$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/647f3a86-6cb1-31a2-a01e-fd555d173877.roa File: 647f3a86-6cb1-31a2-a01e-fd555d173877.roa (raw, json) Hash identifier: ofQP15axf6ob+JCNqi32r2gkeNNYO05QvHF1O0aNLKs= Subject key identifier: EE:60:B5:28:B1:32:7F:7A:A8:57:48:61:77:1B:D8:99:BC:A5:0F:17 Certificate issuer: /CN=1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b Certificate serial: 010D0C9F4328584B1AD175F2AF3BDA5E19E10F00 Authority key identifier: 17:49:B2:BE:29:6D:3A:F6:4A:90:99:69:0B:9C:E2:8A:C5:A8:95:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/647f3a86-6cb1-31a2-a01e-fd555d173877.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 13825 IP address blocks: 64.130.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:75:f2:af:3b:da:5e:19:e1:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=38e9fa4b-ce23-4809-801c-8fb58c5a76c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:36:34:6e:7c:80:ae:96:85:27:17:3c:69:75: 8b:ba:29:2d:30:03:0e:8b:93:45:3b:93:84:0d:1e: d3:e0:b5:8b:11:96:ee:34:8c:4e:34:96:a1:3f:e6: f1:11:b9:49:ee:14:5c:68:b2:4e:c2:e9:14:64:ab: 34:40:fe:3c:c4:3f:09:7d:53:ae:d6:77:43:c4:21: 0a:ac:2a:79:1c:27:cd:b0:2f:3c:63:0d:b0:7a:fd: 93:0b:b0:1e:3d:19:af:a0:0f:e7:17:87:f0:a0:be: 98:38:b7:93:d5:2b:46:83:39:3b:cf:ba:dc:8f:ca: d6:d5:e2:6c:3c:7c:46:79:5a:ec:82:5f:a5:e6:ae: d8:a0:91:9d:68:c3:31:8f:22:1d:07:ee:e4:9a:01: 43:32:de:b8:76:be:a2:8b:37:11:a8:ce:9e:32:27: 3e:22:31:01:ca:f3:26:39:df:4d:3a:e4:aa:8c:37: 5f:c7:7a:d7:a6:cb:8b:e0:d4:ea:95:b4:25:80:4d: a1:97:38:0a:27:e9:87:39:e3:9d:d0:5d:df:02:45: a9:1a:e3:ae:ec:e7:33:69:e9:e8:97:e9:a3:54:ce: b1:67:71:08:24:e6:ca:31:6a:12:5e:ed:00:94:45: ea:e5:00:4e:cd:75:80:28:2f:b8:c5:82:05:76:96: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:B5:28:B1:32:7F:7A:A8:57:48:61:77:1B:D8:99:BC:A5:0F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/647f3a86-6cb1-31a2-a01e-fd555d173877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.crl X509v3 Authority Key Identifier: keyid:17:49:B2:BE:29:6D:3A:F6:4A:90:99:69:0B:9C:E2:8A:C5:A8:95:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1f7c3036-ae2e-4c55-aadf-6b2f7df6cc1b.cer sbgp-ipAddrBlock: critical IPv4: 64.130.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a1:ab:35:e4:b4:ea:37:5e:15:0f:79:b9:70:6c:1c:9e:95: ca:f9:cb:45:e8:be:fa:b8:12:e3:2c:34:12:8b:22:77:c8:7f: d8:84:7c:0c:e6:8e:eb:b8:2f:fe:21:67:47:0b:1e:fc:86:2a: 33:b4:8f:a1:7c:9d:1b:d6:ad:29:23:81:a0:9d:c6:d4:26:22: 8e:2a:3a:36:dd:97:85:dc:4e:1c:e1:ec:47:c1:ba:11:db:46: 4d:31:31:5b:8f:5a:3a:bc:00:21:24:2f:77:f4:0d:0a:03:14: d9:be:e0:9b:89:6a:e6:cd:f1:f5:ff:bc:37:68:7b:8c:33:56: d4:91:62:f0:66:be:80:1f:f7:05:a0:0b:0c:bc:12:8a:54:0b: d9:00:f4:5e:2e:92:43:27:63:a9:32:6a:1d:ea:0f:8a:a9:ac: ab:25:43:cc:28:60:8e:e2:39:95:71:c3:1d:49:14:32:14:eb: d7:33:a3:64:85:5b:45:b0:91:7b:3e:ab:d8:31:8b:b2:bc:00: b5:a4:5c:85:9e:0a:16:c6:fc:06:f6:a1:ca:28:47:8a:3e:94: 12:ff:c2:73:c2:c1:e5:ba:40:61:ce:7f:bc:55:93:7a:2b:9d: f4:b5:69:93:47:17:3a:5a:0f:1d:94:66:66:e4:57:22:a9:a0: 55:3e:7c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XXyrzvaXhnhDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3YzMwMzYtYWUyZS00YzU1LWFhZGYtNmIyZjdkZjZj YzFiMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MzhlOWZhNGItY2UyMy00ODA5LTgwMWMtOGZiNThjNWE3NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jY0bnyArpaFJxc8aXWLuiktMAMOi5NFO5OE DR7T4LWLEZbuNIxONJahP+bxEblJ7hRcaLJOwukUZKs0QP48xD8JfVOu1ndDxCEK rCp5HCfNsC88Yw2wev2TC7AePRmvoA/nF4fwoL6YOLeT1StGgzk7z7rcj8rW1eJs PHxGeVrsgl+l5q7YoJGdaMMxjyIdB+7kmgFDMt64dr6iizcRqM6eMic+IjEByvMm Od9NOuSqjDdfx3rXpsuL4NTqlbQlgE2hlzgKJ+mHOeOd0F3fAkWpGuOu7Oczaeno l+mjVM6xZ3EIJObKMWoSXu0AlEXq5QBOzXWAKC+4xYIFdpap7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5gtSixMn96qFdIYXcb2Jm8pQ8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZjdj MzAzNi1hZTJlLTRjNTUtYWFkZi02YjJmN2RmNmNjMWIvNjQ3ZjNhODYtNmNiMS0z MWEyLWEwMWUtZmQ1NTVkMTczODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWY3YzMwMzYtYWUyZS00YzU1LWFh ZGYtNmIyZjdkZjZjYzFiLzFmN2MzMDM2LWFlMmUtNGM1NS1hYWRmLTZiMmY3ZGY2 Y2MxYi5jcmwwHwYDVR0jBBgwFoAUF0myviltOvZKkJlpC5ziisWolYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZjdjMzAzNi1hZTJlLTRjNTUtYWFkZi02YjJm N2RmNmNjMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQIJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOhqzXktOo3XhUPeblwbByelcr5y0Xovvq4EuMsNBKLInfIf9iEfAzm juu4L/4hZ0cLHvyGKjO0j6F8nRvWrSkjgaCdxtQmIo4qOjbdl4XcThzh7EfBuhHb Rk0xMVuPWjq8ACEkL3f0DQoDFNm+4JuJaubN8fX/vDdoe4wzVtSRYvBmvoAf9wWg Cwy8EopUC9kA9F4ukkMnY6kyah3qD4qprKslQ8woYI7iOZVxwx1JFDIU69czo2SF W0WwkXs+q9gxi7K8ALWkXIWeChbG/Ab2ocooR4o+lBL/wnPCweW6QGHOf7xVk3or nfS1aZNHFzpaDx2UZmbkVyKpoFU+fCc= -----END CERTIFICATE-----Generated at Tue Oct 21 01:59:03 2025 by rpki-client