$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa File: 0b865a74-43ce-357e-8858-73c4efd70945.roa (raw, json) Hash identifier: AXU3hSlFQLLLkZ7275I0axtCDOtyDAWCip+EJfzKPfY= Subject key identifier: C2:48:08:D2:75:A7:C2:0C:E1:F6:6F:95:EC:AB:B8:86:AD:F3:96:06 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584BB45D17DEE209B24B94AAF9A0 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 40501 IP address blocks: 216.235.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:17:de:e2:09:b2:4b:94:aa:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=bbf2f91e-e767-4077-a025-13d8c86132ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:9f:8e:96:90:0c:1a:2c:76:50:79:9d:45: f3:75:7f:ad:74:8f:81:8c:f0:b5:f2:02:9f:34:77: 55:d8:02:ea:06:bb:2b:f6:58:c4:a4:6d:2b:8b:b7: ff:d3:41:de:22:87:65:1e:17:29:90:1f:a4:ce:0b: 29:7e:5f:cf:d6:34:f9:e0:be:ab:fd:bc:f4:c3:b2: 41:78:2c:c6:7b:de:11:61:61:86:5e:0b:92:82:6b: d0:24:26:ee:8d:3a:55:1d:ed:f5:37:e0:4d:e1:0f: c5:3c:45:ce:a0:af:61:e7:7e:95:83:9a:d5:3e:99: 92:80:d2:be:8d:56:f4:0d:c9:0d:72:77:b9:f0:9a: cc:bb:b8:7e:11:6b:4a:1f:3d:e8:21:8e:79:04:b8: 1e:a5:2b:9e:9f:2a:32:01:d6:ae:a0:77:0b:f8:0a: 53:9a:31:48:08:1a:d5:ee:bd:18:99:4e:b8:5b:4b: ae:76:ad:df:90:75:c6:c9:30:85:d6:22:7e:28:28: 8d:3d:9f:bd:f7:ce:68:21:00:4b:b8:01:b9:56:9d: 35:ff:d1:26:e5:52:c4:f5:af:32:47:66:7b:09:52: 59:98:64:d8:ff:4f:38:18:f8:4c:f5:a4:3b:a7:01: c5:40:b2:41:03:c2:ba:d8:89:59:8a:67:26:d8:ab: 5e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:48:08:D2:75:A7:C2:0C:E1:F6:6F:95:EC:AB:B8:86:AD:F3:96:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:06:21:8a:8d:2f:ae:11:28:5f:42:b9:d7:ae:fe:85:48:dd: 64:41:a9:76:cf:e5:7a:c0:41:35:7a:77:d1:e3:1f:c2:8f:23: 11:d8:2d:46:1a:ac:07:05:3a:0e:7f:41:45:33:06:09:a2:3b: 34:0e:79:7a:22:fa:c7:18:b3:19:c6:75:e3:cf:f3:01:ab:09: db:8e:a8:ff:2c:b3:b0:25:6a:dc:c7:07:95:48:3d:16:7d:7e: de:86:18:0b:05:26:cd:bc:d5:6c:b2:ef:77:12:fe:14:ba:bc: 29:08:22:c9:d3:f9:b5:d1:3b:c6:80:f6:48:2f:f4:2b:e5:c9: cd:d9:ab:bf:19:fe:56:64:34:0f:72:44:3b:ee:07:89:a5:31: 25:a5:63:7e:a9:12:26:48:4c:8e:2f:8f:b9:60:b9:83:6d:ac: 5a:b2:9b:2c:2c:64:1d:15:53:90:05:06:3f:7a:34:13:e6:bd: ca:38:9a:f1:48:c8:69:81:26:11:25:41:96:45:3a:50:44:2e: ca:57:ce:34:ba:97:41:c0:db:0a:e3:4a:d9:24:5b:8b:7d:f3: 0d:5e:ef:30:28:4a:76:50:db:42:b3:4d:ac:1a:b7:d6:ac:47: b0:6b:0d:0d:6c:e1:ed:59:2a:fa:3e:59:6f:6f:42:0e:7f:69: b9:3a:3b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRfe4gmyS5Sq+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YmJmMmY5MWUtZTc2Ny00MDc3LWEwMjUtMTNkOGM4NjEzMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHefjpaQDBosdlB5nUXzdX+tdI+BjPC18gKf NHdV2ALqBrsr9ljEpG0ri7f/00HeIodlHhcpkB+kzgspfl/P1jT54L6r/bz0w7JB eCzGe94RYWGGXguSgmvQJCbujTpVHe31N+BN4Q/FPEXOoK9h536Vg5rVPpmSgNK+ jVb0DckNcne58JrMu7h+EWtKHz3oIY55BLgepSuenyoyAdauoHcL+ApTmjFICBrV 7r0YmU64W0uudq3fkHXGyTCF1iJ+KCiNPZ+9985oIQBLuAG5Vp01/9Em5VLE9a8y R2Z7CVJZmGTY/084GPhM9aQ7pwHFQLJBA8K62IlZimcm2KtepwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJICNJ1p8IM4fZvleyruIat85YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvMGI4NjVhNzQtNDNjZS0z NTdlLTg4NTgtNzNjNGVmZDcwOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUGIYqNL64RKF9Cudeu/oVI3WRBqXbP5XrAQTV6d9HjH8KPIxHYLUYa rAcFOg5/QUUzBgmiOzQOeXoi+scYsxnGdePP8wGrCduOqP8ss7AlatzHB5VIPRZ9 ft6GGAsFJs281Wyy73cS/hS6vCkIIsnT+bXRO8aA9kgv9Cvlyc3Zq78Z/lZkNA9y RDvuB4mlMSWlY36pEiZITI4vj7lguYNtrFqymywsZB0VU5AFBj96NBPmvco4mvFI yGmBJhElQZZFOlBELspXzjS6l0HA2wrjStkkW4t98w1e7zAoSnZQ20KzTawat9as R7BrDQ1s4e1ZKvo+WW9vQg5/abk6O4E= -----END CERTIFICATE-----Generated at Wed Nov 5 21:36:08 2025 by rpki-client