$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa File: b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa (raw, json) Hash identifier: ZUUTEofM0xnzUsZ1p0jrYheQPcyaaneRL0TaU3AyfuM= Subject key identifier: C2:2D:8B:8F:D3:50:47:3E:5B:FB:98:B6:D8:0A:41:7C:21:10:FA:6A Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B6797849D5879A4125DC0E1C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 36492 IP address blocks: 64.9.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:84:9d:58:79:a4:12:5d:c0:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=df51f55a-e2cd-45cf-a2da-809c18eb3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:86:30:8f:77:1b:d1:47:66:36:c2:88:98: f8:f9:21:04:7d:ca:50:5c:84:b8:69:82:f7:bd:dd: d2:af:86:9c:80:0c:17:3e:92:d3:df:72:b7:79:71: 38:b2:c6:fb:e9:23:fc:a0:6d:8f:6d:6e:74:17:f7: 9f:e7:7a:3b:d1:6c:a5:13:e8:05:2c:51:94:38:62: ec:9d:29:df:e6:33:40:5a:d9:94:47:cf:d8:41:f9: b6:2f:d3:fd:e3:c2:df:84:78:d4:64:0c:bd:f8:7e: c6:96:4d:b1:6e:75:ae:dc:f8:8c:ce:43:48:30:09: f6:aa:b5:79:b5:ea:11:5f:fe:30:f0:b0:0e:7b:67: 93:33:66:6b:87:7e:3d:56:92:6f:10:98:e8:d0:6f: 3a:12:d4:7d:66:b5:fb:8f:ef:34:9a:d0:5c:d1:04: 8f:dd:54:67:93:0a:36:01:62:fc:62:bd:57:d6:07: eb:1a:46:bc:61:b8:ff:d4:25:9d:0b:9e:7a:d8:02: 87:fd:f0:85:a9:c2:ea:54:4d:c4:b3:99:f6:53:8f: 18:e7:15:72:be:eb:db:e0:e0:5d:72:5f:49:2c:89: 88:88:9d:97:84:d2:35:b1:7c:d2:08:96:4f:74:7b: da:dd:cb:92:56:a5:67:c8:3d:6c:bf:26:56:cc:d3: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2D:8B:8F:D3:50:47:3E:5B:FB:98:B6:D8:0A:41:7C:21:10:FA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b0cf7e12-01ce-3a39-b0d6-6e612d28cad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:60:bc:fe:6b:e2:f0:07:fd:8e:c7:6c:76:e6:c1:f2:f1:d5: 71:aa:80:6d:e0:27:a1:15:8a:df:7e:ce:7e:75:87:70:ee:62: 5d:08:51:7a:e7:ed:c2:01:bc:a9:b6:43:75:c0:09:f4:25:6d: c7:b9:95:3a:1c:a0:43:97:8f:b8:c3:32:07:a0:83:33:a9:5d: 7a:b3:04:41:b5:86:fa:a8:f7:b5:67:5f:f8:aa:d6:68:96:9b: 49:e7:14:1d:d4:c1:a8:51:b6:1c:10:21:90:7f:aa:ed:13:14: ec:bf:f3:a1:9a:b3:be:8e:8d:88:b4:a1:d1:ca:2f:d1:8f:cd: 6d:52:83:47:09:cc:3c:d9:7a:90:23:c0:57:6d:30:4f:7c:13: ff:99:80:84:03:61:50:5b:ee:c7:68:3c:4d:fb:53:b6:cb:ab: 70:32:13:f4:38:d9:e7:27:70:5d:f1:ef:04:fc:7e:3b:e3:b7: 94:7c:c8:3c:3e:51:87:f5:6a:eb:84:55:42:07:cc:64:9f:11: db:23:99:21:86:10:ba:85:2c:f4:40:79:74:04:8a:15:5b:3f: 65:9e:ff:81:01:9d:0f:c7:bf:39:57:d9:ce:e5:b8:f7:9d:20: fd:f8:f2:cb:1d:8a:72:9e:43:5a:81:fe:9b:2e:af:06:5a:38: 88:65:3e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4SdWHmkEl3A4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGY1MWY1NWEtZTJjZC00NWNmLWEyZGEtODA5YzE4ZWIzNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY+GMI93G9FHZjbCiJj4+SEEfcpQXIS4aYL3 vd3Sr4acgAwXPpLT33K3eXE4ssb76SP8oG2PbW50F/ef53o70WylE+gFLFGUOGLs nSnf5jNAWtmUR8/YQfm2L9P948LfhHjUZAy9+H7Glk2xbnWu3PiMzkNIMAn2qrV5 teoRX/4w8LAOe2eTM2Zrh349VpJvEJjo0G86EtR9ZrX7j+80mtBc0QSP3VRnkwo2 AWL8Yr1X1gfrGka8Ybj/1CWdC5562AKH/fCFqcLqVE3Es5n2U48Y5xVyvuvb4OBd cl9JLImIiJ2XhNI1sXzSCJZPdHva3cuSVqVnyD1svyZWzNMvpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIti4/TUEc+W/uYttgKQXwhEPpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjBjZjdlMTItMDFjZS0z YTM5LWIwZDYtNmU2MTJkMjhjYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlgvP5r4vAH/Y7HbHbmwfLx1XGqgG3gJ6EVit9+zn51h3DuYl0IUXrn 7cIBvKm2Q3XACfQlbce5lTocoEOXj7jDMgeggzOpXXqzBEG1hvqo97VnX/iq1miW m0nnFB3UwahRthwQIZB/qu0TFOy/86Gas76OjYi0odHKL9GPzW1Sg0cJzDzZepAj wFdtME98E/+ZgIQDYVBb7sdoPE37U7bLq3AyE/Q42ecncF3x7wT8fjvjt5R8yDw+ UYf1auuEVUIHzGSfEdsjmSGGELqFLPRAeXQEihVbP2We/4EBnQ/HvzlX2c7luPed IP348ssdinKeQ1qB/psurwZaOIhlPnA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:20 2025 by rpki-client