$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa File: 91115247-b441-3259-a41f-3fbc5e5d5de0.roa (raw, json) Hash identifier: IFEuxHTl5QwWe1hW2fzrbGPRh5tLgRMgpbSM6sQlu2E= Subject key identifier: 75:4E:49:7B:FF:2F:25:FE:36:BB:BC:39:54:13:BC:84:88:B7:62:4B Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BA39D045A0CDA2955ADD70340 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 209 IP address blocks: 64.192.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:04:5a:0c:da:29:55:ad:d7:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0d3bc75d-655c-46f8-aa2d-7b0c31cf1cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:66:a0:20:ac:46:b4:e0:15:b0:07:dd:fd: 79:8f:73:6f:60:cc:e7:dc:c7:7d:03:0f:10:10:7b: 37:09:d3:a7:cc:1f:af:91:80:cc:c0:73:b1:18:bb: 11:70:78:22:5b:8c:05:76:3a:bb:aa:69:c6:e9:7e: e1:37:4b:04:a5:f4:29:a1:8a:30:d0:56:62:84:e6: e0:dc:bc:ca:c7:62:82:3c:9a:eb:b8:cd:08:d5:bd: 6c:f0:2f:b5:32:b0:d6:39:80:e0:3b:e5:5d:eb:b7: 7f:85:fb:4a:fb:35:da:cb:2d:c7:20:6c:b3:2f:01: 2f:9b:8b:8b:ed:8f:bd:94:b8:60:6f:59:1a:c4:67: 8c:4c:ee:11:6e:d5:e3:6d:b1:9e:2d:ba:66:2d:67: de:ce:66:2b:c1:59:4e:31:92:e5:a5:48:14:e8:74: 1a:31:af:a3:08:7a:fd:9b:10:39:fd:3f:99:fe:39: 73:bc:8d:c4:52:85:f3:ac:cb:5b:b6:a0:ce:9c:6b: d4:97:9a:a1:be:60:6c:c8:4f:e9:5d:e2:8a:6e:20: 9b:50:ae:c1:63:07:db:c8:2b:21:88:12:a4:33:c3: e1:09:c4:c4:7a:4b:56:67:c2:00:e0:38:31:50:ed: 9f:08:79:44:a7:77:f0:e9:88:56:9a:cf:c5:a9:40: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4E:49:7B:FF:2F:25:FE:36:BB:BC:39:54:13:BC:84:88:B7:62:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.192.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:83:df:8e:82:b2:fe:0c:79:0b:3d:b7:26:43:a2:55:16:b1: d6:ac:8a:9d:0c:2f:f8:1c:6b:1b:cf:5c:43:7d:d8:30:8d:f4: de:e2:f7:94:9b:7f:96:65:fe:61:99:a1:cc:fd:37:0c:63:a0: 2b:b4:cc:e9:95:10:de:63:66:31:fb:75:07:0f:c3:90:46:d4: 00:da:dc:2d:30:41:6c:5a:d4:4e:aa:c7:06:51:8d:3b:9a:c3: 02:c6:2e:52:65:d6:c4:23:03:49:99:54:78:d5:43:27:26:17: f6:78:34:54:2e:de:1d:96:39:96:b3:c9:8c:4d:98:d0:69:cd: 7d:4d:b6:dd:a2:29:40:1d:80:1e:75:c6:e1:ad:c3:7b:89:a0: 8a:14:4a:fe:21:a4:15:e4:a2:bd:c9:09:f1:d6:0c:3e:6b:c6: 2b:bd:13:d3:2b:50:21:95:3d:87:6f:28:24:91:64:08:2a:49: 8b:85:49:32:93:41:e3:6a:1a:ec:fb:ef:b5:03:f9:d4:32:1b: 9b:78:9c:e0:fb:6d:9b:52:b7:2b:b4:a6:d5:a9:a3:b1:d6:80: 2f:3f:c2:b7:6d:49:25:68:9d:bc:cb:50:2e:14:a8:d2:cb:d1: fe:17:c6:74:9d:f9:37:11:f4:c3:48:d0:a1:41:cb:b7:b9:7c: 6c:25:7f:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQRaDNopVa3XA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MGQzYmM3NWQtNjU1Yy00NmY4LWFhMmQtN2IwYzMxY2YxY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIxmoCCsRrTgFbAH3f15j3NvYMzn3Md9Aw8Q EHs3CdOnzB+vkYDMwHOxGLsRcHgiW4wFdjq7qmnG6X7hN0sEpfQpoYow0FZihObg 3LzKx2KCPJrruM0I1b1s8C+1MrDWOYDgO+Vd67d/hftK+zXayy3HIGyzLwEvm4uL 7Y+9lLhgb1kaxGeMTO4RbtXjbbGeLbpmLWfezmYrwVlOMZLlpUgU6HQaMa+jCHr9 mxA5/T+Z/jlzvI3EUoXzrMtbtqDOnGvUl5qhvmBsyE/pXeKKbiCbUK7BYwfbyCsh iBKkM8PhCcTEektWZ8IA4DgxUO2fCHlEp3fw6YhWms/FqUAoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVOSXv/LyX+Nru8OVQTvISIt2JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTExMTUyNDctYjQ0MS0z MjU5LWE0MWYtM2ZiYzVlNWQ1ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOD346Csv4MeQs9tyZDolUWsdasip0ML/gcaxvPXEN92DCN9N7i95Sb f5Zl/mGZocz9NwxjoCu0zOmVEN5jZjH7dQcPw5BG1ADa3C0wQWxa1E6qxwZRjTua wwLGLlJl1sQjA0mZVHjVQycmF/Z4NFQu3h2WOZazyYxNmNBpzX1Ntt2iKUAdgB51 xuGtw3uJoIoUSv4hpBXkor3JCfHWDD5rxiu9E9MrUCGVPYdvKCSRZAgqSYuFSTKT QeNqGuz777UD+dQyG5t4nOD7bZtStyu0ptWpo7HWgC8/wrdtSSVonbzLUC4UqNLL 0f4XxnSd+TcR9MNI0KFBy7e5fGwlf7I= -----END CERTIFICATE-----Generated at Tue Oct 28 02:41:09 2025 by rpki-client