$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/003ef55c-938c-39de-96e4-465693e66da1.roa File: 003ef55c-938c-39de-96e4-465693e66da1.roa (raw, json) Hash identifier: 0meYM+b37WIVJsDg+1PPFs6csCRho97evZB2iU3wmBc= Subject key identifier: 47:93:80:B6:E3:54:AE:16:76:0C:D7:82:99:EE:CA:76:38:46:DD:17 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B89176E3D0521AA7A7F5C1D40 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/003ef55c-938c-39de-96e4-465693e66da1.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 13807 IP address blocks: 64.64.152.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6e:3d:05:21:aa:7a:7f:5c:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cc9476be-598c-4b16-bec4-1573293ccaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:5c:df:06:9c:be:03:2d:51:23:90:29:9c: 2a:1e:bd:ee:fd:39:c8:ea:ff:49:2a:9d:5f:9b:0b: c3:2f:c2:71:04:23:f5:33:07:eb:26:ec:43:85:fb: ba:89:83:f4:2d:22:eb:35:a4:fd:99:1c:e3:14:f3: 08:b0:cb:c1:04:9e:77:8e:0e:f7:4f:4a:89:72:00: f9:0f:21:d4:91:2c:fe:fb:70:e7:af:bd:4e:f6:a1: cc:be:cd:20:a4:60:d9:ad:e1:65:fa:3f:b1:a4:db: ce:91:1b:aa:69:8c:d1:43:3f:42:f5:84:39:d1:7c: bc:32:5f:0e:f2:f1:54:d1:5b:e4:c3:d3:29:08:5c: 8c:4c:a7:4e:a1:ee:99:e5:01:10:ad:ed:8b:84:4f: d8:e9:53:9d:8c:93:d6:8c:99:49:74:28:82:a7:ef: d2:c5:71:de:04:7e:13:1f:f6:b8:be:72:28:69:9a: 5e:5f:f4:75:ba:af:56:0f:64:9b:96:9a:65:49:94: 7a:a4:32:95:36:3f:fb:c7:f1:2a:23:56:6e:cb:f6: 7e:e1:86:35:c8:62:42:48:74:59:ad:bd:d6:e8:8b: 4f:1b:a9:a6:47:84:cc:9d:14:98:39:f2:f1:50:bf: 36:42:28:2f:70:bd:2a:d2:e5:ff:28:16:a0:c2:ae: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:93:80:B6:E3:54:AE:16:76:0C:D7:82:99:EE:CA:76:38:46:DD:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/003ef55c-938c-39de-96e4-465693e66da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 64.64.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:bd:40:ca:d7:6d:4b:fe:5e:3e:a1:a7:97:db:00:1e:ef:28: e5:9a:42:7a:a4:e7:22:82:31:40:60:1d:2f:86:91:02:23:f8: cf:94:dc:93:00:b8:d2:59:cd:c3:1d:15:2c:e6:60:01:80:40: 69:1c:4c:73:f8:e8:ac:99:0c:d8:a8:71:66:d3:cb:99:ae:c1: 20:33:46:4e:c5:a0:bf:17:b1:4e:00:e9:c6:39:75:3e:6f:dd: 39:30:58:3b:67:da:94:21:83:e7:4d:08:91:79:55:14:d7:c3: 6b:ef:27:76:0b:6a:d4:62:4e:b8:14:93:9f:4e:e3:2a:bc:a2: fb:9a:a2:d8:8c:f0:ac:ba:c9:47:d8:a9:a6:0a:f5:5b:2d:09: de:90:76:88:b0:ec:93:81:70:8c:0a:f4:08:97:46:36:b3:e0: 29:fa:22:54:85:a8:b6:31:a8:21:0d:b3:88:8e:b9:a4:a2:3b: ed:bb:12:24:cc:a9:55:33:53:b2:e8:94:e0:61:b8:b7:93:ee: 42:92:cd:f4:33:ad:32:3a:f7:16:45:32:02:9e:11:eb:e5:63: 0b:20:d6:b3:bb:50:44:1c:8a:20:03:7b:d5:24:7b:a0:fa:24: 8d:ab:aa:b4:0a:42:1b:d9:b8:c2:3b:10:a4:9c:7b:54:9e:f8: 2b:ee:8f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF249BSGqen9cHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2M5NDc2YmUtNTk4Yy00YjE2LWJlYzQtMTU3MzI5M2NjYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunJc3wacvgMtUSOQKZwqHr3u/TnI6v9JKp1f mwvDL8JxBCP1MwfrJuxDhfu6iYP0LSLrNaT9mRzjFPMIsMvBBJ53jg73T0qJcgD5 DyHUkSz++3Dnr71O9qHMvs0gpGDZreFl+j+xpNvOkRuqaYzRQz9C9YQ50Xy8Ml8O 8vFU0Vvkw9MpCFyMTKdOoe6Z5QEQre2LhE/Y6VOdjJPWjJlJdCiCp+/SxXHeBH4T H/a4vnIoaZpeX/R1uq9WD2SblpplSZR6pDKVNj/7x/EqI1Zuy/Z+4YY1yGJCSHRZ rb3W6ItPG6mmR4TMnRSYOfLxUL82QigvcL0q0uX/KBagwq7iswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeTgLbjVK4WdgzXgpnuynY4Rt0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMDAzZWY1NWMtOTM4Yy0z OWRlLTk2ZTQtNDY1NjkzZTY2ZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQECYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK69QMrXbUv+Xj6hp5fbAB7vKOWaQnqk5yKCMUBgHS+GkQIj+M+U3JMA uNJZzcMdFSzmYAGAQGkcTHP46KyZDNiocWbTy5muwSAzRk7FoL8XsU4A6cY5dT5v 3TkwWDtn2pQhg+dNCJF5VRTXw2vvJ3YLatRiTrgUk59O4yq8ovuaotiM8Ky6yUfY qaYK9VstCd6Qdoiw7JOBcIwK9AiXRjaz4Cn6IlSFqLYxqCENs4iOuaSiO+27EiTM qVUzU7LolOBhuLeT7kKSzfQzrTI69xZFMgKeEevlYwsg1rO7UEQciiADe9Uke6D6 JI2rqrQKQhvZuMI7EKSce1Se+Cvuj+I= -----END CERTIFICATE-----Generated at Thu Oct 16 13:46:22 2025 by rpki-client