$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa File: bd1174b0-373e-323a-98b4-6e3acea78c49.roa (raw, json) Hash identifier: xy4E4cMXQ/bI+8woClerORsq7KKpz5cgYE84qJRVCPs= Subject key identifier: 2D:1E:E8:0D:C6:DA:C2:B3:06:21:29:60:F2:CA:D0:DD:A0:A5:A0:86 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B8EACF1C54E171010E23A4A00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16696 IP address blocks: 64.255.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f1:c5:4e:17:10:10:e2:3a:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=045607b6-1058-414e-bee4-78522ccd2278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4a:05:e2:ca:49:f9:f2:bd:b0:ff:bf:9a:75: 37:44:53:1d:26:ef:7c:17:79:9f:a7:a4:f6:ab:32: ca:ab:07:5d:7b:9a:40:8a:c6:2b:9b:c8:83:02:29: 5e:b7:2a:f1:9e:af:4b:eb:86:3b:63:aa:2a:ff:3c: 2c:48:2b:2a:c1:c9:a8:28:ac:15:0d:43:57:92:b1: 06:64:19:41:44:dc:7a:d1:79:0f:2a:30:82:18:30: e0:9f:0b:c3:7d:d8:db:ae:c0:ca:d6:f0:3d:55:fe: f1:bb:3f:f9:8d:92:34:e7:47:e3:e3:a7:c5:75:36: a1:e7:3b:1a:59:99:ac:44:d4:cb:56:20:6d:5b:73: 69:6e:c3:92:63:c8:00:52:0b:51:70:f5:7f:6b:14: 6b:90:57:24:91:88:ff:17:85:22:bf:b2:82:19:04: cb:00:c0:d6:73:f2:35:c9:78:29:61:a0:04:53:23: 33:45:74:2a:6d:f3:53:2a:84:b9:e0:e9:3d:28:40: f7:06:c1:de:15:8e:35:bf:09:25:cc:2c:35:bc:73: 93:75:1b:bd:43:33:b8:16:c3:b7:cd:d7:5a:cc:e6: b3:19:91:86:fd:1e:72:2d:67:78:c1:a8:63:f8:aa: 1b:b5:c2:80:33:63:2a:91:ac:8d:85:7c:98:04:19: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1E:E8:0D:C6:DA:C2:B3:06:21:29:60:F2:CA:D0:DD:A0:A5:A0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 64.255.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4c:77:6e:df:29:24:4a:4e:9d:5d:9c:da:71:97:b5:6f:ba: 76:e6:14:a2:6d:45:51:68:b3:58:9b:9a:4f:b7:a5:05:37:8e: 6e:e4:59:9d:19:3c:e0:d8:e0:47:0d:4a:d5:3e:35:50:c5:39: 30:26:28:cb:fd:77:81:ba:e4:ec:38:99:23:5e:ab:be:5f:b3: fb:5c:24:03:8f:4c:d1:ec:22:6b:a6:2c:13:d4:29:03:a8:ed: 7b:14:42:c8:06:d5:57:10:54:a3:27:80:2e:44:21:dd:5a:08: 26:cd:9c:19:55:10:1a:ae:cb:3f:15:48:dd:59:56:24:74:19: 3a:93:9e:67:90:85:78:bc:f4:d8:f9:b1:97:4a:19:28:df:84: 58:01:15:1f:48:7c:8f:da:a3:b6:fb:04:c1:47:34:6e:ec:8a: 52:fd:da:8f:12:1a:f8:7a:6e:b1:37:cf:46:ee:3e:bd:8e:47: dc:bd:b0:51:b2:d8:d0:b0:55:5f:3b:b9:7e:1e:7b:f3:6d:45: 88:f3:dd:ff:88:9c:be:a2:b6:09:af:8d:3a:94:b6:e2:d7:0d: 82:64:d7:31:ae:63:be:c5:a3:af:4a:21:6d:7f:ee:ac:94:18: ab:d7:9a:6a:ad:5e:26:99:ba:47:bb:36:03:35:c4:33:40:a5: e8:b4:47:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPHFThcQEOI6SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDQ1NjA3YjYtMTA1OC00MTRlLWJlZTQtNzg1MjJjY2QyMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EoF4spJ+fK9sP+/mnU3RFMdJu98F3mfp6T2 qzLKqwdde5pAisYrm8iDAiletyrxnq9L64Y7Y6oq/zwsSCsqwcmoKKwVDUNXkrEG ZBlBRNx60XkPKjCCGDDgnwvDfdjbrsDK1vA9Vf7xuz/5jZI050fj46fFdTah5zsa WZmsRNTLViBtW3NpbsOSY8gAUgtRcPV/axRrkFckkYj/F4Uiv7KCGQTLAMDWc/I1 yXgpYaAEUyMzRXQqbfNTKoS54Ok9KED3BsHeFY41vwklzCw1vHOTdRu9QzO4FsO3 zddazOazGZGG/R5yLWd4wahj+KobtcKAM2MqkayNhXyYBBkNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0e6A3G2sKzBiEpYPLK0N2gpaCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmQxMTc0YjAtMzczZS0z MjNhLTk4YjQtNmUzYWNlYTc4YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBMd27fKSRKTp1dnNpxl7VvunbmFKJtRVFos1ibmk+3pQU3jm7kWZ0Z PODY4EcNStU+NVDFOTAmKMv9d4G65Ow4mSNeq75fs/tcJAOPTNHsImumLBPUKQOo 7XsUQsgG1VcQVKMngC5EId1aCCbNnBlVEBquyz8VSN1ZViR0GTqTnmeQhXi89Nj5 sZdKGSjfhFgBFR9IfI/ao7b7BMFHNG7silL92o8SGvh6brE3z0buPr2OR9y9sFGy 2NCwVV87uX4ee/NtRYjz3f+InL6itgmvjTqUtuLXDYJk1zGuY77Fo69KIW1/7qyU GKvXmmqtXiaZuke7NgM1xDNApei0R14= -----END CERTIFICATE-----Generated at Wed Oct 22 05:00:48 2025 by rpki-client