$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa File: 96ff3873-db62-363d-9266-eb3debfc44a5.roa (raw, json) Hash identifier: 51IVlmxT/axb3XtacCNCBF3ed2wCF3WfbXn/bzh8A6g= Subject key identifier: AD:B7:04:BE:1C:A4:1B:02:46:AD:A7:F2:0B:3B:0F:40:38:22:93:A5 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C93F78F0E124A47C1A340 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 64.112.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:93:f7:8f:0e:12:4a:47:c1:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=ac6e719d-f427-45f0-86c6-26bcb4cc1827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:f6:14:1e:e6:8b:47:b5:84:e0:d4:50:23: 25:93:8e:93:48:06:99:ea:cc:88:1f:3a:70:51:98: 47:8e:6b:51:66:8c:29:df:87:46:40:9b:55:00:19: bf:7a:32:e7:48:cf:58:e7:15:ea:7e:ee:9a:a8:d2: fe:9d:93:48:ac:94:07:00:02:82:d5:57:1e:66:ce: b1:23:99:3e:d2:37:e6:7a:2e:80:11:cf:71:21:f9: 0f:fc:e6:a2:ec:08:b0:f6:25:f3:dc:01:c7:88:b3: e4:6c:d8:e1:bc:52:de:d4:58:74:4f:1e:ed:37:a7: 0b:69:10:69:94:a0:b9:c6:35:d0:80:33:f6:b7:e1: 0e:cf:f6:e9:3a:c4:7e:2c:0b:3a:d3:1d:b7:6c:21: 72:e2:12:b8:5c:bd:1e:d8:22:38:0e:9f:14:e7:a1: b8:a1:b7:7b:24:d0:41:3b:52:78:3e:ec:b6:7e:f8: 47:93:87:dc:dc:03:38:36:e3:d8:0f:fd:5e:9f:56: e1:66:e7:90:1b:b1:08:c5:c8:48:14:98:30:3f:dd: 35:ea:36:4f:73:e1:d3:f6:51:34:72:cf:e4:10:37: da:e4:60:02:0b:79:a4:ff:e9:fc:1f:ad:e0:01:ac: ca:52:81:4f:cb:98:94:53:ce:19:16:9e:fa:76:e9: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:04:BE:1C:A4:1B:02:46:AD:A7:F2:0B:3B:0F:40:38:22:93:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d0:df:37:f9:1d:33:b2:f3:2b:99:f9:7e:c2:0c:f7:18:c3: 68:76:75:79:ea:ae:c8:bc:7b:0f:b1:f1:d4:e7:8d:46:a8:b7: 19:49:2e:81:0c:89:52:4f:6b:ea:f8:ec:6c:14:99:2d:be:3b: bd:0c:2a:8a:25:93:48:18:52:46:ac:59:20:9b:fe:ea:7b:e4: 30:a1:99:89:7e:21:5d:8c:ee:43:a4:38:8e:1e:fa:86:0f:89: 85:0e:4d:78:fc:8a:09:53:a2:95:9f:a0:04:56:f0:e1:bf:88: 6b:64:cb:60:d7:81:a0:cf:9f:0f:f8:12:b2:70:77:a5:15:5b: 37:c7:58:ba:a8:ef:d7:74:8b:32:71:4b:e1:d7:70:a8:e1:a6: 5b:51:ef:89:01:df:3d:99:34:38:da:d8:87:ee:e5:f2:74:42: 02:25:5a:51:9c:ad:1f:81:04:b7:38:00:01:b5:87:e9:39:b3: ac:f8:56:1e:5f:79:4e:1e:77:35:72:04:18:df:47:fa:77:73: db:1e:ac:b7:af:2f:b2:90:b0:6e:d6:fc:2d:2e:9a:66:9f:18: 31:d2:eb:0e:90:d9:12:1e:11:40:f5:ca:14:c3:79:0a:54:ef: f9:bc:d9:1b:e0:85:2c:3c:c2:bc:d6:a4:80:df:5f:37:8b:8d: 9b:a6:3f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJP3jw4SSkfBo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YWM2ZTcxOWQtZjQyNy00NWYwLTg2YzYtMjZiY2I0Y2MxODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzP2FB7mi0e1hODUUCMlk46TSAaZ6syIHzpw UZhHjmtRZowp34dGQJtVABm/ejLnSM9Y5xXqfu6aqNL+nZNIrJQHAAKC1VceZs6x I5k+0jfmei6AEc9xIfkP/Oai7Aiw9iXz3AHHiLPkbNjhvFLe1Fh0Tx7tN6cLaRBp lKC5xjXQgDP2t+EOz/bpOsR+LAs60x23bCFy4hK4XL0e2CI4Dp8U56G4obd7JNBB O1J4Puy2fvhHk4fc3AM4NuPYD/1en1bhZueQG7EIxchIFJgwP9016jZPc+HT9lE0 cs/kEDfa5GACC3mk/+n8H63gAazKUoFPy5iUU84ZFp76dulRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK23BL4cpBsCRq2n8gs7D0A4IpOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOTZmZjM4NzMtZGI2Mi0z NjNkLTkyNjYtZWIzZGViZmM0NGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTQ3zf5HTOy8yuZ+X7CDPcYw2h2dXnqrsi8ew+x8dTnjUaotxlJLoEM iVJPa+r47GwUmS2+O70MKoolk0gYUkasWSCb/up75DChmYl+IV2M7kOkOI4e+oYP iYUOTXj8iglTopWfoARW8OG/iGtky2DXgaDPnw/4ErJwd6UVWzfHWLqo79d0izJx S+HXcKjhpltR74kB3z2ZNDja2Ifu5fJ0QgIlWlGcrR+BBLc4AAG1h+k5s6z4Vh5f eU4edzVyBBjfR/p3c9serLevL7KQsG7W/C0ummafGDHS6w6Q2RIeEUD1yhTDeQpU 7/m82RvghSw8wrzWpIDfXzeLjZumPxA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:04 2025 by rpki-client