$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa File: 4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa (raw, json) Hash identifier: of0aXp3VjhX0IzbN67ZakSMRtz328kWSJJHbsZZRNl8= Subject key identifier: CB:7F:D8:2A:05:9C:F2:44:E9:7D:7D:E0:FE:0C:B3:6C:E8:26:85:0C Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C9510EC16266624EB4800 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 167.94.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:95:10:ec:16:26:66:24:eb:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=d42ba48b-c0c0-40b1-b417-668549003861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:49:04:4f:d6:da:9f:86:a5:95:eb:c0:39: 08:dd:08:2f:f2:16:65:ef:d0:8e:f0:9b:26:51:98: e7:a7:17:05:99:05:12:b5:24:d7:47:d6:18:34:99: 92:1e:aa:d1:d9:7d:6b:15:4d:15:52:02:2e:1a:b6: 62:34:39:b5:20:cd:02:ce:9b:9f:a1:60:cf:eb:8e: 4a:4d:84:4a:b2:39:48:f9:52:80:1b:d2:5e:ca:d9: 49:12:a9:73:39:8e:67:7d:23:f9:af:0e:fc:d2:da: 63:97:ea:d9:35:a7:9c:18:3e:07:d8:8a:cf:0b:a9: 9a:e3:e9:b7:ba:77:fd:4a:10:84:14:3a:b3:e3:40: 0a:fd:51:0a:8a:c5:33:20:ba:a3:cf:0d:e4:a6:ee: 42:7b:e2:73:6e:cd:c4:46:e1:5c:5a:c0:c0:29:3f: 35:57:a9:10:81:1f:04:f5:ab:2f:e2:f2:d8:ed:28: ad:99:18:3c:d6:44:60:8e:17:c8:c5:60:dd:0f:ff: 48:3d:6d:a6:72:d1:33:a9:86:e3:e8:2d:72:7f:e2: 36:54:6d:84:b2:19:5c:c4:0f:dd:4d:84:4d:5c:77: 23:87:93:91:97:40:33:da:02:87:f0:c6:b3:41:b1: 7f:e2:33:e4:60:78:98:83:92:b7:72:3e:78:d6:1d: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7F:D8:2A:05:9C:F2:44:E9:7D:7D:E0:FE:0C:B3:6C:E8:26:85:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:40:a8:95:c7:c2:c4:f3:d6:75:e7:43:79:ca:c1:3c:01:24: aa:ef:d4:cf:cc:02:a8:0c:81:fb:a3:00:a2:0b:74:12:d8:61: 2c:ad:7e:48:3a:12:db:9d:b7:ad:3f:3c:9a:02:24:64:58:51: 35:cc:72:b6:2d:4e:ca:81:3e:b4:76:f1:d6:6d:d1:05:88:b6: 18:3b:41:3b:4f:f7:60:0d:e5:98:1b:93:71:3c:de:06:ea:e7: 39:cf:9d:4a:70:6f:ad:df:22:9f:19:7b:f2:11:a2:2c:0e:98: 7c:0a:d7:be:22:93:4a:87:6f:4d:6c:06:39:c6:65:e4:1c:c4: bc:14:85:b6:9c:60:4b:fe:f9:79:71:69:8f:38:43:5c:4c:d5: d7:53:cf:4b:26:9a:b3:83:b3:77:b5:e9:cb:37:67:0d:7b:fc: f6:3a:98:32:3a:88:af:9f:2e:96:e4:05:6a:2c:1d:af:09:4d: 69:3c:de:b9:1f:f1:50:a5:f3:7f:67:98:c5:d2:c0:25:ee:b9: 79:61:03:9d:e5:8c:78:d2:79:84:07:9f:9b:19:c2:e8:95:a2: 37:a7:93:8f:d7:55:48:b8:ca:2e:5c:65:cd:62:6c:80:e5:7a: 50:b8:c5:bb:81:d5:a8:45:2b:f4:40:fd:38:02:77:a5:64:5b: 82:7c:46:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJUQ7BYmZiTrSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDQyYmE0OGItYzBjMC00MGIxLWI0MTctNjY4NTQ5MDAzODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAtJBE/W2p+GpZXrwDkI3Qgv8hZl79CO8Jsm UZjnpxcFmQUStSTXR9YYNJmSHqrR2X1rFU0VUgIuGrZiNDm1IM0CzpufoWDP645K TYRKsjlI+VKAG9JeytlJEqlzOY5nfSP5rw780tpjl+rZNaecGD4H2IrPC6ma4+m3 unf9ShCEFDqz40AK/VEKisUzILqjzw3kpu5Ce+Jzbs3ERuFcWsDAKT81V6kQgR8E 9asv4vLY7SitmRg81kRgjhfIxWDdD/9IPW2mctEzqYbj6C1yf+I2VG2EshlcxA/d TYRNXHcjh5ORl0Az2gKH8MazQbF/4jPkYHiYg5K3cj541h2oDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt/2CoFnPJE6X194P4Ms2zoJoUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNGNkNGUwZTgtYmFkOS0z NDZkLTk0MTEtMTVjMmYxY2UyNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpAqJXHwsTz1nXnQ3nKwTwBJKrv1M/MAqgMgfujAKILdBLYYSytfkg6 Etudt60/PJoCJGRYUTXMcrYtTsqBPrR28dZt0QWIthg7QTtP92AN5Zgbk3E83gbq 5znPnUpwb63fIp8Ze/IRoiwOmHwK174ik0qHb01sBjnGZeQcxLwUhbacYEv++Xlx aY84Q1xM1ddTz0smmrODs3e16cs3Zw17/PY6mDI6iK+fLpbkBWosHa8JTWk83rkf 8VCl839nmMXSwCXuuXlhA53ljHjSeYQHn5sZwuiVojenk4/XVUi4yi5cZc1ibIDl elC4xbuB1ahFK/RA/TgCd6VkW4J8RkE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:51 2025 by rpki-client