$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa File: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (raw, json) Hash identifier: W2llI/Nl5euPVmQRVQZ2ESqwO7EpsNcOJ3Lam3WhX0I= Subject key identifier: 4C:A5:79:5C:17:D5:D1:5C:A9:26:02:D4:30:DA:75:84:47:9E:D3:7F Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584BA39D081177691A8833EF8B80 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:08:11:77:69:1a:88:33:ef:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=995bfad8-69fd-48e0-86c9-61589fa1cf27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:77:83:b1:38:1d:94:b7:c3:43:8b:e0:a5: 0d:58:d7:42:e7:d8:06:52:c1:91:93:a2:b2:b6:11: d7:74:71:2b:55:be:0c:67:7d:ba:ab:ab:ac:bd:fe: 09:49:b7:6d:9e:4e:7e:5b:a5:58:05:05:e1:9b:58: 82:3d:e9:fa:ba:cc:4a:c5:c1:91:92:28:3a:d5:ab: 1e:2f:1f:92:68:bc:27:e6:81:6b:f6:c8:1f:30:8c: c1:93:cf:6b:a0:9d:49:d0:c8:2e:fa:e2:23:c8:be: b8:95:ec:81:d0:82:b1:06:51:3d:95:22:41:b1:fe: 5e:01:f3:67:06:22:a3:46:c1:88:b0:51:8e:3a:85: 29:d7:75:ac:0d:0f:56:6f:a5:4f:0c:03:04:33:ba: 2e:74:df:b1:8a:de:70:90:69:7d:99:19:57:b7:a3: e0:d6:8d:55:76:be:dd:04:52:9a:65:ed:03:bb:5b: 9d:38:17:bf:82:bc:49:22:d2:36:10:be:54:5c:3a: 51:55:ee:33:de:08:58:e4:ff:26:17:5a:e6:4d:72: 25:d1:6b:fb:6b:93:e3:66:24:89:58:bb:56:3a:02: 42:fc:cf:64:46:e5:e9:22:15:ef:5b:01:61:01:87: 6d:e8:9d:8c:39:2b:76:35:8d:4b:07:fc:bb:0a:f3: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A5:79:5C:17:D5:D1:5C:A9:26:02:D4:30:DA:75:84:47:9E:D3:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:33:60:32:6a:a0:f9:7c:7a:10:ef:1f:ed:48:d5:dd:ca:1e: a8:d3:24:e4:24:aa:58:fc:c2:36:4a:a5:3f:3d:7a:1c:8e:48: 6b:86:05:d6:f5:5c:19:8c:ff:0a:8d:80:bf:1f:0f:76:04:9a: 9a:4d:f2:27:ab:57:63:ef:38:a4:e4:56:40:59:76:85:db:0e: ac:6b:c3:f0:89:3f:e9:66:eb:9c:b3:1a:16:fe:09:6a:ad:c6: af:69:51:01:66:2c:f2:80:c0:d4:51:2d:f5:08:4b:15:43:e2: 67:c9:1f:c1:51:7e:0f:90:10:0b:6c:7b:e1:f4:b0:ce:c2:a4: f3:de:2b:3b:d5:65:13:60:4e:89:f6:2b:e8:7a:34:13:38:49: 8f:64:f0:e8:97:1d:c1:35:31:d6:b3:cf:d3:8c:5b:f1:7b:7b: 3c:f9:1e:74:19:85:35:a1:a6:78:77:46:0d:cd:19:b3:83:e6: 5f:74:b7:a2:9a:bc:50:75:4c:58:d4:fc:40:2d:24:ff:a1:51: 17:78:a3:ea:5a:01:14:e6:a5:97:9c:e3:f6:ce:31:9e:82:ed: 2f:bf:72:23:f3:13:49:e1:92:9d:36:28:55:eb:1f:7a:6f:8f: 0c:aa:24:6e:30:10:e5:24:a5:96:a2:79:42:8f:c8:15:5e:97: 68:0c:4b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQgRd2kaiDPvi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTk1YmZhZDgtNjlmZC00OGUwLTg2YzktNjE1ODlmYTFjZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kd3g7E4HZS3w0OL4KUNWNdC59gGUsGRk6Ky thHXdHErVb4MZ326q6usvf4JSbdtnk5+W6VYBQXhm1iCPen6usxKxcGRkig61ase Lx+SaLwn5oFr9sgfMIzBk89roJ1J0Mgu+uIjyL64leyB0IKxBlE9lSJBsf5eAfNn BiKjRsGIsFGOOoUp13WsDQ9Wb6VPDAMEM7oudN+xit5wkGl9mRlXt6Pg1o1Vdr7d BFKaZe0Du1udOBe/grxJItI2EL5UXDpRVe4z3ghY5P8mF1rmTXIl0Wv7a5PjZiSJ WLtWOgJC/M9kRuXpIhXvWwFhAYdt6J2MOSt2NY1LB/y7CvMKUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyleVwX1dFcqSYC1DDadYRHntN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvOTczYTk2YTItMDE2Mi0z NWU3LTkwZGItZjQ4ODJmZGRmOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEozYDJqoPl8ehDvH+1I1d3KHqjTJOQkqlj8wjZKpT89ehyOSGuGBdb1 XBmM/wqNgL8fD3YEmppN8ierV2PvOKTkVkBZdoXbDqxrw/CJP+lm65yzGhb+CWqt xq9pUQFmLPKAwNRRLfUISxVD4mfJH8FRfg+QEAtse+H0sM7CpPPeKzvVZRNgTon2 K+h6NBM4SY9k8OiXHcE1Mdazz9OMW/F7ezz5HnQZhTWhpnh3Rg3NGbOD5l90t6Ka vFB1TFjU/EAtJP+hURd4o+paARTmpZec4/bOMZ6C7S+/ciPzE0nhkp02KFXrH3pv jwyqJG4wEOUkpZaieUKPyBVel2gMS2o= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:57 2025 by rpki-client