$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa File: 905a33b2-a747-3537-9cda-de429490b8f0.roa (raw, json) Hash identifier: GWiWtAqPmHSGhA2de8E6tfa4FlkWXdY26YBtAFauWiw= Subject key identifier: CC:4C:DB:E0:B4:6A:43:11:56:64:9A:A1:2C:AE:27:7C:9D:93:5E:50 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C91D49420D61FC98D7F80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 64.112.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:91:d4:94:20:d6:1f:c9:8d:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=c9d2d4fd-561a-4531-8ddc-708a57fbbc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:95:4f:7a:91:84:4a:e0:fd:b5:d0:fd:45: ad:76:80:e5:8a:27:43:9d:d3:ae:21:07:7d:08:f5: 91:3b:21:97:9b:ff:c1:b1:91:db:5a:c7:bf:e1:31: 10:f1:b0:ef:d7:ed:24:1d:ec:c8:29:1a:b5:18:e5: 54:a6:71:d1:e1:03:6b:28:be:8f:6a:d8:65:6c:fd: bb:38:e7:b9:06:8f:94:25:b1:d2:64:a5:c9:ed:b7: 38:3e:92:47:86:c5:44:f2:86:ec:dc:8b:3f:e9:47: e0:c3:a2:8c:b6:65:51:d2:c2:8f:e1:1b:a8:1d:a5: 08:09:95:92:0b:4b:56:3d:16:23:b9:a8:13:5c:50: 26:ab:27:9b:6c:62:99:cd:14:6f:ac:fe:57:cc:53: ad:03:3b:87:4b:20:74:7f:11:c8:1e:79:51:75:a1: 3b:60:c4:2f:f4:45:25:f4:13:0b:e3:60:0e:19:b7: 23:7a:23:c8:be:51:37:b2:3f:78:f2:be:79:ed:94: bb:3d:16:c7:a5:91:87:12:0b:93:1e:81:bb:33:07: 16:a4:78:0a:c0:a3:a1:6e:e1:21:20:66:43:79:43: 9d:93:16:07:05:18:0f:05:4c:3f:7e:a2:d7:fb:42: f2:8d:49:70:9d:bb:53:1b:e6:a5:65:bc:ed:e7:08: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4C:DB:E0:B4:6A:43:11:56:64:9A:A1:2C:AE:27:7C:9D:93:5E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1e:a2:dc:09:16:97:04:e5:93:8f:df:74:11:cf:b6:b5:9c: f7:83:cf:6a:ee:84:4e:ec:0b:b9:75:d0:76:d4:39:92:59:72: 1d:18:18:eb:8c:9d:6c:40:ae:64:7d:4f:86:0f:2c:96:5a:74: ce:b0:0e:76:6e:bb:5b:e6:6c:9f:e1:c9:db:e4:1d:76:fd:0a: a6:3f:73:a0:03:f6:70:df:9d:5e:4e:57:3d:e7:62:63:6a:2d: 98:16:d9:1b:7f:8f:00:88:fb:b4:40:29:2f:9f:24:4b:25:05: 5b:27:eb:0f:00:d3:06:cb:1e:db:14:fd:5e:55:e2:9c:a9:be: 62:de:35:b1:83:23:dc:a6:44:e1:67:f2:b2:68:d2:f6:d3:f8: 4a:7a:7f:0f:9b:56:59:1f:99:01:4d:52:2a:67:63:b9:50:8d: 3d:56:16:fa:4c:fc:a2:45:fb:ba:85:8a:ea:bc:25:0b:04:e6: 6a:c4:e4:0f:97:3b:f3:02:15:9e:2a:98:ad:c5:9d:f4:42:2f: 24:49:4f:e5:f9:61:1a:08:55:64:33:81:aa:d2:29:00:c7:bd: 62:85:c2:c8:ef:15:1e:7e:d2:80:9b:44:cd:5a:d6:b4:3f:24: 42:21:e5:91:42:dd:61:1d:07:17:90:e6:19:34:3a:2b:d7:97: 2c:21:b3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJHUlCDWH8mNf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YzlkMmQ0ZmQtNTYxYS00NTMxLThkZGMtNzA4YTU3ZmJiYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9OVT3qRhErg/bXQ/UWtdoDliidDndOuIQd9 CPWROyGXm//BsZHbWse/4TEQ8bDv1+0kHezIKRq1GOVUpnHR4QNrKL6PathlbP27 OOe5Bo+UJbHSZKXJ7bc4PpJHhsVE8obs3Is/6Ufgw6KMtmVR0sKP4RuoHaUICZWS C0tWPRYjuagTXFAmqyebbGKZzRRvrP5XzFOtAzuHSyB0fxHIHnlRdaE7YMQv9EUl 9BML42AOGbcjeiPIvlE3sj948r557ZS7PRbHpZGHEguTHoG7MwcWpHgKwKOhbuEh IGZDeUOdkxYHBRgPBUw/fqLX+0LyjUlwnbtTG+alZbzt5wiPrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxM2+C0akMRVmSaoSyuJ3ydk15QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOTA1YTMzYjItYTc0Ny0z NTM3LTljZGEtZGU0Mjk0OTBiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQeotwJFpcE5ZOP33QRz7a1nPeDz2ruhE7sC7l10HbUOZJZch0YGOuM nWxArmR9T4YPLJZadM6wDnZuu1vmbJ/hydvkHXb9CqY/c6AD9nDfnV5OVz3nYmNq LZgW2Rt/jwCI+7RAKS+fJEslBVsn6w8A0wbLHtsU/V5V4pypvmLeNbGDI9ymROFn 8rJo0vbT+Ep6fw+bVlkfmQFNUipnY7lQjT1WFvpM/KJF+7qFiuq8JQsE5mrE5A+X O/MCFZ4qmK3FnfRCLyRJT+X5YRoIVWQzgarSKQDHvWKFwsjvFR5+0oCbRM1a1rQ/ JEIh5ZFC3WEdBxeQ5hk0OivXlywhs/A= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:59 2025 by rpki-client