$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa File: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (raw, json) Hash identifier: R6k/sRP8LvL9HNtUDw5y+RcUptyqUlKWTaNxpLGX2bE= Subject key identifier: D0:B4:51:9A:4F:93:5C:A3:A7:D7:60:8F:C4:5D:DD:3B:24:7D:DF:3A Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD815EE6DC646921C3E00 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 64.82.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d8:15:ee:6d:c6:46:92:1c:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=18137b59-4345-4405-8fee-3fba377c2ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:77:68:3d:29:be:ce:61:ef:29:41:b1:23: c7:af:c7:16:0c:3a:42:d0:c2:9c:0b:60:bc:44:48: b9:a1:e8:01:4f:b6:ad:b7:75:cd:98:b2:29:72:e7: 9f:f1:8c:b1:7f:6f:14:11:b1:b7:24:38:58:60:6e: 57:ca:a4:47:76:92:41:27:68:c6:15:42:f0:82:4b: 1e:da:fa:b9:80:03:8c:ef:64:9a:ba:6a:c2:72:cd: 62:62:2c:c0:3f:9e:66:2b:55:a1:fe:a9:41:2e:9e: 29:7f:5f:49:15:55:86:ed:a1:d7:90:63:08:bb:5a: df:16:93:fc:f5:07:e2:e6:5e:fe:27:ef:80:70:16: 84:03:79:5a:4f:bb:03:6b:3a:74:f7:27:10:67:5d: da:07:a2:96:f1:15:b3:7c:48:be:ee:97:e9:47:ea: fd:29:51:21:d8:e0:64:60:e5:f8:f5:0c:ac:ac:1c: 6e:4d:7e:40:5f:f2:2a:02:76:7e:1d:1a:94:ad:d6: 98:c9:6d:02:54:63:1b:b1:a8:9a:9d:85:03:91:cf: 6e:82:56:07:b2:bf:46:74:e5:d8:bb:de:14:65:78: c0:cb:fe:02:36:e1:c0:97:43:3f:a3:07:ff:a1:7f: 16:7b:0c:e3:96:b8:29:50:ae:0f:36:85:db:9b:e4: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B4:51:9A:4F:93:5C:A3:A7:D7:60:8F:C4:5D:DD:3B:24:7D:DF:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 64.82.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:82:08:9c:57:1f:64:1b:86:fb:43:f3:18:30:36:4d:72:1a: 6e:f4:f2:ff:55:a7:94:3c:d6:99:28:6a:1b:e8:fe:be:68:67: cd:b9:2d:5f:a2:66:1f:45:ea:e3:f6:e8:a4:1d:9f:34:76:33: 9e:fd:af:6e:03:93:3a:a0:3a:5f:f9:4b:5d:ce:e2:4e:a3:9a: b5:2b:d9:b0:8b:0b:8b:66:ed:7d:02:98:d2:7a:0a:d0:ba:32: c8:f3:dc:72:8c:74:3a:62:ad:c9:a4:64:f9:eb:a4:55:c0:86: b8:3a:f1:33:01:a7:01:9b:6d:04:3d:f1:4d:58:3d:15:04:65: 5f:47:25:ec:2e:75:98:0d:b7:ff:e2:79:55:00:93:a3:12:35: e3:38:24:2b:92:01:5d:ff:bf:8e:77:28:59:8e:86:a5:06:4f: 66:00:5c:90:72:c7:3b:97:12:3d:32:2f:69:3e:65:a4:44:bd: a4:44:92:64:27:86:02:44:90:2c:0a:a5:33:b9:6a:6b:45:e9: 28:b5:7b:57:32:bd:a8:8b:0f:37:53:8e:76:b2:3a:b1:0f:81: cd:31:89:df:5b:b1:2a:40:89:6c:03:f5:0e:6b:a6:c2:3c:ec: 3b:fb:09:96:38:7a:f0:c4:2f:35:90:65:8a:f9:2c:87:07:d6: 0a:78:37:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNgV7m3GRpIcPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MTgxMzdiNTktNDM0NS00NDA1LThmZWUtM2ZiYTM3N2MyY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTZ3aD0pvs5h7ylBsSPHr8cWDDpC0MKcC2C8 REi5oegBT7att3XNmLIpcuef8Yyxf28UEbG3JDhYYG5XyqRHdpJBJ2jGFULwgkse 2vq5gAOM72SaumrCcs1iYizAP55mK1Wh/qlBLp4pf19JFVWG7aHXkGMIu1rfFpP8 9Qfi5l7+J++AcBaEA3laT7sDazp09ycQZ13aB6KW8RWzfEi+7pfpR+r9KVEh2OBk YOX49QysrBxuTX5AX/IqAnZ+HRqUrdaYyW0CVGMbsaianYUDkc9uglYHsr9GdOXY u94UZXjAy/4CNuHAl0M/owf/oX8WewzjlrgpUK4PNoXbm+SiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC0UZpPk1yjp9dgj8Rd3Tskfd86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYTY0YmJmYWEtYTE0Ny0z OWY5LWJmMWYtZGJhZTk5NzFkOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqCCJxXH2QbhvtD8xgwNk1yGm708v9Vp5Q81pkoahvo/r5oZ825LV+i Zh9F6uP26KQdnzR2M579r24DkzqgOl/5S13O4k6jmrUr2bCLC4tm7X0CmNJ6CtC6 Msjz3HKMdDpircmkZPnrpFXAhrg68TMBpwGbbQQ98U1YPRUEZV9HJewudZgNt//i eVUAk6MSNeM4JCuSAV3/v453KFmOhqUGT2YAXJByxzuXEj0yL2k+ZaREvaREkmQn hgJEkCwKpTO5amtF6Si1e1cyvaiLDzdTjnayOrEPgc0xid9bsSpAiWwD9Q5rpsI8 7Dv7CZY4evDELzWQZYr5LIcH1gp4N28= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:17 2025 by rpki-client