$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/16a345d3-6d09-315d-80f7-a4684621e47d.roa File: 16a345d3-6d09-315d-80f7-a4684621e47d.roa (raw, json) Hash identifier: q/A8EpHUtRSRJc8WH4IUqokje79eQSYIFJkfTxi+n74= Subject key identifier: 48:C5:03:A8:E2:1E:12:C0:F7:27:2A:79:64:82:49:56:7E:03:20:F7 Certificate issuer: /CN=564c92f5-eb04-448d-8939-379434b228b3 Certificate serial: 010D0C9F4328584B84E76BB974C81225AFE7A3A0 Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/16a345d3-6d09-315d-80f7-a4684621e47d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 30580 IP address blocks: 204.83.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6b:b9:74:c8:12:25:af:e7:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ac5a306d-a38d-49f5-9e7e-71c7e072f277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8f:b3:62:af:73:6c:e1:59:93:54:09:c5:c8: ca:7d:93:2e:a4:a2:aa:9d:38:6a:14:d6:0b:ba:73: a6:c4:33:36:ad:79:fe:d7:e8:03:43:d8:ef:2e:9c: e1:40:58:00:7f:c9:5b:59:e7:51:81:3f:23:db:6e: bc:70:ca:f9:1a:ce:79:49:52:08:c1:c7:f6:e7:e6: 3c:48:02:3d:1f:97:8f:cf:1e:2a:ec:c6:ed:b5:d0: 8b:a2:c8:7f:94:28:7a:cf:66:9b:20:03:d5:53:59: 12:65:74:2d:6a:09:c3:f2:7d:0e:e1:31:fd:19:b6: 48:58:ae:4a:61:d3:c8:e3:70:bc:de:e4:15:24:bf: a8:0f:13:50:ee:81:8b:d1:18:cc:d6:a5:20:3b:8a: 56:68:c5:30:77:88:97:72:95:41:aa:97:30:c2:5b: 42:31:af:2c:77:97:60:03:d1:f7:e2:44:18:d8:62: 62:12:b3:42:a8:f1:2e:b3:a6:77:2e:d5:cb:e0:2a: 33:e2:e6:60:b7:34:97:33:26:e4:4c:60:d9:a2:4a: 63:15:ee:51:7d:e1:41:f8:f4:f6:98:07:07:b6:96: 54:c2:5a:b0:a2:6e:cd:30:83:83:6d:1f:fc:93:54: 60:fa:d9:8e:db:44:2c:8a:c1:d6:be:46:c0:5a:f9: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C5:03:A8:E2:1E:12:C0:F7:27:2A:79:64:82:49:56:7E:03:20:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/16a345d3-6d09-315d-80f7-a4684621e47d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl X509v3 Authority Key Identifier: keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer sbgp-ipAddrBlock: critical IPv4: 204.83.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2a:f7:5c:f5:ac:9e:99:93:2c:72:93:40:18:85:89:12:a3: 19:04:7e:a6:54:89:8f:23:73:fb:1a:87:1a:52:ac:bb:1b:79: d1:0b:1b:9f:d2:44:f5:f8:bc:10:88:e4:77:32:8f:c5:1e:1f: a4:24:fa:c0:72:39:81:6c:89:63:ca:9c:fd:6d:f0:81:eb:4a: f6:f9:85:dd:a9:80:79:48:32:f4:20:70:09:e7:58:33:8c:26: 24:3b:50:a6:bc:d9:0a:1c:c4:f2:e4:35:df:87:3a:64:fc:46: 3e:68:fd:be:fb:c6:dd:8c:c1:80:aa:60:1d:f6:52:7f:f5:95: 98:4e:be:34:9b:c6:8e:ab:9b:97:b1:a0:23:f9:45:be:3f:30: 1a:08:44:a4:c4:31:04:1a:73:97:2f:f1:61:1f:f9:51:d9:2e: 78:4a:73:f1:1e:ef:09:89:62:a0:03:5b:f3:3a:7c:84:d5:86: f3:c6:58:5a:be:89:55:3a:6f:b8:3e:71:37:a3:01:cc:9f:43: 33:fe:37:9b:a9:82:75:4e:ed:05:f6:35:a7:1b:44:53:4a:f6: 69:51:59:37:d6:aa:6c:b4:23:86:87:26:ed:dd:ab:f6:96:78: df:ff:07:a3:95:fd:a3:e8:6a:d2:ef:8c:e8:a0:23:d1:6a:34: 5f:3b:2c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52u5dMgSJa/no6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy OGIzMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YWM1YTMwNmQtYTM4ZC00OWY1LTllN2UtNzFjN2UwNzJmMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio+zYq9zbOFZk1QJxcjKfZMupKKqnThqFNYL unOmxDM2rXn+1+gDQ9jvLpzhQFgAf8lbWedRgT8j2268cMr5Gs55SVIIwcf25+Y8 SAI9H5ePzx4q7MbttdCLosh/lCh6z2abIAPVU1kSZXQtagnD8n0O4TH9GbZIWK5K YdPI43C83uQVJL+oDxNQ7oGL0RjM1qUgO4pWaMUwd4iXcpVBqpcwwltCMa8sd5dg A9H34kQY2GJiErNCqPEus6Z3LtXL4Coz4uZgtzSXMybkTGDZokpjFe5RfeFB+PT2 mAcHtpZUwlqwom7NMIODbR/8k1Rg+tmO20QsisHWvkbAWvlJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjFA6jiHhLA9ycqeWSCSVZ+AyD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvMTZhMzQ1ZDMtNmQwOS0z MTVkLTgwZjctYTQ2ODQ2MjFlNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5 MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0 MzRiMjI4YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFO/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUq91z1rJ6Zkyxyk0AYhYkSoxkEfqZUiY8jc/sahxpSrLsbedELG5/S RPX4vBCI5Hcyj8UeH6Qk+sByOYFsiWPKnP1t8IHrSvb5hd2pgHlIMvQgcAnnWDOM JiQ7UKa82QocxPLkNd+HOmT8Rj5o/b77xt2MwYCqYB32Un/1lZhOvjSbxo6rm5ex oCP5Rb4/MBoIRKTEMQQac5cv8WEf+VHZLnhKc/Ee7wmJYqADW/M6fITVhvPGWFq+ iVU6b7g+cTejAcyfQzP+N5upgnVO7QX2NacbRFNK9mlRWTfWqmy0I4aHJu3dq/aW eN//B6OV/aPoatLvjOigI9FqNF87LOs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:19:16 2025 by rpki-client