$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa File: 284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa (raw, json) Hash identifier: hNBjiXaAU5MmpWAc54d5hMcTRRkurBVv4zcpTHOejaM= Subject key identifier: 46:7D:95:54:8F:59:2E:AC:69:BB:3D:D8:CC:3A:74:A3:27:19:63:5C Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584B3556F040DFFD12080B763F80 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 397976 IP address blocks: 195.85.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f0:40:df:fd:12:08:0b:76:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=e024c085-890f-445b-af07-10bb1d9f939c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:99:69:90:9f:64:78:ad:7b:54:42:85:29: 59:a9:ad:b4:09:00:2b:78:43:45:02:85:c0:a6:0a: 1a:23:82:3d:78:e5:d5:af:d1:92:8e:a3:f3:4b:d7: d8:23:75:b5:50:10:a1:25:cf:bb:eb:c5:56:b6:84: 7d:3f:85:a4:cb:a0:f0:d4:40:1d:8f:31:1b:09:c6: 24:0f:ca:88:0f:c6:69:81:d8:29:0d:80:d8:eb:39: f9:e6:99:6e:a9:19:34:04:e5:d8:20:b8:cd:15:6d: bf:ab:0f:49:e8:5f:e1:59:db:8f:07:b5:03:e8:c8: f7:77:1e:97:4e:e3:99:11:f1:e3:bd:e7:96:5d:6f: a4:bf:9e:01:a0:93:73:10:5b:de:8b:5f:82:4c:cf: f7:27:62:2d:b7:23:4f:aa:07:66:f8:37:0f:50:9b: 3d:52:65:10:42:49:22:b9:e8:b3:46:51:88:fc:5b: 1b:9d:a0:d8:e4:cd:70:c4:73:79:47:f2:ce:54:5b: ad:ba:63:78:d3:ea:7a:90:a4:1f:82:e9:79:99:16: 26:ee:fa:22:22:17:01:b6:71:29:98:5e:5c:3f:25: 84:f9:26:12:dd:c3:f7:d3:b7:df:b0:44:a7:64:81: 32:c1:a2:d9:11:66:2e:1a:88:9f:ea:79:60:1f:8e: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7D:95:54:8F:59:2E:AC:69:BB:3D:D8:CC:3A:74:A3:27:19:63:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 195.85.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0e:26:c4:56:ce:62:c3:41:f4:bf:39:5b:d5:8f:8d:69:0a: 87:17:91:7b:6b:02:82:a6:de:1c:91:e3:82:c5:08:8b:58:ef: ed:a3:d7:d3:c9:2c:32:14:54:49:e9:e2:5d:23:57:a4:1c:dc: 7a:39:49:1f:6e:dc:5c:4f:37:cf:70:8b:22:3e:f6:77:cb:bd: 25:2e:36:98:b8:55:b5:a9:15:f2:95:da:11:40:d8:15:c3:1a: 09:8a:9a:a0:96:7d:79:37:ff:31:50:57:db:28:3f:f9:d4:98: ec:41:23:e3:17:df:e9:ab:fb:1e:ba:11:bb:d7:b2:46:41:16: ca:da:4f:a2:fe:a2:c2:b7:26:9a:0e:df:c8:f0:a1:67:fe:51: 56:cf:5f:79:e8:2d:65:1a:5a:ab:6c:cb:69:3f:2d:93:a5:2f: 84:23:59:1f:e0:35:55:a5:e9:f5:3f:95:1a:85:b9:d8:50:e5: 50:c2:59:cc:3d:15:b4:b1:1f:88:56:a4:e6:58:19:d6:07:b3: 59:b4:9d:ac:e9:cc:cc:4a:f9:01:9e:c3:35:64:47:d5:ac:a6: 0a:52:f7:47:35:1d:7c:be:94:29:7d:7b:4a:91:2f:3c:30:41: bd:da:6a:27:0c:3a:0b:20:b9:94:0d:77:61:a5:84:ce:fd:97: 5a:37:d9:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvBA3/0SCAt2P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTAyNGMwODUtODkwZi00NDViLWFmMDctMTBiYjFkOWY5MzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaeZaZCfZHite1RChSlZqa20CQAreENFAoXA pgoaI4I9eOXVr9GSjqPzS9fYI3W1UBChJc+768VWtoR9P4Wky6Dw1EAdjzEbCcYk D8qID8ZpgdgpDYDY6zn55pluqRk0BOXYILjNFW2/qw9J6F/hWduPB7UD6Mj3dx6X TuOZEfHjveeWXW+kv54BoJNzEFvei1+CTM/3J2IttyNPqgdm+DcPUJs9UmUQQkki ueizRlGI/FsbnaDY5M1wxHN5R/LOVFutumN40+p6kKQfgul5mRYm7voiIhcBtnEp mF5cPyWE+SYS3cP307ffsESnZIEywaLZEWYuGoif6nlgH45n4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZ9lVSPWS6sabs92Mw6dKMnGWNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvMjg0MzkxYmEtYWUzMS0z ZGM0LWE1OTgtNWVjYzZhYjRjMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMOJsRWzmLDQfS/OVvVj41pCocXkXtrAoKm3hyR44LFCItY7+2j19PJ LDIUVEnp4l0jV6Qc3Ho5SR9u3FxPN89wiyI+9nfLvSUuNpi4VbWpFfKV2hFA2BXD GgmKmqCWfXk3/zFQV9soP/nUmOxBI+MX3+mr+x66EbvXskZBFsraT6L+osK3JpoO 38jwoWf+UVbPX3noLWUaWqtsy2k/LZOlL4QjWR/gNVWl6fU/lRqFudhQ5VDCWcw9 FbSxH4hWpOZYGdYHs1m0nazpzMxK+QGewzVkR9WspgpS90c1HXy+lCl9e0qRLzww Qb3aaicMOgsguZQNd2GlhM79l1o32eU= -----END CERTIFICATE-----Generated at Tue Oct 21 09:44:00 2025 by rpki-client