$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa File: d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa (raw, json) Hash identifier: gWzrYtfXD9k9nxC/GsxrqWSzVP5fOznHpRryqFISfe0= Subject key identifier: 85:38:45:3C:55:48:49:A7:AC:CB:F3:37:06:9C:70:5A:AB:E3:14:27 Certificate issuer: /CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139 Certificate serial: 010D0C9F4328584B4FDC7C241B92ED7A55046E80 Authority key identifier: E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 2535 IP address blocks: 164.63.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7c:24:1b:92:ed:7a:55:04:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=9fd5d215-a4d3-49c9-a510-576b34dd7da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:68:ca:8e:20:f7:00:b0:eb:eb:24:e7:93: 3c:46:d7:d6:8f:6b:44:08:61:f5:85:9c:43:7a:1e: 53:76:74:fe:41:0f:9f:42:8f:6d:f3:f8:2d:71:d2: f9:60:6b:37:f6:47:11:a9:b5:54:32:65:49:aa:7c: 7f:d1:c2:dd:db:1e:5b:56:0a:d0:82:f8:52:56:c8: 18:c4:e8:fd:64:21:c4:67:11:b0:56:a4:d3:b3:4a: 28:fe:d0:06:e9:fe:e0:b8:0f:80:7f:1e:35:31:f9: ea:27:a5:08:72:26:83:8f:f0:61:08:87:26:af:76: c8:c7:d5:d1:5b:3f:8a:6c:4d:39:4a:c9:54:72:2b: cd:c4:fa:22:14:28:d1:a9:e1:d3:19:ad:c9:59:bc: e7:1e:2a:fd:76:d4:49:42:5d:a9:a9:14:37:85:ef: 59:e1:f9:19:a3:d8:2c:a7:43:e6:29:01:a4:3a:75: 0d:9b:09:95:e4:59:b4:f3:6b:3c:00:bf:5e:0a:09: 8d:f9:f4:63:2e:b1:54:b3:08:70:45:bc:c4:b4:42: 44:d4:4a:44:17:84:76:2a:a1:0f:a4:0e:6c:c9:6b: 43:93:5c:82:73:30:41:04:cc:cf:72:26:30:ea:a8: 11:3a:e7:1c:66:7a:4b:79:6e:7a:77:bb:3d:32:b3: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:45:3C:55:48:49:A7:AC:CB:F3:37:06:9C:70:5A:AB:E3:14:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl X509v3 Authority Key Identifier: keyid:E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer sbgp-ipAddrBlock: critical IPv4: 164.63.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ef:aa:b1:da:b6:d7:43:df:a8:8f:a5:b8:cf:08:dd:05:56: 13:cc:21:53:7c:e9:e4:93:e7:9a:58:f7:02:07:e1:e3:1e:e8: 0c:3f:bd:6f:45:70:a0:6f:fa:b3:29:a0:23:93:55:43:ae:a0: ea:b4:4a:9a:28:f0:11:75:6b:f9:79:8c:c1:4c:59:57:05:45: b3:1c:18:c5:f9:24:c1:f8:94:8e:3b:39:0a:46:56:ec:fd:8c: 09:85:f9:77:aa:44:f0:21:80:36:71:c4:d2:8d:3a:0b:ad:fa: d4:2b:85:f5:f8:9c:ce:ee:7c:29:53:98:8e:75:af:5b:fb:fb: af:ae:44:44:73:57:b6:18:21:bd:72:0b:83:41:09:2c:f6:99: 13:fa:af:ec:75:9f:2b:18:84:2b:34:3e:96:ba:ae:bf:68:18: 37:7f:48:39:27:68:6f:56:8a:a4:c5:be:6f:d7:94:ea:cf:d4: de:f3:23:e9:09:d7:79:6a:ed:30:2e:23:40:1d:20:db:79:bd: 57:09:de:73:15:2b:fe:88:5a:3e:75:33:1d:46:a9:1a:95:65: 3a:09:99:65:ab:21:74:72:c6:16:18:79:b6:3d:47:79:4d:84: 95:cd:f2:66:53:da:f3:f2:71:45:c5:78:8f:e5:ca:ff:40:8b: c2:89:78:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HwkG5LtelUEboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY0ZDJlZjItZmJjMi00YjE1LTgxMDQtZTUzYzM1OGNm MTM5MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWZkNWQyMTUtYTRkMy00OWM5LWE1MTAtNTc2YjM0ZGQ3ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmldoyo4g9wCw6+sk55M8RtfWj2tECGH1hZxD eh5TdnT+QQ+fQo9t8/gtcdL5YGs39kcRqbVUMmVJqnx/0cLd2x5bVgrQgvhSVsgY xOj9ZCHEZxGwVqTTs0oo/tAG6f7guA+Afx41MfnqJ6UIciaDj/BhCIcmr3bIx9XR Wz+KbE05SslUcivNxPoiFCjRqeHTGa3JWbznHir9dtRJQl2pqRQ3he9Z4fkZo9gs p0PmKQGkOnUNmwmV5Fm082s8AL9eCgmN+fRjLrFUswhwRbzEtEJE1EpEF4R2KqEP pA5syWtDk1yCczBBBMzPciYw6qgROuccZnpLeW56d7s9MrNCOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU4RTxVSEmnrMvzNwaccFqr4xQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZjRk MmVmMi1mYmMyLTRiMTUtODEwNC1lNTNjMzU4Y2YxMzkvZDdhZWM2ZjctNDZmZi0z YjY0LTlmZmEtZTI5NTM1MjEzMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmY0ZDJlZjItZmJjMi00YjE1LTgx MDQtZTUzYzM1OGNmMTM5LzJmNGQyZWYyLWZiYzItNGIxNS04MTA0LWU1M2MzNThj ZjEzOS5jcmwwHwYDVR0jBBgwFoAU5qjCP7WCgBl++zOh730w3Km730swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZjRkMmVmMi1mYmMyLTRiMTUtODEwNC1lNTNj MzU4Y2YxMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApD/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjvqrHattdD36iPpbjPCN0FVhPMIVN86eST55pY9wIH4eMe6Aw/vW9F cKBv+rMpoCOTVUOuoOq0Spoo8BF1a/l5jMFMWVcFRbMcGMX5JMH4lI47OQpGVuz9 jAmF+XeqRPAhgDZxxNKNOgut+tQrhfX4nM7ufClTmI51r1v7+6+uRERzV7YYIb1y C4NBCSz2mRP6r+x1nysYhCs0Ppa6rr9oGDd/SDknaG9WiqTFvm/XlOrP1N7zI+kJ 13lq7TAuI0AdINt5vVcJ3nMVK/6IWj51Mx1GqRqVZToJmWWrIXRyxhYYebY9R3lN hJXN8mZT2vPycUXFeI/lyv9Ai8KJeDw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:24 2025 by rpki-client