$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa File: 36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa (raw, json) Hash identifier: dbjhDsdRZGvx+ClnjifEuWMRYsqOJBGxeaSlLx3lIFc= Subject key identifier: A2:93:B6:B1:33:D5:F6:77:E4:C1:96:CB:27:E0:96:07:B1:DC:DA:AD Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B8EACF1D618A8745A415891C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16696 IP address blocks: 64.255.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f1:d6:18:a8:74:5a:41:58:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=77e50293-864e-452e-8f71-defb1ec92b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:ad:fe:2d:a0:29:a8:72:76:13:30:76:af: ec:ae:28:f1:fd:48:92:6b:18:56:ad:84:81:9d:08: 0b:38:64:4a:8b:a3:0e:ea:c5:92:ce:55:25:13:de: 8f:b8:be:b2:0c:f2:c4:82:71:5d:a2:8d:cf:aa:22: 86:29:ae:3b:2a:76:0d:fd:32:80:d8:e9:52:de:dc: ed:16:b0:66:96:97:71:50:61:be:aa:2c:b3:b8:8d: e2:49:2a:da:fb:ab:8e:c0:a3:7a:86:2a:60:c7:21: cc:d7:f1:07:a9:5a:50:ef:1e:73:89:45:2f:f9:2a: f9:1f:a1:55:4d:20:18:a5:86:00:03:6b:e9:91:e3: 71:57:9b:f8:74:da:63:d0:86:bb:33:e6:05:29:fd: e8:c1:8c:02:f4:ed:73:f8:d0:ac:eb:59:67:55:c3: 19:08:92:91:bb:e0:19:1b:e8:19:7a:48:d6:55:17: 25:69:ee:6f:14:25:3b:aa:a1:82:55:13:16:6a:6d: ae:32:74:4f:41:a3:10:29:b6:fe:ea:fd:fa:f0:86: ff:57:79:20:5b:d7:a6:7f:b9:4f:d8:31:0d:b2:7c: 81:2c:2f:45:a0:a1:34:ab:79:86:e1:91:dc:64:68: 38:eb:e9:ab:f0:94:b9:69:97:9f:5a:6f:a7:64:18: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:93:B6:B1:33:D5:F6:77:E4:C1:96:CB:27:E0:96:07:B1:DC:DA:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 64.255.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7a:32:70:18:ba:06:08:01:d2:57:85:12:ad:3b:95:09:d6: 6b:9d:84:59:47:77:de:67:0f:5b:a7:48:c7:d5:70:3e:67:36: 51:d3:f9:1e:5e:d4:8b:79:61:e3:82:f1:36:92:f1:e2:d4:17: 1a:4e:87:1f:dd:40:d9:ea:93:f0:b4:dd:6a:4e:0e:e3:3f:2d: 85:49:f8:3f:e9:d7:bb:9e:ac:64:68:55:36:72:66:e8:84:01: 61:cc:c6:1a:06:26:8f:47:2d:ca:84:42:06:ed:28:a1:aa:84: 7d:d0:09:ca:87:44:3b:8d:d8:95:47:9b:c2:bc:a7:b6:f6:55: a3:67:98:f0:43:a6:d5:e3:e0:50:6c:79:a0:0e:09:72:79:51: f5:5f:55:53:fa:86:ad:51:a5:f9:98:43:80:d3:76:7c:c0:65: d7:86:08:e8:c4:06:10:4d:5c:45:6c:14:8e:bb:7f:3a:11:37: 26:44:92:14:23:37:b6:50:b7:f9:41:2c:63:40:14:16:cb:45: 39:d8:16:3d:5a:25:97:66:67:88:19:98:42:67:d6:fa:aa:3c: 2c:90:0b:da:6a:65:68:b9:86:5a:8b:b4:d6:f7:1f:6f:5a:e4: 1c:84:16:4d:c0:dd:ea:f5:9d:82:4f:37:53:b7:4b:0b:d4:ac: 40:64:0d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPHWGKh0WkFYkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NzdlNTAyOTMtODY0ZS00NTJlLThmNzEtZGVmYjFlYzkyYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xGt/i2gKahydhMwdq/srijx/UiSaxhWrYSB nQgLOGRKi6MO6sWSzlUlE96PuL6yDPLEgnFdoo3PqiKGKa47KnYN/TKA2OlS3tzt FrBmlpdxUGG+qiyzuI3iSSra+6uOwKN6hipgxyHM1/EHqVpQ7x5ziUUv+Sr5H6FV TSAYpYYAA2vpkeNxV5v4dNpj0Ia7M+YFKf3owYwC9O1z+NCs61lnVcMZCJKRu+AZ G+gZekjWVRclae5vFCU7qqGCVRMWam2uMnRPQaMQKbb+6v368Ib/V3kgW9emf7lP 2DENsnyBLC9FoKE0q3mG4ZHcZGg46+mr8JS5aZefWm+nZBjfdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKTtrEz1fZ35MGWyyfglgex3NqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMzZiZGI2NTktYjAzMi0z YWI0LWE0NWMtNjQyZThkNGRlMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP/nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx6MnAYugYIAdJXhRKtO5UJ1mudhFlHd95nD1unSMfVcD5nNlHT+R5e 1It5YeOC8TaS8eLUFxpOhx/dQNnqk/C03WpODuM/LYVJ+D/p17uerGRoVTZyZuiE AWHMxhoGJo9HLcqEQgbtKKGqhH3QCcqHRDuN2JVHm8K8p7b2VaNnmPBDptXj4FBs eaAOCXJ5UfVfVVP6hq1RpfmYQ4DTdnzAZdeGCOjEBhBNXEVsFI67fzoRNyZEkhQj N7ZQt/lBLGNAFBbLRTnYFj1aJZdmZ4gZmEJn1vqqPCyQC9pqZWi5hlqLtNb3H29a 5ByEFk3A3er1nYJPN1O3SwvUrEBkDWY= -----END CERTIFICATE-----Generated at Wed Oct 22 05:10:08 2025 by rpki-client