$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa File: e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa (raw, json) Hash identifier: Obzf+79LmM1qvGI3o8SqItOEwpDGPQgoEiAPUg3UPBM= Subject key identifier: 8B:77:88:47:DA:AE:2A:8B:FE:65:F2:9F:8C:BB:38:DC:25:C7:C1:72 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B679752BC21150BB849A28B82 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 36492 IP address blocks: 64.9.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:52:bc:21:15:0b:b8:49:a2:8b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9b4eacb1-405b-4ffd-b784-97341b137824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:95:f9:20:59:24:da:bd:8c:46:98:92:d2: c9:3a:32:c3:6f:9c:78:b1:06:c5:fe:7c:41:c1:86: 0f:f1:0f:90:0d:c6:be:db:55:7f:ea:fa:52:d2:1b: 43:2d:e5:29:1f:e5:8f:5f:81:58:c4:8e:f1:48:39: ea:3a:70:0f:bb:c0:8e:dc:62:c6:85:cb:46:d9:13: 17:c2:1e:b2:ed:d6:60:ba:a9:b4:66:2c:48:18:f3: bf:e0:d0:ff:3a:93:41:06:db:77:bf:f2:d7:30:23: 52:5a:3d:e1:af:49:30:c5:7d:9e:6c:22:a7:91:32: 2e:2c:3e:34:2f:29:d0:e1:ab:e8:22:50:b3:4d:3c: 5e:8d:80:4b:38:c7:92:2a:23:44:6e:dc:ae:ad:ee: 27:a6:a8:b7:47:86:b8:d7:62:07:83:72:39:ec:50: e5:8f:ef:79:61:7f:ca:f8:d3:42:67:45:e5:65:9f: 4a:84:90:08:7a:bf:76:1b:9d:4d:0f:5a:c0:df:e7: 87:9b:5e:80:5e:89:7c:d5:b9:52:e0:6f:f6:d7:0b: 93:ce:59:a3:fe:96:ee:55:61:4d:b6:d5:6f:0f:08: 89:e4:e5:b9:c0:b1:fb:c3:c5:d0:f4:1b:bd:82:e2: 73:6c:e1:38:9e:57:d9:a6:6c:ef:18:0e:72:8d:8a: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:77:88:47:DA:AE:2A:8B:FE:65:F2:9F:8C:BB:38:DC:25:C7:C1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e4b47c7a-2e3b-3a16-9518-8a59f1f121d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d8:0f:2f:26:a9:88:20:dc:ce:8b:72:95:86:13:76:ea:b0: 78:b5:5b:19:db:a6:f4:ae:42:85:52:14:c5:0a:3f:7b:4d:ca: de:ab:d1:19:65:25:6e:9f:94:6d:dd:89:46:54:f6:13:44:3b: 09:46:6c:c3:1f:3e:8e:f8:6e:e8:19:23:ea:3d:39:76:30:05: e0:26:fd:c3:ee:fd:3f:78:98:d1:6b:7d:07:bf:cf:4e:46:28: 60:3e:18:b7:ed:cb:db:dc:2b:25:70:b9:20:4f:52:cf:65:e6: bd:19:f3:cd:75:b3:4e:2a:ab:e1:5c:b2:5f:a5:4f:68:93:ab: 9f:bb:26:87:04:56:b5:09:62:f2:e0:53:3a:0a:cb:ea:bf:08: 24:94:c0:44:00:50:f5:0f:f8:d9:dc:d6:71:6a:ab:ed:c0:cf: aa:9b:e2:a1:9c:7a:d7:b4:5d:d2:8e:ed:0b:e4:49:9e:86:15: 2f:42:f6:12:67:d6:6d:54:c3:2b:ac:e0:ab:46:a3:4b:b8:a7: 34:e9:2d:90:81:aa:aa:4f:a6:9d:11:ad:52:b1:f9:87:c8:c5: 3f:0a:3f:72:8b:2c:b4:4b:14:48:5f:4a:8a:c2:90:da:24:b7: e9:f8:1f:b2:40:23:9d:61:e3:0f:a7:32:86:cd:fd:d9:f5:8b: 32:4c:0e:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1K8IRULuEmii4IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWI0ZWFjYjEtNDA1Yi00ZmZkLWI3ODQtOTczNDFiMTM3ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtyV+SBZJNq9jEaYktLJOjLDb5x4sQbF/nxB wYYP8Q+QDca+21V/6vpS0htDLeUpH+WPX4FYxI7xSDnqOnAPu8CO3GLGhctG2RMX wh6y7dZguqm0ZixIGPO/4ND/OpNBBtt3v/LXMCNSWj3hr0kwxX2ebCKnkTIuLD40 LynQ4avoIlCzTTxejYBLOMeSKiNEbtyure4npqi3R4a412IHg3I57FDlj+95YX/K +NNCZ0XlZZ9KhJAIer92G51ND1rA3+eHm16AXol81blS4G/21wuTzlmj/pbuVWFN ttVvDwiJ5OW5wLH7w8XQ9Bu9guJzbOE4nlfZpmzvGA5yjYpbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt3iEfariqL/mXyn4y7ONwlx8FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZTRiNDdjN2EtMmUzYi0z YTE2LTk1MTgtOGE1OWYxZjEyMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXYDy8mqYgg3M6LcpWGE3bqsHi1WxnbpvSuQoVSFMUKP3tNyt6r0Rll JW6flG3diUZU9hNEOwlGbMMfPo74bugZI+o9OXYwBeAm/cPu/T94mNFrfQe/z05G KGA+GLfty9vcKyVwuSBPUs9l5r0Z8811s04qq+Fcsl+lT2iTq5+7JocEVrUJYvLg UzoKy+q/CCSUwEQAUPUP+Nnc1nFqq+3Az6qb4qGcete0XdKO7QvkSZ6GFS9C9hJn 1m1Uwyus4KtGo0u4pzTpLZCBqqpPpp0RrVKx+YfIxT8KP3KLLLRLFEhfSorCkNok t+n4H7JAI51h4w+nMobN/dn1izJMDvI= -----END CERTIFICATE-----Generated at Tue Oct 21 11:33:49 2025 by rpki-client