$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa File: add0a9ff-c124-381c-9d60-5f74979be3f7.roa (raw, json) Hash identifier: 7vDhKZ3/Q/gIWBbCCgQqZo3xuxruLabCJKCNc9araj0= Subject key identifier: C7:59:B3:5F:01:8E:3B:DE:B4:11:35:75:9E:7D:69:E9:EA:10:5E:C8 Certificate issuer: /CN=afc2bf64-2cba-4362-8b12-56844da30e4e Certificate serial: 010D0C9F4328584B91777888E012332F874A6280 Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 14343 IP address blocks: 64.26.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:78:88:e0:12:33:2f:87:4a:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=f31ca450-dd24-4b3a-a579-c09bc4f9328a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:52:cc:e5:fe:7d:94:4e:bf:89:72:e9:27:40: 44:fe:3c:c1:c6:d8:e5:81:f2:e3:42:e0:85:ad:f0: 86:48:50:03:bd:ae:47:6e:5b:34:0c:c6:64:35:ed: a2:cb:38:78:31:23:a1:f7:c4:31:05:0a:7e:8f:56: 5a:94:b6:56:4f:90:ec:68:f1:6b:6d:0a:e8:98:47: 9a:4e:07:2e:d0:85:22:0c:aa:44:39:82:28:fc:1a: 19:c0:b2:83:ee:1c:45:62:51:8b:51:f9:44:53:4f: 83:10:27:30:3e:2a:bf:e9:6d:38:18:d7:be:6a:d5: 47:3e:86:cf:88:67:dc:4e:12:f7:d6:8d:e3:db:b1: 0e:76:c7:cb:2f:8b:27:50:90:4f:50:67:0f:63:7a: cd:34:18:43:b1:1d:2d:c6:ca:5a:ca:41:ad:1a:11: 83:a1:bb:1f:23:74:ab:ff:d0:03:7c:91:45:c4:23: 12:c6:71:8e:5a:6d:df:8f:97:bd:95:89:58:f3:e3: 4a:0f:4a:37:0d:27:57:13:ec:85:7d:63:78:07:dd: e6:2c:ba:51:53:20:fc:61:bf:9e:46:5b:49:c8:3f: 02:2d:be:24:96:69:2f:da:03:a3:16:20:9b:bc:e7: f6:33:94:d1:d0:58:b0:a1:23:95:1d:89:76:2a:e9: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:59:B3:5F:01:8E:3B:DE:B4:11:35:75:9E:7D:69:E9:EA:10:5E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl X509v3 Authority Key Identifier: keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer sbgp-ipAddrBlock: critical IPv4: 64.26.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cd:9b:2d:99:48:db:8a:55:a9:93:d5:45:e8:14:51:c3:b4: 32:f6:d5:d3:77:6d:6c:e6:46:15:07:01:c9:75:a1:77:fe:16: 26:00:61:ae:9b:95:46:be:ef:6d:0e:24:4a:5b:bc:87:87:76: aa:bc:90:9b:01:06:81:e6:d6:6e:11:2e:b1:22:0a:65:61:53: 94:57:46:a5:ca:1c:8f:77:7b:bd:44:3b:bd:f7:82:9d:eb:49: e6:28:47:23:97:25:0f:7b:7f:18:ae:c3:b9:b4:9f:5e:29:9a: 44:51:00:33:2e:07:b9:7c:73:c2:60:b8:5e:a4:62:5c:b1:ae: 2d:b5:ed:2a:0e:79:3d:19:bd:a1:b8:52:8d:cd:92:6b:bd:35: d7:14:c8:68:23:37:66:59:f5:a3:e3:7a:c1:80:6a:dc:ac:cb: 3c:d9:95:30:30:0f:e6:31:33:5d:4c:49:15:17:2a:6f:4f:63: 27:3e:d3:30:64:fd:1b:4a:a3:c4:79:ab:46:bc:86:a1:03:65: 1e:58:a0:34:4c:e0:74:f4:ca:dc:09:a1:6d:92:d2:5d:ee:0e: 03:5e:b6:7d:0c:59:10:4f:33:15:a1:bf:f6:77:2b:e8:b1:de: 68:43:69:3f:66:26:66:b1:c7:e5:31:1a:36:5d:80:0c:9c:84: 61:1f:5b:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3iI4BIzL4dKYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMw ZTRlMB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk ZjMxY2E0NTAtZGQyNC00YjNhLWE1NzktYzA5YmM0ZjkzMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FLM5f59lE6/iXLpJ0BE/jzBxtjlgfLjQuCF rfCGSFADva5Hbls0DMZkNe2iyzh4MSOh98QxBQp+j1ZalLZWT5DsaPFrbQromEea Tgcu0IUiDKpEOYIo/BoZwLKD7hxFYlGLUflEU0+DECcwPiq/6W04GNe+atVHPobP iGfcThL31o3j27EOdsfLL4snUJBPUGcPY3rNNBhDsR0txspaykGtGhGDobsfI3Sr /9ADfJFFxCMSxnGOWm3fj5e9lYlY8+NKD0o3DSdXE+yFfWN4B93mLLpRUyD8Yb+e RltJyD8CLb4klmkv2gOjFiCbvOf2M5TR0FiwoSOVHYl2Kul6NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdZs18BjjvetBE1dZ59aenqEF7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmMy YmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvYWRkMGE5ZmYtYzEyNC0z ODFjLTlkNjAtNWY3NDk3OWJlM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjMmJmNjQtMmNiYS00MzYyLThi MTItNTY4NDRkYTMwZTRlL2FmYzJiZjY0LTJjYmEtNDM2Mi04YjEyLTU2ODQ0ZGEz MGU0ZS5jcmwwHwYDVR0jBBgwFoAUQ11azSfNCa/JdmMsKHivc/qfX0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0 NGRhMzBlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvNmy2ZSNuKVamT1UXoFFHDtDL21dN3bWzmRhUHAcl1oXf+FiYAYa6b lUa+720OJEpbvIeHdqq8kJsBBoHm1m4RLrEiCmVhU5RXRqXKHI93e71EO733gp3r SeYoRyOXJQ97fxiuw7m0n14pmkRRADMuB7l8c8JguF6kYlyxri217SoOeT0ZvaG4 Uo3Nkmu9NdcUyGgjN2ZZ9aPjesGAatysyzzZlTAwD+YxM11MSRUXKm9PYyc+0zBk /RtKo8R5q0a8hqEDZR5YoDRM4HT0ytwJoW2S0l3uDgNetn0MWRBPMxWhv/Z3K+ix 3mhDaT9mJmaxx+UxGjZdgAychGEfW38= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:26 2025 by rpki-client