$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa File: 905a33b2-a747-3537-9cda-de429490b8f0.roa (raw, json) Hash identifier: mVHY+Ci+cInSaT9MnpuIHIxPp14PsUP+Etz0SrKI7CI= Subject key identifier: DA:02:9B:8B:8D:D3:D5:7A:7B:56:8C:3A:BD:D1:A4:2A:D5:5C:6A:EA Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F49774B679B6CBD257C9A1A80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 931 IP address blocks: 64.112.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:4b:67:9b:6c:bd:25:7c:9a:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d78edd8-35fa-4ea5-b66c-8e50066c1e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:72:f0:6a:0a:97:f8:ad:1c:8f:e8:cf:02: 64:7b:50:35:58:e6:13:e5:52:7e:52:11:69:e0:f1: 35:ed:d1:5b:8d:37:67:07:dd:0f:59:99:d2:e3:14: c7:b0:6b:a7:58:b7:da:1a:a2:9b:2a:9f:fc:60:a0: de:71:11:43:b7:c8:9c:e2:d8:20:89:41:9d:bf:69: 72:1b:db:d9:28:c6:74:d7:86:04:58:30:c3:c0:6f: 2e:df:d9:3e:41:a5:18:e3:f7:a2:12:f8:32:10:13: 62:b7:0b:61:2b:5b:fe:27:08:63:b9:4a:f5:07:e9: 9d:d5:f1:23:8a:06:1e:30:01:bf:ef:1c:fc:cd:d2: d7:eb:8c:51:53:ac:00:df:16:39:94:73:0c:c1:a9: 26:1a:d9:e0:7d:d3:e8:db:b9:51:91:4e:a8:3c:ff: f0:e1:6b:e2:ff:e6:28:0e:34:1c:61:f5:ff:11:08: 67:42:a3:68:28:7c:50:37:64:ea:5a:af:48:cc:39: d8:0d:ed:f2:06:e0:e9:de:a7:fb:8a:b4:88:fa:c2: 78:d4:58:10:60:b0:07:ab:9c:93:65:4a:47:2e:68: cb:2b:52:f9:f1:52:93:cc:c4:ec:fe:3b:ce:13:54: 58:22:66:e2:ef:da:4f:07:1c:32:cf:fa:aa:dc:4a: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:9B:8B:8D:D3:D5:7A:7B:56:8C:3A:BD:D1:A4:2A:D5:5C:6A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4e:cb:49:9a:2d:dd:56:dc:f9:10:0c:f4:11:04:6b:53:7f: 6d:53:7e:11:75:84:4a:be:bb:b2:da:ae:56:53:28:d8:d2:3c: bb:16:05:15:29:60:b3:6a:3c:e5:5d:89:ea:17:7e:0c:e2:dd: 89:9a:89:e7:b1:ea:dd:02:11:56:a3:fd:86:09:0d:82:6a:48: 7a:23:4c:f5:4a:75:e9:ac:df:75:a8:7c:cf:c4:be:d0:c3:93: 14:cd:9e:a6:b2:01:26:c9:b5:66:17:bd:28:50:bf:3a:1c:98: b0:4f:ff:c0:64:29:4b:9d:b0:6d:8c:86:d4:7a:f4:64:ca:f7: 0c:8c:89:be:46:9b:60:db:93:34:95:20:af:cd:0f:8c:46:5b: 64:6f:7a:4a:25:4d:05:01:04:98:dd:2e:f2:d3:a2:14:5a:56: e8:77:e1:54:4d:76:30:b7:f7:7c:98:c6:8f:02:2e:a2:d3:c4: 7d:f6:c2:bc:78:43:d6:62:43:70:1b:9c:93:3e:ef:a2:f1:2f: 0c:08:a2:49:60:a8:62:96:58:ca:59:d5:ca:4c:0b:dc:ec:17: 4e:f2:80:dd:e8:8e:4e:6d:53:bc:7d:fd:3c:72:d0:11:8d:32: 93:8a:b1:86:84:25:ad:27:d6:0b:75:66:cd:f1:c9:50:f9:dd: 93:ad:7b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0tnm2y9JXyaGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Q3OGVkZDgtMzVmYS00ZWE1LWI2NmMtOGU1MDA2NmMxZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AFy8GoKl/itHI/ozwJke1A1WOYT5VJ+UhFp 4PE17dFbjTdnB90PWZnS4xTHsGunWLfaGqKbKp/8YKDecRFDt8ic4tggiUGdv2ly G9vZKMZ014YEWDDDwG8u39k+QaUY4/eiEvgyEBNitwthK1v+JwhjuUr1B+md1fEj igYeMAG/7xz8zdLX64xRU6wA3xY5lHMMwakmGtngfdPo27lRkU6oPP/w4Wvi/+Yo DjQcYfX/EQhnQqNoKHxQN2TqWq9IzDnYDe3yBuDp3qf7irSI+sJ41FgQYLAHq5yT ZUpHLmjLK1L58VKTzMTs/jvOE1RYImbi79pPBxwyz/qq3EonMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoCm4uN09V6e1aMOr3RpCrVXGrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOTA1YTMzYjItYTc0Ny0z NTM3LTljZGEtZGU0Mjk0OTBiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlOy0maLd1W3PkQDPQRBGtTf21TfhF1hEq+u7LarlZTKNjSPLsWBRUp YLNqPOVdieoXfgzi3Ymaieex6t0CEVaj/YYJDYJqSHojTPVKdems33WofM/EvtDD kxTNnqayASbJtWYXvShQvzocmLBP/8BkKUudsG2MhtR69GTK9wyMib5Gm2DbkzSV IK/ND4xGW2RvekolTQUBBJjdLvLTohRaVuh34VRNdjC393yYxo8CLqLTxH32wrx4 Q9ZiQ3AbnJM+76LxLwwIoklgqGKWWMpZ1cpMC9zsF07ygN3ojk5tU7x9/Txy0BGN MpOKsYaEJa0n1gt1Zs3xyVD53ZOte5A= -----END CERTIFICATE-----Generated at Sun Sep 27 06:26:42 2026 by rpki-client