$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/443083bb-d1ac-34aa-a362-31620d03aa9c.roa File: 443083bb-d1ac-34aa-a362-31620d03aa9c.roa (raw, json) Hash identifier: xgO88CznnryiclFbYP9HFDa9ytSP3m9cSjtp2woG/4M= Subject key identifier: E4:BD:1C:62:DD:41:1D:DB:DF:6F:55:DD:7F:79:9E:C9:B2:20:61:F4 Certificate issuer: /CN=6172d736-c698-4515-a8d5-e8f599b88b89 Certificate serial: 010D0C9F4328584BB2F82F4016A7FD055C4A2B50 Authority key identifier: 3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/443083bb-d1ac-34aa-a362-31620d03aa9c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 64.65.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:2f:40:16:a7:fd:05:5c:4a:2b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6172d736-c698-4515-a8d5-e8f599b88b89 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3dcafb16-8231-49ae-be94-a94d53fbace8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:cb:bf:4c:7a:21:bb:59:60:b0:0f:d0:1c: 18:26:3b:35:9e:da:9a:95:d4:d1:f6:db:e9:8e:81: 4a:1e:5c:a3:c5:cd:4e:3d:61:3a:32:cc:98:8f:91: 21:30:e8:54:c8:ba:4e:92:df:82:f5:e5:b8:5c:d3: 5e:d1:f4:c3:6c:f3:c8:a1:7f:5f:00:36:4c:e8:ce: 48:5f:2e:b4:7f:1e:c0:d5:01:05:72:c4:7c:15:2d: fc:76:59:8a:c6:68:9d:01:7c:ed:12:a2:9e:7c:f8: 81:0b:18:c5:ce:f0:f1:88:fe:44:d0:7e:3e:49:0f: 1e:57:a0:fa:68:85:c0:35:50:c1:53:69:50:54:21: 4a:cf:f7:0a:be:45:9a:00:54:78:f8:0d:f3:52:9c: 2d:a4:b5:ce:89:88:03:d7:4e:d6:f4:c1:57:0e:cf: ea:21:ca:6b:7a:8c:12:90:46:a2:52:39:0d:78:51: dc:b8:cb:b6:1f:4b:84:47:73:80:c6:7e:9e:f2:d9: e1:49:bc:20:27:65:73:f3:84:98:34:ef:9b:11:40: 83:75:d0:9d:b5:ad:ba:8a:24:1d:23:09:da:cc:79: d4:d7:3e:5a:4e:06:a7:2b:ad:8d:96:56:27:22:71: 83:51:c2:ce:64:13:1a:c0:84:41:45:a9:22:ae:01: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BD:1C:62:DD:41:1D:DB:DF:6F:55:DD:7F:79:9E:C9:B2:20:61:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/443083bb-d1ac-34aa-a362-31620d03aa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl X509v3 Authority Key Identifier: keyid:3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer sbgp-ipAddrBlock: critical IPv4: 64.65.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a0:73:76:74:fb:c9:1d:60:1b:66:e7:bd:d5:e7:28:2a:7d: 65:f2:e1:f1:2f:47:77:61:b9:ec:34:45:f6:5f:e0:8a:40:71: 30:67:33:bf:96:02:72:6f:dc:aa:a9:b8:f6:a0:a4:4f:eb:56: 99:3f:51:18:dc:ca:f3:65:e7:12:8d:54:99:07:71:bd:fa:1a: de:34:5f:4e:43:7a:75:3a:15:88:78:51:36:93:27:c9:c5:c6: 04:37:69:c3:e6:04:a2:e0:3a:a6:33:51:f7:87:17:0f:85:1c: aa:7b:7f:ea:fa:9c:8d:c0:bf:62:6f:b7:f8:14:29:ca:9c:f9: 5c:8f:41:5a:ed:8f:0f:c8:7f:51:a4:83:58:cf:eb:76:b6:e3: 7f:5e:25:36:d8:83:f0:36:38:c0:cb:9b:9a:34:99:22:09:99: d7:3c:80:8b:ae:60:85:d8:4a:bb:82:67:03:d1:e9:d6:1b:40: a5:5c:32:f6:51:99:02:42:f3:fd:37:b2:e4:1e:a4:5d:19:bc: 78:2e:0d:38:be:9c:cd:5b:b0:87:e1:09:9c:9c:8c:a5:4c:cd: e3:c5:da:95:d1:37:9d:70:70:14:7e:43:fe:6c:1b:a5:65:57: 7c:ab:57:da:8c:ac:3e:e3:69:68:a2:bb:49:88:6d:1b:10:4a: b3:99:84:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C9AFqf9BVxKK1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE3MmQ3MzYtYzY5OC00NTE1LWE4ZDUtZThmNTk5Yjg4 Yjg5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2RjYWZiMTYtODIzMS00OWFlLWJlOTQtYTk0ZDUzZmJhY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrTLv0x6IbtZYLAP0BwYJjs1ntqaldTR9tvp joFKHlyjxc1OPWE6MsyYj5EhMOhUyLpOkt+C9eW4XNNe0fTDbPPIoX9fADZM6M5I Xy60fx7A1QEFcsR8FS38dlmKxmidAXztEqKefPiBCxjFzvDxiP5E0H4+SQ8eV6D6 aIXANVDBU2lQVCFKz/cKvkWaAFR4+A3zUpwtpLXOiYgD107W9MFXDs/qIcpreowS kEaiUjkNeFHcuMu2H0uER3OAxn6e8tnhSbwgJ2Vz84SYNO+bEUCDddCdta26iiQd IwnazHnU1z5aTganK62NllYnInGDUcLOZBMawIRBRakirgHQ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOS9HGLdQR3b329V3X95nsmyIGH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MTcy ZDczNi1jNjk4LTQ1MTUtYThkNS1lOGY1OTliODhiODkvNDQzMDgzYmItZDFhYy0z NGFhLWEzNjItMzE2MjBkMDNhYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjE3MmQ3MzYtYzY5OC00NTE1LWE4 ZDUtZThmNTk5Yjg4Yjg5LzYxNzJkNzM2LWM2OTgtNDUxNS1hOGQ1LWU4ZjU5OWI4 OGI4OS5jcmwwHwYDVR0jBBgwFoAUPDhGyhlVkbOYX3BUrptLlX98WUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MTcyZDczNi1jNjk4LTQ1MTUtYThkNS1lOGY1 OTliODhiODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqgc3Z0+8kdYBtm573V5ygqfWXy4fEvR3dhuew0RfZf4IpAcTBnM7+W AnJv3KqpuPagpE/rVpk/URjcyvNl5xKNVJkHcb36Gt40X05DenU6FYh4UTaTJ8nF xgQ3acPmBKLgOqYzUfeHFw+FHKp7f+r6nI3Av2Jvt/gUKcqc+VyPQVrtjw/If1Gk g1jP63a2439eJTbYg/A2OMDLm5o0mSIJmdc8gIuuYIXYSruCZwPR6dYbQKVcMvZR mQJC8/03suQepF0ZvHguDTi+nM1bsIfhCZycjKVMzePF2pXRN51wcBR+Q/5sG6Vl V3yrV9qMrD7jaWiiu0mIbRsQSrOZhJE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:52 2025 by rpki-client