$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa File: 400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json) Hash identifier: rYTBpd6/LveIhxfXOjL35KWvnhyGmLUNYDtUXVccgT0= Subject key identifier: BE:72:72:C3:A4:E2:42:54:57:E1:A3:4B:60:F6:EE:99:88:A6:F4:20 Certificate issuer: /CN=f29fac19-e536-4e67-a788-6a1d4483389f Certificate serial: 010D0C9F4328584B8BE223B7E5EE94AFF49D6E80 Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 397715 IP address blocks: 64.4.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:23:b7:e5:ee:94:af:f4:9d:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=7a8bd498-aecd-4138-889b-84ea02dffda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:25:ed:5d:84:0a:22:8f:8b:2b:68:ca:06:c4: fa:37:fe:af:02:68:83:d7:f1:ee:74:09:08:c5:31: da:6e:43:5d:13:9e:59:f4:cc:29:40:db:65:7f:c4: 7b:e3:da:d9:1f:03:1e:84:35:df:37:fd:9d:61:ef: 85:df:aa:43:ba:b4:57:a7:59:1b:33:03:b0:50:78: f9:19:40:7c:68:0a:bf:a6:e6:f0:8f:58:67:57:a2: 64:e1:b3:00:1f:8b:46:6b:a2:a2:05:00:bb:6d:3a: c1:60:53:5e:86:c7:11:6e:49:1a:1c:2a:98:c8:13: 84:0d:92:83:f5:8f:77:b2:f8:84:93:54:f0:42:bd: d0:b8:94:c7:d4:a1:9a:63:2b:b9:f9:8d:a9:84:df: 40:31:36:9a:3a:66:c7:27:f1:8b:e1:57:38:e3:53: d7:94:8d:77:18:7e:81:be:66:fe:d2:9a:80:78:1e: a3:fc:68:fa:93:6a:b5:23:7f:32:80:cf:49:03:55: 32:f3:59:b9:94:f5:44:32:54:7d:cc:c2:1d:09:1d: 05:05:2e:48:94:b9:de:02:7c:f6:cd:bf:0c:09:54: 60:81:d0:bc:c0:c6:c5:0d:04:03:23:8c:c9:92:3a: c4:e3:a7:fe:3e:fa:d6:9f:57:0f:5d:f4:95:bf:7f: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:72:C3:A4:E2:42:54:57:E1:A3:4B:60:F6:EE:99:88:A6:F4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl X509v3 Authority Key Identifier: keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer sbgp-ipAddrBlock: critical IPv4: 64.4.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5f:19:e6:f0:e9:37:11:ac:23:f7:de:d3:84:0a:ed:22:2e: 62:96:5d:d5:4e:0e:9f:a0:8b:c8:a8:97:df:b9:77:9e:f2:96: 05:9e:69:91:a4:80:3a:e4:65:bc:93:d6:a2:e0:22:32:1b:b0: b4:ba:33:ba:6c:d0:b4:f3:9e:d3:c9:14:70:0a:d3:be:6b:3b: 98:a6:cc:cc:69:11:24:d1:3c:d7:41:c4:6c:13:0b:54:f6:90: 45:00:b8:a4:86:46:57:71:1a:6c:81:36:de:47:00:d9:6a:17: b4:a6:fa:45:b9:c2:b4:eb:80:be:91:ff:ad:4d:b3:a2:2a:ed: 78:59:77:aa:5d:31:ae:b0:42:8e:dc:b8:08:8b:51:6c:f6:e7: b7:20:c2:36:b2:87:dd:16:bb:a7:22:43:e1:11:e2:ea:7f:e1: 4e:ba:e9:7b:d0:68:a7:d8:b5:fd:f1:b9:00:30:9d:ea:5e:4e: bd:eb:2b:5a:c3:bc:e6:e5:b6:c8:37:9d:4d:1c:b5:85:2b:91: 51:ce:c2:e5:47:0c:fd:f2:43:79:e2:90:d2:39:ad:50:39:ef: 38:c9:57:62:ea:35:24:5f:3c:77:10:86:5f:c9:f8:36:56:41: 95:b4:51:92:ea:b2:7e:fe:6b:78:d3:39:bb:09:85:55:90:92: 30:1b:60:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iO35e6Ur/SdboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI5ZmFjMTktZTUzNi00ZTY3LWE3ODgtNmExZDQ0ODMz ODlmMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk N2E4YmQ0OTgtYWVjZC00MTM4LTg4OWItODRlYTAyZGZmZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyXtXYQKIo+LK2jKBsT6N/6vAmiD1/HudAkI xTHabkNdE55Z9MwpQNtlf8R749rZHwMehDXfN/2dYe+F36pDurRXp1kbMwOwUHj5 GUB8aAq/pubwj1hnV6Jk4bMAH4tGa6KiBQC7bTrBYFNehscRbkkaHCqYyBOEDZKD 9Y93sviEk1TwQr3QuJTH1KGaYyu5+Y2phN9AMTaaOmbHJ/GL4Vc441PXlI13GH6B vmb+0pqAeB6j/Gj6k2q1I38ygM9JA1Uy81m5lPVEMlR9zMIdCR0FBS5IlLneAnz2 zb8MCVRggdC8wMbFDQQDI4zJkjrE46f+PvrWn1cPXfSVv3//SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5ycsOk4kJUV+GjS2D27pmIpvQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlm YWMxOS1lNTM2LTRlNjctYTc4OC02YTFkNDQ4MzM4OWYvNDAwYzA3MzgtNWQ1MS0z ZDkwLWJkODctNzljMDhmZTZlMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI5ZmFjMTktZTUzNi00ZTY3LWE3 ODgtNmExZDQ0ODMzODlmL2YyOWZhYzE5LWU1MzYtNGU2Ny1hNzg4LTZhMWQ0NDgz Mzg5Zi5jcmwwHwYDVR0jBBgwFoAU221Dzj1FGHBxtIOrNbfSZaYc9mswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlmYWMxOS1lNTM2LTRlNjctYTc4OC02YTFk NDQ4MzM4OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQASvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtfGebw6TcRrCP33tOECu0iLmKWXdVODp+gi8iol9+5d57ylgWeaZGk gDrkZbyT1qLgIjIbsLS6M7ps0LTzntPJFHAK075rO5imzMxpESTRPNdBxGwTC1T2 kEUAuKSGRldxGmyBNt5HANlqF7Sm+kW5wrTrgL6R/61Ns6Iq7XhZd6pdMa6wQo7c uAiLUWz257cgwjayh90Wu6ciQ+ER4up/4U666XvQaKfYtf3xuQAwnepeTr3rK1rD vObltsg3nU0ctYUrkVHOwuVHDP3yQ3nikNI5rVA57zjJV2LqNSRfPHcQhl/J+DZW QZW0UZLqsn7+a3jTObsJhVWQkjAbYN4= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:40 2025 by rpki-client