$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa File: 36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa (raw, json) Hash identifier: gHPwNOkJgOze+ncuTvs+PNttx6gKybOnVg+2f0/gay8= Subject key identifier: DF:6A:4B:37:E7:CA:48:73:68:C3:CC:C9:52:8C:FE:0A:13:6B:67:E5 Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F4328584B970CEA643B8BCF99E5511300 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 21734 IP address blocks: 64.95.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ea:64:3b:8b:cf:99:e5:51:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ac6a5bd2-10f1-42a3-a851-221c70812ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:4e:60:dc:f3:52:e2:0f:04:1f:06:13:d9: 49:86:2c:23:7a:ee:30:38:cd:74:bb:8a:07:9c:b8: 32:ae:ba:12:a9:11:4d:b1:1c:70:f5:b0:43:50:90: 00:0a:41:08:00:03:68:c4:8d:82:1d:32:45:c8:75: 72:0c:c9:4a:8b:7e:31:74:0e:6d:23:e0:74:7a:66: c3:c9:64:c3:cd:3c:eb:e7:cd:93:fe:af:5d:db:73: 9f:41:79:c2:09:ae:c7:d3:83:16:13:8c:49:05:02: 32:2f:ba:d4:10:bd:70:56:2a:22:06:e1:87:83:a6: 1c:41:da:5e:d7:a2:e9:4d:c1:2f:51:90:8e:d1:8d: 91:ea:ee:89:8d:65:d1:d1:1f:9c:3a:69:16:e4:38: da:dc:38:52:6b:53:45:67:a3:d0:2a:89:ec:57:c9: e5:de:0d:41:3d:f8:f6:00:00:f8:97:45:e7:55:88: be:f6:93:32:69:2d:bd:f0:83:6e:d0:60:44:e4:c8: 52:c1:0d:b2:a7:d7:ca:6e:8c:27:78:6e:16:e4:5e: 81:b8:35:40:e9:42:12:37:80:b8:d7:33:30:3e:7a: ec:47:48:0b:cd:e1:34:fa:d0:10:6a:2b:d5:57:bf: d4:81:a3:79:8b:9f:c6:ea:b4:1c:9e:4a:86:27:19: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:4B:37:E7:CA:48:73:68:C3:CC:C9:52:8C:FE:0A:13:6B:67:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv4: 64.95.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:46:19:15:63:12:d6:37:91:4f:b8:fd:05:fd:d2:de:61:c2: bb:37:ed:29:46:2f:33:93:cd:da:d0:95:4b:5c:c9:2f:6c:e4: 44:c3:0e:09:7d:85:07:8b:35:6a:f9:e9:00:a6:e6:56:45:32: db:3a:e5:c3:72:cd:0f:af:9a:7a:3a:4a:bf:6e:f0:56:8f:e4: 0e:b0:59:4e:ab:12:d2:c0:96:62:4c:62:99:69:e0:a4:b5:f8: d3:6f:fc:4d:5f:6f:bb:89:36:d4:ec:e1:80:b1:e8:c8:28:24: 2c:3d:a4:df:51:32:ae:c0:db:7d:98:e8:8b:e8:5e:49:9f:cf: af:e2:06:39:52:8b:bd:fa:db:cd:a3:41:c0:7c:7d:8c:bb:80: bc:96:ca:6b:28:10:d9:a9:51:7b:04:19:e6:61:69:8d:7f:3e: b2:cb:8e:f4:ad:8e:66:dc:84:b3:2f:cf:69:c3:ef:28:77:b0: 65:74:01:77:34:15:89:78:7c:ad:24:af:3c:14:da:93:c5:c3: 9c:94:8b:a7:52:5d:84:99:31:51:d7:63:2d:92:d0:32:a1:56: a1:2c:20:82:b9:63:fa:0f:c9:5a:a8:a4:bc:a3:0c:c2:15:f5: 58:15:a7:1c:3c:32:e3:3d:c7:f8:80:6d:6f:75:5c:97:31:9a: f1:ac:4f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOpkO4vPmeVREwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YWM2YTViZDItMTBmMS00MmEzLWE4NTEtMjIxYzcwODEyZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFZOYNzzUuIPBB8GE9lJhiwjeu4wOM10u4oH nLgyrroSqRFNsRxw9bBDUJAACkEIAANoxI2CHTJFyHVyDMlKi34xdA5tI+B0embD yWTDzTzr582T/q9d23OfQXnCCa7H04MWE4xJBQIyL7rUEL1wVioiBuGHg6YcQdpe 16LpTcEvUZCO0Y2R6u6JjWXR0R+cOmkW5Dja3DhSa1NFZ6PQKonsV8nl3g1BPfj2 AAD4l0XnVYi+9pMyaS298INu0GBE5MhSwQ2yp9fKbowneG4W5F6BuDVA6UISN4C4 1zMwPnrsR0gLzeE0+tAQaivVV7/UgaN5i5/G6rQcnkqGJxl96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9qSzfnykhzaMPMyVKM/goTa2flMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvMzZlMmQ4NjItYjY5YS0z ODBlLTliY2YtNWZlYjg4YjJlM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhGGRVjEtY3kU+4/QX90t5hwrs37SlGLzOTzdrQlUtcyS9s5ETDDgl9 hQeLNWr56QCm5lZFMts65cNyzQ+vmno6Sr9u8FaP5A6wWU6rEtLAlmJMYplp4KS1 +NNv/E1fb7uJNtTs4YCx6MgoJCw9pN9RMq7A232Y6IvoXkmfz6/iBjlSi736282j QcB8fYy7gLyWymsoENmpUXsEGeZhaY1/PrLLjvStjmbchLMvz2nD7yh3sGV0AXc0 FYl4fK0krzwU2pPFw5yUi6dSXYSZMVHXYy2S0DKhVqEsIIK5Y/oPyVqopLyjDMIV 9VgVpxw8MuM9x/iAbW91XJcxmvGsTzw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:43:26 2025 by rpki-client