$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa File: 071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa (raw, json) Hash identifier: dVi0GrdPRSGBvqdPHcmv8reZnMgKkA5RCmB5k+mtvMg= Subject key identifier: 56:89:18:A2:53:79:41:C7:E5:93:6A:DF:D8:29:77:A7:34:5F:5F:E5 Certificate issuer: /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb Certificate serial: 010D0C9F4328584B5DD1EE9BB42B9DA298F95700 Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16509 IP address blocks: 166.98.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ee:9b:b4:2b:9d:a2:98:f9:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=fc9f7274-8ab5-4ebe-9959-6ee02ac37a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:8a:30:f1:1d:ff:75:33:8c:68:7c:85:a1: bb:d2:b2:c7:ab:e8:e4:e5:ea:d5:99:de:6d:b5:74: 0d:92:74:d9:57:17:87:67:1c:84:6a:de:1f:a0:0c: 05:15:46:48:c7:9c:4c:d5:bf:dc:a5:61:51:9e:6f: b3:5f:b5:eb:31:a5:2d:ee:3d:13:17:ba:d0:70:9b: 8c:c9:d1:10:1d:22:03:60:31:fb:ac:d7:e3:75:a9: 29:07:d7:28:8f:f0:0f:4b:d8:4f:6d:75:cc:3c:61: 91:8f:24:1f:c0:fa:d3:11:51:2d:12:70:66:2c:28: 45:4d:a1:bb:45:73:d4:4b:17:da:87:a7:b9:d5:da: 5f:f7:56:39:d2:7b:ee:00:ce:2a:2b:a8:0f:ec:4d: a3:4b:8b:a0:fe:e8:0b:dd:ff:cc:99:fe:9a:79:b7: d6:bd:a3:82:ca:a2:42:64:c5:fc:40:bd:e3:ba:61: ba:08:96:05:17:4e:81:a8:b3:b1:a6:74:78:a9:d0: c5:95:57:c6:50:b1:3b:66:d9:ba:1e:3d:e5:77:cd: 4e:d5:f5:3f:6d:97:4b:1a:4b:f8:64:2b:6e:df:63: 2f:b6:9f:eb:b7:58:a0:68:f2:41:72:af:9d:d1:47: 64:9d:76:b5:f5:1d:fa:40:8b:72:7c:d7:f8:ad:ef: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:89:18:A2:53:79:41:C7:E5:93:6A:DF:D8:29:77:A7:34:5F:5F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl X509v3 Authority Key Identifier: keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer sbgp-ipAddrBlock: critical IPv4: 166.98.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c1:1d:ce:ee:08:d2:69:de:6c:a7:14:fc:07:3f:72:b5:97: da:6b:08:96:a8:8a:d3:34:8c:8c:78:f8:67:56:67:a0:20:0e: 70:eb:4e:73:cb:93:7e:0b:aa:bd:a1:1f:5f:2d:3e:02:c6:01: 03:8f:27:cc:03:ee:77:78:29:3e:c5:79:37:6f:10:50:1a:14: ab:42:0b:c9:cd:55:dd:05:de:05:e5:6f:4c:43:7c:ab:70:62: 93:b5:41:e6:ea:97:96:15:28:db:bb:50:cf:23:e0:6c:d6:be: 89:e2:88:4c:05:6b:ad:ed:03:26:8c:3b:fc:cc:a7:69:1d:44: 45:86:4a:1f:99:37:0f:d6:7f:11:33:c9:53:1d:d4:67:fe:f2: b1:fd:8b:f5:3e:1d:cf:b4:fb:fa:77:e6:30:0d:31:02:08:26: 67:9e:2f:72:af:17:e1:fb:0b:95:c8:d9:37:4c:c3:55:e3:c3: 56:72:5e:b0:cc:00:07:a5:e9:c5:e2:30:e7:c3:68:b8:64:00: bb:28:f3:fd:b1:83:32:01:15:a8:b3:db:02:83:27:da:bf:1e: e6:19:bf:00:0a:7b:c5:70:9f:2c:17:d9:da:f7:fc:19:db:e3: 14:1b:3f:09:3f:fb:35:92:49:14:e6:55:f3:e0:2f:a1:80:df: 37:ef:8e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0e6btCudopj5VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkN2NiMmUtMTE3Yy00MzFlLTk1YWEtYTBjYzRjMmQ4 OWJiMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmM5ZjcyNzQtOGFiNS00ZWJlLTk5NTktNmVlMDJhYzM3YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jiKMPEd/3UzjGh8haG70rLHq+jk5erVmd5t tXQNknTZVxeHZxyEat4foAwFFUZIx5xM1b/cpWFRnm+zX7XrMaUt7j0TF7rQcJuM ydEQHSIDYDH7rNfjdakpB9coj/APS9hPbXXMPGGRjyQfwPrTEVEtEnBmLChFTaG7 RXPUSxfah6e51dpf91Y50nvuAM4qK6gP7E2jS4ug/ugL3f/Mmf6aebfWvaOCyqJC ZMX8QL3jumG6CJYFF06BqLOxpnR4qdDFlVfGULE7Ztm6Hj3ld81O1fU/bZdLGkv4 ZCtu32Mvtp/rt1igaPJBcq+d0UdknXa19R36QItyfNf4re8yhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaJGKJTeUHH5ZNq39gpd6c0X1/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NGQ3 Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNjNGMyZDg5YmIvMDcxYmZmOTEtZmQyMi0z M2YyLThiOWMtZDFiZDRiOWZmMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjRkN2NiMmUtMTE3Yy00MzFlLTk1 YWEtYTBjYzRjMmQ4OWJiLzY0ZDdjYjJlLTExN2MtNDMxZS05NWFhLWEwY2M0YzJk ODliYi5jcmwwHwYDVR0jBBgwFoAUNOK4lHuW1cAacPIenc2r2/XuqzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NGQ3Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNj NGMyZDg5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvBHc7uCNJp3mynFPwHP3K1l9prCJaoitM0jIx4+GdWZ6AgDnDrTnPL k34Lqr2hH18tPgLGAQOPJ8wD7nd4KT7FeTdvEFAaFKtCC8nNVd0F3gXlb0xDfKtw YpO1Qebql5YVKNu7UM8j4GzWvoniiEwFa63tAyaMO/zMp2kdREWGSh+ZNw/WfxEz yVMd1Gf+8rH9i/U+Hc+0+/p35jANMQIIJmeeL3KvF+H7C5XI2TdMw1Xjw1ZyXrDM AAel6cXiMOfDaLhkALso8/2xgzIBFaiz2wKDJ9q/HuYZvwAKe8VwnywX2dr3/Bnb 4xQbPwk/+zWSSRTmVfPgL6GA3zfvjsQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:50 2025 by rpki-client