$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa File: 29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa (raw, json) Hash identifier: ICkaXv/uKpQd2QNTTNvN6hFPnux6E/m9kKIKZTs2XjQ= Subject key identifier: 70:23:8E:EB:1A:2F:53:4B:E5:9E:47:07:C7:E4:FD:CA:B5:54:79:14 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C91BB16554674BCFD94C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 64.112.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:91:bb:16:55:46:74:bc:fd:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=710a8ff8-ff2b-4b06-9302-1a1b5892a48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:18:fb:c3:04:1f:1f:eb:4c:a7:1a:df:7e: 6f:85:e7:c0:11:72:68:24:35:1d:73:80:d9:32:74: e2:20:e6:36:17:9c:bd:f2:27:ea:00:ec:ce:05:8a: 58:3c:d0:b0:7b:b5:38:23:c4:d0:9e:cd:c0:22:f5: 9c:ad:2e:66:9a:40:a8:8d:84:e7:e4:93:c2:90:8a: 98:f2:94:38:a3:8c:2d:96:e2:ec:92:6e:c5:1f:5c: 8c:03:ef:3a:6e:8e:cf:2e:60:7c:a0:41:4e:d6:d7: a7:a9:62:27:47:a0:da:e0:0a:b4:bb:15:92:36:32: 22:25:f8:ce:ce:bf:f7:db:80:e7:ac:d6:14:24:7d: 21:ca:13:f4:83:f7:c6:83:ac:9d:b5:68:90:82:02: 1d:55:f7:88:c3:e1:1b:f8:80:3a:7b:63:d0:15:d1: f8:ca:47:66:1e:57:ab:d6:3c:63:46:e7:30:4d:3d: 9a:40:9d:66:22:4e:b9:43:d1:3c:cd:f1:3a:ae:0d: 06:3c:66:84:30:54:02:71:c8:69:c1:ab:76:de:7a: 0c:ec:e2:4e:72:74:f8:1a:89:ba:09:9d:33:03:40: 72:02:05:8b:a7:a0:87:d2:1c:5d:67:e8:bb:56:dd: 9c:7c:1a:ca:05:aa:68:9b:3b:38:d9:ba:f7:c0:67: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:8E:EB:1A:2F:53:4B:E5:9E:47:07:C7:E4:FD:CA:B5:54:79:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:85:f7:be:3f:c6:91:68:5c:17:b9:52:c2:02:7d:f7:fb:3e: 2e:0d:3f:29:6b:dc:17:a5:79:df:d2:4b:0c:0c:18:67:51:69: 8a:82:e9:e8:5d:3c:45:0a:61:30:74:7d:ff:c0:ba:39:48:9b: 94:19:0d:93:8c:85:9a:fc:83:62:d6:b1:2e:31:d8:50:d7:15: ad:5f:2f:3e:2a:30:e6:e6:e7:38:a2:50:7a:35:2e:70:70:a5: a3:50:39:86:af:30:a9:62:95:40:0c:b8:23:7f:a1:c9:75:63: 86:a7:79:ca:f2:bc:f7:f5:f0:7b:3d:68:be:02:38:0b:3a:fc: 28:93:50:f3:70:f2:71:e1:ff:f9:ce:68:fc:c5:77:63:9f:b9: 60:9e:7a:98:92:df:c9:ba:94:32:b6:7a:d1:29:5f:f8:36:5a: 96:a8:eb:7e:e8:ba:26:51:35:d5:c1:78:5e:76:80:1e:a3:04: c4:14:9d:2c:b1:2a:4c:b9:95:c9:67:ef:06:92:13:5d:1e:6b: a0:66:0d:f4:04:10:da:de:93:1c:0e:ba:d8:84:52:d5:1a:9b: 6a:4d:7d:18:52:49:b4:89:54:42:ec:82:8b:6c:39:42:c3:58: 12:ec:e2:34:06:70:dd:e8:ea:4f:99:13:d7:f3:04:a7:31:e2: 9b:40:05:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJG7FlVGdLz9lMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NzEwYThmZjgtZmYyYi00YjA2LTkzMDItMWExYjU4OTJhNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxQY+8MEHx/rTKca335vhefAEXJoJDUdc4DZ MnTiIOY2F5y98ifqAOzOBYpYPNCwe7U4I8TQns3AIvWcrS5mmkCojYTn5JPCkIqY 8pQ4o4wtluLskm7FH1yMA+86bo7PLmB8oEFO1tenqWInR6Da4Aq0uxWSNjIiJfjO zr/324DnrNYUJH0hyhP0g/fGg6ydtWiQggIdVfeIw+Eb+IA6e2PQFdH4ykdmHler 1jxjRucwTT2aQJ1mIk65Q9E8zfE6rg0GPGaEMFQCcchpwat23noM7OJOcnT4Gom6 CZ0zA0ByAgWLp6CH0hxdZ+i7Vt2cfBrKBapomzs42br3wGetvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAjjusaL1NL5Z5HB8fk/cq1VHkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMjlhMTFiMmMtYTI4OC0z ZmMzLWI1ZjItMjQ0NWNkYWFmYmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeF974/xpFoXBe5UsICfff7Pi4NPylr3Beled/SSwwMGGdRaYqC6ehd PEUKYTB0ff/AujlIm5QZDZOMhZr8g2LWsS4x2FDXFa1fLz4qMObm5ziiUHo1LnBw paNQOYavMKlilUAMuCN/ocl1Y4anecryvPf18Hs9aL4COAs6/CiTUPNw8nHh//nO aPzFd2OfuWCeepiS38m6lDK2etEpX/g2Wpao637ouiZRNdXBeF52gB6jBMQUnSyx Kky5lcln7waSE10ea6BmDfQEENrekxwOutiEUtUam2pNfRhSSbSJVELsgotsOULD WBLs4jQGcN3o6k+ZE9fzBKcx4ptABcA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:08 2025 by rpki-client