$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa File: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (raw, json) Hash identifier: k3mWjiWSizxKDt+WEjOh4yN+j99xsxYvgDBw3OFJark= Subject key identifier: 73:7B:02:41:3A:42:18:8B:CF:2A:52:13:F0:AC:56:91:00:6E:72:43 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F4328584B84E771782E0735261A7EA6C0 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 6327 IP address blocks: 64.59.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:71:78:2e:07:35:26:1a:7e:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5b021ed8-e639-4a4d-921b-3d7a75b47406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:9f:27:a4:00:4e:0f:1e:65:47:1b:9e:17: f1:9d:85:c4:24:c2:6b:23:b9:37:e3:e6:a1:c1:12: 79:0c:d5:c8:8d:a4:d9:5a:ee:06:24:d0:7b:e2:47: 94:f0:cf:98:5f:f0:a7:4d:85:c0:b8:00:7f:32:6b: 24:1f:9c:e1:82:a9:7d:97:2b:8a:20:07:83:dc:11: 67:17:da:87:a9:6d:09:51:64:52:f9:b9:5b:6c:03: 24:b2:de:f7:9f:05:6c:57:45:41:cd:15:32:48:e4: e7:ae:f0:30:ed:69:ac:45:9f:88:92:81:02:63:99: 8f:db:f9:5d:d9:4f:1b:8b:8e:ce:67:8b:da:f6:e0: 7b:ed:22:0d:72:31:c9:9b:1c:b2:e0:d4:5c:34:1a: 66:ea:37:53:88:66:0d:36:6e:ee:a9:f2:71:ef:42: c0:7c:d0:e1:d6:bb:32:e0:58:c8:ae:4d:99:17:d2: d9:f6:38:38:85:67:25:cc:7d:a2:93:36:89:6d:93: ba:53:b0:99:f5:be:1d:fd:bb:b7:c2:18:54:90:a9: 67:25:7b:a1:ed:43:a1:4c:a0:32:49:45:c6:b4:25: 45:4d:ad:90:3a:97:0f:53:1f:94:64:a5:62:a1:82: 66:db:a4:81:00:4b:b5:b9:9b:99:7d:19:1e:dc:ed: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7B:02:41:3A:42:18:8B:CF:2A:52:13:F0:AC:56:91:00:6E:72:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: 64.59.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7a:05:9f:4e:c2:74:2a:1d:df:18:0f:39:dd:7b:d7:5d:71: 28:b7:42:05:37:7e:b4:ca:6f:d6:61:f0:b6:00:4d:88:6b:f4: c7:a4:11:87:6f:a4:c9:c7:d0:29:87:dd:57:d9:8f:80:c8:78: 73:6f:dc:a8:97:3c:de:da:55:f8:f4:87:de:1a:b0:70:a4:9d: ee:43:35:5f:fc:79:a5:2f:04:fe:e2:8d:1a:19:f9:c2:1e:77: 01:79:7d:f1:d6:64:2d:0c:67:80:3f:b8:0b:9c:4d:8a:0a:ce: 6f:d9:0b:df:5c:95:6c:5e:17:26:5b:bf:3d:60:57:d3:ff:dd: 79:9d:70:b8:4c:e0:c5:49:c4:ed:53:d5:6d:d0:c8:c2:44:04: c5:b6:25:ce:e9:40:51:59:88:71:44:9e:05:66:df:a3:ec:03: 1b:a7:b7:98:5c:e7:22:e2:80:ca:02:1c:0c:28:d7:7a:03:d0: a5:88:6e:88:2d:e5:a6:67:b5:5a:12:3a:47:76:e4:e7:0c:69: b7:a2:a2:50:14:3d:f8:1d:f7:2f:43:74:7c:cb:3b:96:53:ff: 86:57:65:f8:34:9b:de:45:85:b7:c3:92:d6:07:f3:98:96:82: e5:1c:81:fe:b7:d9:09:32:fd:be:dd:b4:da:1d:91:81:8b:7b: dc:15:7e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53F4Lgc1Jhp+psAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NWIwMjFlZDgtZTYzOS00YTRkLTkyMWItM2Q3YTc1YjQ3NDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrWfJ6QATg8eZUcbnhfxnYXEJMJrI7k34+ah wRJ5DNXIjaTZWu4GJNB74keU8M+YX/CnTYXAuAB/MmskH5zhgql9lyuKIAeD3BFn F9qHqW0JUWRS+blbbAMkst73nwVsV0VBzRUySOTnrvAw7WmsRZ+IkoECY5mP2/ld 2U8bi47OZ4va9uB77SINcjHJmxyy4NRcNBpm6jdTiGYNNm7uqfJx70LAfNDh1rsy 4FjIrk2ZF9LZ9jg4hWclzH2ikzaJbZO6U7CZ9b4d/bu3whhUkKlnJXuh7UOhTKAy SUXGtCVFTa2QOpcPUx+UZKVioYJm26SBAEu1uZuZfRke3O3JoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN7AkE6QhiLzypSE/CsVpEAbnJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvNGU3ZDhhOTAtNzhlOS0z MDhhLTg5OGItMTNkNDBjMjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH56BZ9OwnQqHd8YDznde9ddcSi3QgU3frTKb9Zh8LYATYhr9MekEYdv pMnH0CmH3VfZj4DIeHNv3KiXPN7aVfj0h94asHCkne5DNV/8eaUvBP7ijRoZ+cIe dwF5ffHWZC0MZ4A/uAucTYoKzm/ZC99clWxeFyZbvz1gV9P/3XmdcLhM4MVJxO1T 1W3QyMJEBMW2Jc7pQFFZiHFEngVm36PsAxunt5hc5yLigMoCHAwo13oD0KWIbogt 5aZntVoSOkd25OcMabeiolAUPfgd9y9DdHzLO5ZT/4ZXZfg0m95FhbfDktYH85iW guUcgf632Qky/b7dtNodkYGLe9wVfq8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:24 2025 by rpki-client