$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa File: 23961820-6832-3252-9dba-8aa2df70fc49.roa (raw, json) Hash identifier: 1fd5fYl5kNhartzqOIjpq/0aiJaZpx9uwC/yRf+/viI= Subject key identifier: DB:A7:C4:99:EF:08:D4:E8:B1:A6:2E:A8:E0:10:BF:F5:FD:22:66:3F Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584B5C6CB8BD16878B2291835680 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 21766 IP address blocks: 64.63.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b8:bd:16:87:8b:22:91:83:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=0ed45a35-4d13-4b06-9baa-0b851eee7ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:48:f7:9f:74:e5:a2:4d:39:0d:ad:54:89: 82:f5:32:82:bc:44:95:da:5c:0d:52:d2:80:60:dc: 90:ae:5e:f2:84:f1:62:0d:7f:e6:68:ae:d2:f0:5d: d7:9c:6a:e4:b9:95:e7:e4:b1:4d:c5:3e:a0:c3:1b: a0:b0:4e:cf:21:fb:5e:4e:e4:ba:93:ea:9e:2f:f8: 04:6b:e3:d9:44:e2:d9:3e:ad:a1:08:ce:00:5f:c1: 36:2e:6e:8e:59:49:39:f3:d4:86:dd:2a:17:c8:74: a0:15:03:8f:2a:0c:78:37:f5:14:45:cc:12:e6:a6: a9:eb:16:5a:de:9c:0a:c4:21:9e:f0:6e:80:7e:e4: 31:8e:83:68:14:4d:61:33:10:6e:de:5a:a9:bf:83: c9:ea:1c:e4:67:5b:bd:8f:b1:65:bd:50:fc:fd:02: 9f:e9:f5:2c:ad:09:9a:37:b1:ba:04:94:03:60:2b: cb:b6:1c:0f:ff:1d:28:c2:b5:2c:0f:8a:78:a7:1b: 92:8e:08:bf:39:00:eb:3e:26:13:ae:bd:5b:e8:e2: b3:9a:c1:73:c5:53:dd:86:3a:99:0f:a8:2e:86:ea: 3b:b7:f3:bd:b6:b4:d7:c7:bb:98:a8:f3:1b:57:d3: 39:5c:02:1b:c7:31:81:64:d3:c6:0b:4a:37:f7:7c: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A7:C4:99:EF:08:D4:E8:B1:A6:2E:A8:E0:10:BF:F5:FD:22:66:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 64.63.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ab:06:99:dc:74:1d:13:ff:02:32:20:dc:3d:f1:a1:da:53: d0:73:46:eb:06:2c:64:2d:ff:07:ae:80:55:89:34:ce:81:86: fb:c8:0e:98:6e:e2:ae:32:f6:33:cb:be:e2:5a:d0:d4:01:6d: 08:8c:9d:e0:79:a0:df:d5:fa:00:15:1d:03:8a:7f:7d:1e:9f: c2:82:73:17:c3:82:79:0d:84:04:87:7c:1c:73:59:da:c5:6d: 7a:8a:e7:8c:0a:f9:f7:6d:5e:c4:9c:98:b1:6e:20:41:3d:1e: c4:f1:9f:15:92:70:66:3f:df:66:e4:fb:9f:4e:02:c7:67:1e: 6f:43:63:91:5c:84:1e:ae:20:a2:a2:e1:c5:eb:97:61:f1:64: 17:31:d2:83:58:92:31:fe:c1:50:dc:88:75:e4:e0:36:0b:ad: db:4e:ba:6b:f3:1e:02:de:60:e3:df:dc:c8:45:de:ff:97:11: 8d:66:0c:9d:14:bc:82:1d:66:f1:44:f6:6e:5a:07:82:8e:66: 82:ec:cf:86:bb:11:23:ae:a8:cd:f1:af:78:7f:d4:9a:7d:9d: 16:93:68:60:26:10:5b:d3:6a:03:ba:ef:f4:ce:3e:45:e4:ec: d0:96:2f:17:2c:b2:74:a7:39:a0:9d:e7:2d:eb:0d:9b:20:b1: 02:72:3f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLi9FoeLIpGDVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MGVkNDVhMzUtNGQxMy00YjA2LTliYWEtMGI4NTFlZWU3ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXNI95905aJNOQ2tVImC9TKCvESV2lwNUtKA YNyQrl7yhPFiDX/maK7S8F3XnGrkuZXn5LFNxT6gwxugsE7PIfteTuS6k+qeL/gE a+PZROLZPq2hCM4AX8E2Lm6OWUk589SG3SoXyHSgFQOPKgx4N/UURcwS5qap6xZa 3pwKxCGe8G6AfuQxjoNoFE1hMxBu3lqpv4PJ6hzkZ1u9j7FlvVD8/QKf6fUsrQma N7G6BJQDYCvLthwP/x0owrUsD4p4pxuSjgi/OQDrPiYTrr1b6OKzmsFzxVPdhjqZ D6guhuo7t/O9trTXx7uYqPMbV9M5XAIbxzGBZNPGC0o393y70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNunxJnvCNTosaYuqOAQv/X9ImY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMjM5NjE4MjAtNjgzMi0z MjUyLTlkYmEtOGFhMmRmNzBmYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASrBpncdB0T/wIyINw98aHaU9BzRusGLGQt/weugFWJNM6BhvvIDphu 4q4y9jPLvuJa0NQBbQiMneB5oN/V+gAVHQOKf30en8KCcxfDgnkNhASHfBxzWdrF bXqK54wK+fdtXsScmLFuIEE9HsTxnxWScGY/32bk+59OAsdnHm9DY5FchB6uIKKi 4cXrl2HxZBcx0oNYkjH+wVDciHXk4DYLrdtOumvzHgLeYOPf3MhF3v+XEY1mDJ0U vIIdZvFE9m5aB4KOZoLsz4a7ESOuqM3xr3h/1Jp9nRaTaGAmEFvTagO67/TOPkXk 7NCWLxcssnSnOaCd5y3rDZsgsQJyP8A= -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:05 2025 by rpki-client