$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa File: 627c057f-f967-3505-9f43-627a8af01c80.roa (raw, json) Hash identifier: CA/0l7lG93S24QRQm/0kMuwFFPBl5dzFqMmJm6aQkOE= Subject key identifier: 84:E7:8D:EF:8E:E4:6C:40:EC:4C:1E:98:29:C7:F9:D1:26:F7:B7:8B Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C91EAD5133F5C946AF580 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 64.112.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:91:ea:d5:13:3f:5c:94:6a:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=03ed7c8c-b5c6-48fa-9231-e4c33d517d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:07:28:05:ae:4a:48:b6:de:28:2a:9d:0d:5d: 4f:0c:cc:cd:06:2b:d7:2c:1c:32:35:71:79:95:3c: 27:47:be:76:fd:d7:e1:26:be:25:0f:b3:51:43:27: 70:5e:62:61:3b:2e:d7:bd:db:38:bf:2b:9c:8a:1c: a0:27:1c:db:4f:07:a3:f1:13:cb:cc:4f:e1:e7:69: 02:6b:66:e8:34:ea:6d:17:9c:46:fb:b4:f3:e5:7e: 25:f2:26:86:fe:9f:e8:02:ce:fd:c6:90:24:cf:7a: 10:6d:af:8a:a2:27:53:5f:d3:65:43:98:34:f1:b4: e6:1d:26:95:77:70:d1:eb:5e:5d:c1:f1:ff:c4:07: f9:00:08:ef:e3:f4:d8:47:0e:f2:af:0e:f5:67:f9: 08:50:a0:9e:ac:7d:4b:1f:c1:fb:f6:57:2a:d5:af: 16:21:64:7e:b6:02:df:92:74:d9:d8:49:60:c2:98: f6:fe:7a:8e:d2:ed:ca:a6:bd:60:9e:bd:67:59:ef: fa:2c:83:92:1b:3c:08:91:b0:f7:2b:52:6b:c2:b4: a0:a3:f9:cc:55:fb:36:01:25:ed:54:04:76:d7:ee: 75:03:31:b4:61:e0:ad:e2:bf:be:e6:a9:f6:9b:c1: be:fa:a1:0a:65:d5:37:b6:1f:9d:39:9b:f1:70:9e: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E7:8D:EF:8E:E4:6C:40:EC:4C:1E:98:29:C7:F9:D1:26:F7:B7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7f:8a:57:97:a4:b4:b3:74:9f:b2:b5:c0:51:5b:83:1b:83: 78:5e:a2:ec:ed:a9:4b:ed:ea:2a:cd:4f:a3:64:71:db:0a:8c: 19:f3:e2:ab:af:0f:78:6e:31:81:31:9e:c7:a1:7e:61:92:17: c0:54:9c:7e:a3:27:09:13:33:da:65:4a:a9:36:f6:a8:47:3e: 7b:9c:79:a7:eb:a4:0f:12:2c:57:a8:f5:c3:59:88:79:f8:89: 1b:e9:4f:0a:07:c2:f9:f2:e9:67:05:52:d3:92:aa:d1:fd:48: d3:23:ed:de:f5:43:63:c0:34:3f:53:fb:a3:98:58:72:ef:5b: 8e:5d:59:dc:7c:ac:c3:f4:0e:33:f3:c6:be:ac:c5:34:33:4d: 75:2f:ab:6d:7c:05:66:8b:2f:6a:78:3d:53:02:68:16:2e:6b: b4:8c:b6:cf:fc:12:35:85:92:0e:fc:b5:f0:b6:14:c3:24:ec: 06:f9:c1:11:54:2b:00:87:8a:c8:70:bc:65:bd:32:51:ba:af: 3f:86:92:4f:4e:10:f0:93:ea:e4:c4:03:b3:2c:4b:3a:37:61: a8:fe:a5:73:ed:bc:a8:57:38:4e:01:d2:ea:9b:ed:43:bd:b7: 7a:cb:f6:86:52:c1:9e:6d:6f:e4:da:12:90:53:bc:76:31:5b: 5d:11:b6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJHq1RM/XJRq9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MDNlZDdjOGMtYjVjNi00OGZhLTkyMzEtZTRjMzNkNTE3ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QcoBa5KSLbeKCqdDV1PDMzNBivXLBwyNXF5 lTwnR752/dfhJr4lD7NRQydwXmJhOy7Xvds4vyucihygJxzbTwej8RPLzE/h52kC a2boNOptF5xG+7Tz5X4l8iaG/p/oAs79xpAkz3oQba+KoidTX9NlQ5g08bTmHSaV d3DR615dwfH/xAf5AAjv4/TYRw7yrw71Z/kIUKCerH1LH8H79lcq1a8WIWR+tgLf knTZ2Elgwpj2/nqO0u3Kpr1gnr1nWe/6LIOSGzwIkbD3K1JrwrSgo/nMVfs2ASXt VAR21+51AzG0YeCt4r++5qn2m8G++qEKZdU3th+dOZvxcJ4aQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITnje+O5GxA7EwemCnH+dEm97eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjI3YzA1N2YtZjk2Ny0z NTA1LTlmNDMtNjI3YThhZjAxYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd/ileXpLSzdJ+ytcBRW4Mbg3heouztqUvt6irNT6NkcdsKjBnz4quv D3huMYExnsehfmGSF8BUnH6jJwkTM9plSqk29qhHPnuceafrpA8SLFeo9cNZiHn4 iRvpTwoHwvny6WcFUtOSqtH9SNMj7d71Q2PAND9T+6OYWHLvW45dWdx8rMP0DjPz xr6sxTQzTXUvq218BWaLL2p4PVMCaBYua7SMts/8EjWFkg78tfC2FMMk7Ab5wRFU KwCHishwvGW9MlG6rz+Gkk9OEPCT6uTEA7MsSzo3Yaj+pXPtvKhXOE4B0uqb7UO9 t3rL9oZSwZ5tb+TaEpBTvHYxW10Rtrc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:08 2025 by rpki-client