$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa File: 5cf8fa1d-c180-3677-93af-e4ff155a7924.roa (raw, json) Hash identifier: U2r+yrQTqfbAK0OPh6o2tB6SQ8DUpbO4sEoqcu8KYVQ= Subject key identifier: 3B:1D:F1:FF:AE:F4:73:44:28:99:3F:E7:5A:93:1A:AC:BA:B8:B9:87 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584BAD624C8C325681D86FA0CD00 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 5511 IP address blocks: 196.27.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4c:8c:32:56:81:d8:6f:a0:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=6d9a44e7-68b6-48e2-966e-167f07e29d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:74:c0:6e:f1:eb:eb:43:b7:03:c3:d7:6a: cd:95:be:f9:16:ac:4a:39:c7:05:36:2b:22:be:82: 1b:5a:b2:8c:7a:66:78:05:e6:a7:16:d0:a6:5f:24: 1c:08:76:2b:e1:48:c0:a5:7a:ac:e8:dd:25:ae:ab: ee:17:2f:ea:3f:d2:0c:96:db:44:53:eb:7d:b3:77: 78:c8:aa:02:fb:35:46:bc:fc:a3:06:68:2e:83:16: b9:e7:a2:db:7e:43:36:c1:b5:b2:f6:fb:f2:f2:b9: 4e:e1:da:cb:06:83:57:47:59:1c:65:d0:4a:85:b2: 11:22:62:de:85:34:f3:58:34:fe:07:f8:29:be:a3: 24:66:70:15:39:28:79:78:7b:d5:d3:ec:e2:c3:e1: 7c:22:f7:c5:28:cc:4e:93:e5:ba:78:43:8e:4a:8d: c5:11:20:d1:02:7d:66:6a:b5:46:8f:17:56:73:c8: 84:39:f7:f6:70:e6:14:51:d1:13:9b:3d:09:cb:28: 31:be:42:f2:0b:c0:b2:91:f3:39:8d:db:c9:4a:3a: 38:c8:10:b5:bb:64:21:77:fd:07:5b:b4:8f:fa:de: 14:04:e4:7a:12:5d:5b:b9:bb:8d:f8:1e:80:de:39: 48:22:cd:5a:78:1a:c8:e3:ce:94:37:0f:32:ad:62: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1D:F1:FF:AE:F4:73:44:28:99:3F:E7:5A:93:1A:AC:BA:B8:B9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 196.27.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:8b:82:af:44:27:41:bf:af:65:97:82:74:1a:8e:dd:c1:c3: 5e:6b:12:ee:54:b3:4b:75:4c:f8:40:87:5d:88:56:cc:9f:ad: b0:59:72:6f:57:7a:11:37:7a:e8:a8:8a:a0:0a:ba:ae:04:de: 08:a9:2a:29:8e:c9:33:3c:4d:f2:56:bd:70:00:2c:e8:a3:b1: 12:ac:ab:ee:0d:38:e4:9d:e0:71:f0:8a:bf:e2:10:09:73:07: a5:28:2d:9f:1a:fb:79:3c:b9:e7:75:13:1d:fd:8d:0c:ac:e4: b5:6c:de:b4:d5:fc:1c:44:b6:0d:b0:1d:f8:9a:b8:b8:67:0c: 9d:f4:16:da:78:24:aa:22:2a:d7:a8:dd:8d:60:78:f5:fb:4b: b0:92:bd:9a:71:7f:25:09:b6:a0:c3:6a:77:35:13:49:ab:2f: 17:49:dd:97:ce:94:9e:5e:52:57:61:46:aa:11:a9:a9:90:86: 03:e8:51:2f:fa:43:c4:8c:57:d2:64:d6:0f:f6:18:2c:ed:62: 21:57:b5:b5:47:87:8f:40:c4:9d:3e:68:d1:2f:43:bb:1e:9a: 71:d2:2c:93:5d:9a:70:be:3b:df:1a:b0:1b:98:4a:f9:e8:3c: 86:6c:39:b7:36:57:66:6c:83:5a:ea:73:e4:cb:21:12:0c:99: bb:18:8b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkyMMlaB2G+gzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NmQ5YTQ0ZTctNjhiNi00OGUyLTk2NmUtMTY3ZjA3ZTI5ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmR0wG7x6+tDtwPD12rNlb75FqxKOccFNisi voIbWrKMemZ4BeanFtCmXyQcCHYr4UjApXqs6N0lrqvuFy/qP9IMlttEU+t9s3d4 yKoC+zVGvPyjBmgugxa556LbfkM2wbWy9vvy8rlO4drLBoNXR1kcZdBKhbIRImLe hTTzWDT+B/gpvqMkZnAVOSh5eHvV0+ziw+F8IvfFKMxOk+W6eEOOSo3FESDRAn1m arVGjxdWc8iEOff2cOYUUdETmz0JyygxvkLyC8CykfM5jdvJSjo4yBC1u2Qhd/0H W7SP+t4UBOR6El1bubuN+B6A3jlIIs1aeBrI486UNw8yrWIIYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsd8f+u9HNEKJk/51qTGqy6uLmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNWNmOGZhMWQtYzE4MC0z Njc3LTkzYWYtZTRmZjE1NWE3OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxBsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6Lgq9EJ0G/r2WXgnQajt3Bw15rEu5Us0t1TPhAh12IVsyfrbBZcm9X ehE3euioiqAKuq4E3gipKimOyTM8TfJWvXAALOijsRKsq+4NOOSd4HHwir/iEAlz B6UoLZ8a+3k8ued1Ex39jQys5LVs3rTV/BxEtg2wHfiauLhnDJ30Ftp4JKoiKteo 3Y1gePX7S7CSvZpxfyUJtqDDanc1E0mrLxdJ3ZfOlJ5eUldhRqoRqamQhgPoUS/6 Q8SMV9Jk1g/2GCztYiFXtbVHh49AxJ0+aNEvQ7semnHSLJNdmnC+O98asBuYSvno PIZsObc2V2Zsg1rqc+TLIRIMmbsYi3A= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:12 2025 by rpki-client