$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/56d3f0be-63dc-3d10-a960-7e5466f962f3.roa File: 56d3f0be-63dc-3d10-a960-7e5466f962f3.roa (raw, json) Hash identifier: D7wh3cxQ0OgZimpdDuB3aVz6WFDXjr84byONkn+ovzI= Subject key identifier: 63:BD:DA:70:FF:AE:CA:36:ED:48:BA:28:02:4B:F0:6A:9D:83:A5:2F Certificate issuer: /CN=38ef1cae-7a08-4eb2-979b-75ec9b96c2bc Certificate serial: 010D0C9F4328584B6A61F0ABF4B38982FF1C5980 Authority key identifier: 6E:2C:87:F2:9B:91:63:C0:57:49:8F:3B:CD:A6:A8:78:64:D4:7B:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/56d3f0be-63dc-3d10-a960-7e5466f962f3.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 54945 IP address blocks: 208.94.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f0:ab:f4:b3:89:82:ff:1c:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ef1cae-7a08-4eb2-979b-75ec9b96c2bc Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=2ad6259a-f8b8-4cab-9950-ea0f3d54efce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:36:21:51:c4:98:5c:19:ce:10:74:2e:32: 12:0a:08:68:71:ba:26:49:30:b6:cc:fb:3c:10:ec: 59:84:64:1c:a3:e9:9b:37:a3:53:d3:d4:0d:07:4a: 18:cc:b4:7f:66:81:41:60:ad:c0:30:c4:00:ce:14: fc:67:b1:d7:9d:81:ec:99:4a:de:36:f0:87:4f:c1: eb:30:f3:ae:44:ad:ea:aa:d3:93:16:88:0f:1d:f5: c7:86:78:f5:26:86:ed:fa:bf:47:fe:7c:21:36:7b: 44:35:24:12:86:94:10:30:72:ad:86:cd:b8:40:00: 55:29:9b:49:53:f5:0f:e3:cd:f7:7c:40:41:30:19: a2:28:80:24:07:5c:f2:ae:7e:16:42:d7:39:de:cc: fc:17:62:47:9c:34:5f:12:f8:7e:f1:c6:ae:40:6e: d0:dd:af:e7:6f:9c:15:35:f6:87:1c:28:17:95:56: f8:20:97:da:0b:62:9a:13:da:83:bb:73:3b:76:49: f2:e0:2f:46:4d:53:3a:4b:2a:48:df:c4:9d:97:20: 88:16:c9:0d:3b:5a:44:92:b2:ec:00:2f:24:23:a4: e5:9f:7b:c2:b2:ac:d6:46:b5:bf:52:0e:8b:ac:76: e0:91:70:51:30:b0:d6:1d:37:14:7e:ed:5d:bc:05: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:DA:70:FF:AE:CA:36:ED:48:BA:28:02:4B:F0:6A:9D:83:A5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/56d3f0be-63dc-3d10-a960-7e5466f962f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.crl X509v3 Authority Key Identifier: keyid:6E:2C:87:F2:9B:91:63:C0:57:49:8F:3B:CD:A6:A8:78:64:D4:7B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.cer sbgp-ipAddrBlock: critical IPv4: 208.94.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c1:0b:b5:13:a2:74:3a:4f:c1:23:33:11:aa:b7:ac:a9:f4: 25:4a:72:bd:a9:08:b0:6e:b4:54:9d:d2:33:4a:1c:00:22:a0: 99:95:06:e1:d7:ed:f5:f0:b9:72:43:b9:3a:d7:ad:56:b7:60: 0d:cf:0c:7c:8a:e9:6d:73:d7:82:45:0b:4b:b5:1d:f4:59:07: 4a:a2:79:b7:ed:ba:f7:68:1c:81:b6:95:aa:7b:a4:f0:fb:cc: 79:71:8f:63:8c:ce:b0:a0:79:f4:a4:68:d6:ef:ed:04:c2:43: c5:50:36:c4:a3:33:22:94:b1:88:2b:c4:11:63:e8:a8:95:a7: 19:a7:42:1a:b0:fb:da:ea:d4:87:9a:d4:c0:b5:ca:48:1f:2d: cc:ad:45:21:0d:5e:45:49:2c:f7:9c:00:bd:75:b5:9e:02:3d: 9e:6d:e4:6c:e8:e1:9e:5c:df:f4:50:96:f5:89:3e:01:48:31: b6:58:4f:c6:40:2c:33:19:67:52:4b:99:e9:ae:24:ef:40:76: 2e:3a:e8:65:d1:25:46:a4:44:3c:82:e8:0d:00:7e:ca:e9:d9: 05:31:d9:3d:80:b9:dc:9d:fd:03:45:9f:e2:8e:f2:16:e9:40: 13:00:35:b0:62:a3:f9:06:74:b0:fb:5f:f2:9f:38:68:ed:ad: 05:47:f6:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfCr9LOJgv8cWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlZjFjYWUtN2EwOC00ZWIyLTk3OWItNzVlYzliOTZj MmJjMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MmFkNjI1OWEtZjhiOC00Y2FiLTk5NTAtZWEwZjNkNTRlZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllM2IVHEmFwZzhB0LjISCghocbomSTC2zPs8 EOxZhGQco+mbN6NT09QNB0oYzLR/ZoFBYK3AMMQAzhT8Z7HXnYHsmUreNvCHT8Hr MPOuRK3qqtOTFogPHfXHhnj1Jobt+r9H/nwhNntENSQShpQQMHKths24QABVKZtJ U/UP4833fEBBMBmiKIAkB1zyrn4WQtc53sz8F2JHnDRfEvh+8cauQG7Q3a/nb5wV NfaHHCgXlVb4IJfaC2KaE9qDu3M7dkny4C9GTVM6SypI38SdlyCIFskNO1pEkrLs AC8kI6Tln3vCsqzWRrW/Ug6LrHbgkXBRMLDWHTcUfu1dvAW14wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO92nD/rso27Ui6KAJL8Gqdg6UvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOGVm MWNhZS03YTA4LTRlYjItOTc5Yi03NWVjOWI5NmMyYmMvNTZkM2YwYmUtNjNkYy0z ZDEwLWE5NjAtN2U1NDY2Zjk2MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzhlZjFjYWUtN2EwOC00ZWIyLTk3 OWItNzVlYzliOTZjMmJjLzM4ZWYxY2FlLTdhMDgtNGViMi05NzliLTc1ZWM5Yjk2 YzJiYy5jcmwwHwYDVR0jBBgwFoAUbiyH8puRY8BXSY87zaaoeGTUe44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOGVmMWNhZS03YTA4LTRlYjItOTc5Yi03NWVj OWI5NmMyYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbBC7UTonQ6T8EjMxGqt6yp9CVKcr2pCLButFSd0jNKHAAioJmVBuHX 7fXwuXJDuTrXrVa3YA3PDHyK6W1z14JFC0u1HfRZB0qiebftuvdoHIG2lap7pPD7 zHlxj2OMzrCgefSkaNbv7QTCQ8VQNsSjMyKUsYgrxBFj6KiVpxmnQhqw+9rq1Iea 1MC1ykgfLcytRSENXkVJLPecAL11tZ4CPZ5t5Gzo4Z5c3/RQlvWJPgFIMbZYT8ZA LDMZZ1JLmemuJO9Adi466GXRJUakRDyC6A0Afsrp2QUx2T2Audyd/QNFn+KO8hbp QBMANbBio/kGdLD7X/KfOGjtrQVH9k8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:27:19 2025 by rpki-client