$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa File: cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa (raw, json) Hash identifier: 71BmUE0mvBbF+eUP0T2t++LeeXz0h/je5sHFgKy9+LU= Subject key identifier: 98:83:97:6A:41:2A:F8:85:89:EF:B8:37:4B:35:DC:6E:3A:F9:C7:C1 Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Certificate serial: 010D0C9F4328584B2CF6E4A2C2E17208E841E600 Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 64.95.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e4:a2:c2:e1:72:08:e8:41:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=98b6e62e-f7fc-4429-bfac-9b502facaa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:43:2b:6e:5a:17:38:7d:41:f6:ed:c1:86: 7d:d7:8d:0a:03:99:41:44:b5:40:84:23:e6:cc:f0: 51:1c:38:67:ec:ce:b5:dd:61:f3:56:e0:3f:22:b0: 54:ba:20:1a:79:ee:62:7f:aa:68:9b:4c:3c:71:00: 82:4d:c1:fc:5b:18:79:e9:63:ed:ee:9e:be:32:8b: ac:86:44:9e:bf:da:80:a4:aa:cf:76:75:f6:e8:a9: 39:25:63:3d:5a:a2:60:fd:1e:2e:39:56:a9:df:90: 0d:f0:16:db:2f:97:34:d8:99:a6:67:a4:85:fe:82: 87:44:88:9a:63:40:bb:bb:38:ef:32:e8:5d:bb:23: 04:ce:f9:ac:3a:a7:c5:ba:80:fe:1e:ab:d3:ce:a8: 4b:21:c8:83:18:c6:ed:17:dd:c9:b3:a1:75:f6:b0: 1f:11:12:d7:97:90:74:cc:7d:27:bc:e7:8c:30:af: cd:8e:9f:8f:b0:94:16:69:43:5e:1a:77:49:f7:0a: a4:a9:4a:fb:c3:ec:ab:7d:8a:09:5b:20:b4:99:d9: 21:9e:5d:1d:d7:89:92:71:e8:07:3b:6f:a7:2f:f0: d1:29:fc:90:8b:1d:77:a5:0f:5b:74:47:17:54:18: d4:26:bd:79:3f:34:68:c9:01:07:a9:45:82:82:df: b4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:83:97:6A:41:2A:F8:85:89:EF:B8:37:4B:35:DC:6E:3A:F9:C7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl X509v3 Authority Key Identifier: keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer sbgp-ipAddrBlock: critical IPv4: 64.95.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0b:57:50:9f:72:10:80:6a:c1:30:95:df:1a:e0:03:87:fc: 3b:ce:9f:47:a6:1b:ae:89:9c:d3:27:21:5d:f0:1d:fa:82:e0: c5:a6:c9:8d:c6:b5:26:11:a0:50:43:9f:b3:7b:1b:af:6b:ff: ac:f4:b0:c5:1e:2b:01:fe:81:a9:de:77:66:a3:98:da:db:6a: b2:c9:29:8a:fc:b1:71:df:5e:41:3f:2d:a1:b2:6e:96:47:e1: d9:37:b1:bd:a2:76:02:d2:3d:53:b5:c1:98:83:a5:4c:bf:b8: 5a:2d:d4:5a:e9:6a:c2:cd:8b:ba:6c:9a:a8:95:10:ee:3d:e1: 25:a9:de:e1:85:bb:74:ce:5f:cb:59:4e:e9:d8:f0:c7:3f:6e: 80:73:17:2d:4f:7c:04:bf:cd:04:e7:f0:16:0c:98:cb:4e:4a: 2e:88:b6:ed:ad:48:b9:2f:a3:16:8f:3b:4a:06:f0:8e:14:7b: 3c:e7:94:da:c0:af:55:f2:83:9e:77:cb:97:cd:c3:6d:a0:fe: 1c:9d:0e:34:1a:18:f0:e3:34:93:4a:1a:28:6f:2f:15:7b:c6: d6:93:ba:9e:d3:00:7d:ca:42:42:29:7c:03:a2:6c:3b:31:23: 63:42:ca:71:e7:eb:eb:db:28:a7:0e:76:d9:81:3b:2e:56:48: f3:5e:1e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uSiwuFyCOhB5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk OTFkMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OThiNmU2MmUtZjdmYy00NDI5LWJmYWMtOWI1MDJmYWNhYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyNDK25aFzh9QfbtwYZ9140KA5lBRLVAhCPm zPBRHDhn7M613WHzVuA/IrBUuiAaee5if6pom0w8cQCCTcH8Wxh56WPt7p6+Mous hkSev9qApKrPdnX26Kk5JWM9WqJg/R4uOVap35AN8BbbL5c02JmmZ6SF/oKHRIia Y0C7uzjvMuhduyMEzvmsOqfFuoD+HqvTzqhLIciDGMbtF93Js6F19rAfERLXl5B0 zH0nvOeMMK/Njp+PsJQWaUNeGndJ9wqkqUr7w+yrfYoJWyC0mdkhnl0d14mScegH O2+nL/DRKfyQix13pQ9bdEcXVBjUJr15PzRoyQEHqUWCgt+0pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiDl2pBKviFie+4N0s13G46+cfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvY2JhODg0YTMtOWU2Mi0z ZjNiLTkxYzctNDhjM2E5YTVkMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm NWI3MWQ5MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABILV1CfchCAasEwld8a4AOH/DvOn0emG66JnNMnIV3wHfqC4MWmyY3G tSYRoFBDn7N7G69r/6z0sMUeKwH+ganed2ajmNrbarLJKYr8sXHfXkE/LaGybpZH 4dk3sb2idgLSPVO1wZiDpUy/uFot1FrpasLNi7psmqiVEO494SWp3uGFu3TOX8tZ TunY8Mc/boBzFy1PfAS/zQTn8BYMmMtOSi6Itu2tSLkvoxaPO0oG8I4UezznlNrA r1Xyg553y5fNw22g/hydDjQaGPDjNJNKGihvLxV7xtaTup7TAH3KQkIpfAOibDsx I2NCynHn6+vbKKcOdtmBOy5WSPNeHj8= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:40 2025 by rpki-client