0f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQEjL/wcESIZGNOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxODEzMDAzOVoXDTI2MDExNjE0MDAzOVowLzEtMCsGA1UEAxMk ZWQ3ZWViZGMtNjFkYS00YzBhLTgzNzYtNTExY2U4MDZiMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0MuBKSovJdPCeJZaHTWQLfwWW6lTiS664xU 8d2EtE72qzjTp6qO9sxCfQ2I2MOWtejY9iuoIh5bkpoIz6h/Zc1HnHzYpg7Czr6m puimUX30F5sma18mLa9nxMgACp/pZDoVypD4J2uhkhlph+SfG9BKiuKQPYkukxrB wR9KLF8LzfWVrGNJ2ipz0T5StLNXReRX9vdPdV9zIRajGav4qXyJ6GMrX0vZxSXH PVEklXyziFFV6st8RnUURGV3Q9um0T5dtdEOuX2Qu+J71vvxT3LArCnZMB+2H9KJ 26t69WybrhYWK01Dxhrq6TdFfExwhqCnm4YO/BF6l8M4qQQgiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKMa56jeD5BLOJOzHmhunZz/vKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmE5YTMxMzItNWVhOS0z OGVjLWJmZTEtNDJmNDNmNmQ3MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjbnP2M5Cx8EYmGWzw1PtyuKblPkpaXM7gd1yZyyaP8LwQeWGA4cFlh /2EXi9YLDpL6KhvRleOTr5WJD3JKwsv07lKxKO2p/1zhm+oirjKS/XpPqOUT4Dsc FsKhpjmekvt0JlDutGnqnBvX/Nna1F1j8s5t/osEWxGCZEoUMioNlFS1pbStF6JT yQ1wIAFCrvZlbYERTGEARn/ONdZ43oiBImmRMyrNx9EXLOj4yOZbvCLXdepwnD4E yIjp5yyxfHAsqJFeQOxJ1ARfY41qnHn7YwaNoMBUBleushYQCPHH07CYCK5Fjpf3 GfrCUhdHkppy0jy31FKVbt0FuW3+D80= -----END CERTIFICATE-----Generated at Sun Oct 19 22:39:50 2025 by rpki-client