$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa File: 767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa (raw, json) Hash identifier: itLNyoLEa9w3UB7dgWLNsqXQVUNPPRjjz+9DDj+wAfY= Subject key identifier: 39:8A:4E:46:64:DA:95:FB:3E:AF:2E:15:51:0C:7E:DF:56:C5:35:43 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584BB2F7AC15CF0C11E48181FA00 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 40501 IP address blocks: 216.235.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ac:15:cf:0c:11:e4:81:81:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=89bdd9eb-6573-4384-9352-55045414e219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:24:92:4e:4e:bd:6e:a0:e4:64:94:a7:82: 0b:3f:65:41:9e:92:54:14:ac:80:a8:f8:02:45:71: 25:7f:b4:0d:bc:c6:25:c2:21:67:e5:49:8f:61:a4: e8:ea:cc:dc:85:23:33:d9:c6:cf:ee:86:8f:43:e1: 1e:98:60:2f:78:98:37:46:55:1d:db:1e:74:e8:33: 2e:32:04:8c:a8:5b:27:86:17:f0:d6:f3:71:ba:78: 58:fe:5b:84:36:54:5d:af:dc:63:c9:90:aa:18:ff: 8b:a2:84:ad:0b:32:39:93:b2:ed:0d:58:9e:95:9b: a2:0c:11:d9:32:79:1a:1a:50:01:89:b7:e3:b3:27: 8c:38:3f:3d:ef:7b:07:92:e0:9a:69:c5:29:34:e8: ee:3f:72:17:ae:9e:5b:4e:78:4a:af:67:10:f2:9b: de:30:f1:93:15:06:ba:a2:bb:f5:86:80:e9:56:3e: c2:cb:9b:fd:36:36:32:43:c9:3f:f5:d3:92:8f:4a: f6:e1:9e:cf:d3:23:49:1c:b0:ad:07:aa:2a:2f:e2: fd:6e:b6:db:9f:a1:0e:e2:d7:47:32:95:49:1f:ea: 47:59:6c:9c:84:a9:f5:e1:a9:e5:36:40:70:d0:e1: ef:37:ac:c3:69:db:67:26:f2:fe:d0:d3:50:4f:95: 65:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:4E:46:64:DA:95:FB:3E:AF:2E:15:51:0C:7E:DF:56:C5:35:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f5:5b:56:45:c9:b3:5f:c5:28:6e:65:da:78:50:9c:1d:15: 59:06:d5:ba:3d:28:18:ea:68:5a:ff:75:72:d4:1e:b0:27:b7: 7d:be:3f:8f:04:bd:ad:5e:b8:0c:46:9c:8c:19:ef:5c:c1:d4: 4a:05:9b:ae:8f:d0:92:0e:ee:db:a4:82:13:28:26:b6:45:af: c7:73:c2:c1:cd:6e:9a:10:1f:5d:c0:db:6e:83:09:a1:22:0c: 90:02:8b:f4:98:ce:89:a1:92:6b:1c:f7:d1:46:bf:87:52:d4: 34:e5:4e:76:6b:d0:3d:76:10:a5:91:46:f4:26:02:8e:6d:9e: d4:a2:b8:21:2b:23:4a:d2:23:6d:16:45:a9:73:83:97:ab:2f: e8:b0:40:e0:ee:52:63:24:18:e5:0a:0e:b6:4d:da:45:28:11: 70:3f:53:52:11:b0:b5:50:2e:d0:6f:74:79:79:9d:3e:4f:cc: 15:3c:a9:1b:82:b5:94:28:37:c2:18:70:bc:1e:6e:c9:0a:f9: 3f:1b:5e:e3:76:e7:bc:07:f3:fd:36:d3:47:2f:2e:52:81:43: 20:2e:13:b5:fc:ee:d5:78:15:11:22:ef:fd:3f:7e:66:8c:5f: dd:fd:ee:50:80:6c:0a:4f:34:68:76:9a:5a:a0:46:55:49:7b: 4b:a5:82:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96wVzwwR5IGB+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODliZGQ5ZWItNjU3My00Mzg0LTkzNTItNTUwNDU0MTRlMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD0kkk5OvW6g5GSUp4ILP2VBnpJUFKyAqPgC RXElf7QNvMYlwiFn5UmPYaTo6szchSMz2cbP7oaPQ+EemGAveJg3RlUd2x506DMu MgSMqFsnhhfw1vNxunhY/luENlRdr9xjyZCqGP+LooStCzI5k7LtDVielZuiDBHZ MnkaGlABibfjsyeMOD8973sHkuCaacUpNOjuP3IXrp5bTnhKr2cQ8pveMPGTFQa6 orv1hoDpVj7Cy5v9NjYyQ8k/9dOSj0r24Z7P0yNJHLCtB6oqL+L9brbbn6EO4tdH MpVJH+pHWWychKn14anlNkBw0OHvN6zDadtnJvL+0NNQT5VlzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmKTkZk2pX7Pq8uFVEMft9WxTVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvNzY3YTBkMzYtNzI3MC0z YzNiLWE3MTYtNWNhNGFiYTFlMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL1W1ZFybNfxShuZdp4UJwdFVkG1bo9KBjqaFr/dXLUHrAnt32+P48E va1euAxGnIwZ71zB1EoFm66P0JIO7tukghMoJrZFr8dzwsHNbpoQH13A226DCaEi DJACi/SYzomhkmsc99FGv4dS1DTlTnZr0D12EKWRRvQmAo5tntSiuCErI0rSI20W Ralzg5erL+iwQODuUmMkGOUKDrZN2kUoEXA/U1IRsLVQLtBvdHl5nT5PzBU8qRuC tZQoN8IYcLwebskK+T8bXuN257wH8/0200cvLlKBQyAuE7X87tV4FREi7/0/fmaM X9397lCAbApPNGh2mlqgRlVJe0ulgps= -----END CERTIFICATE-----Generated at Wed Nov 5 21:36:08 2025 by rpki-client