$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa File: 0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa (raw, json) Hash identifier: 1izQNAqJm4yUp28BL6H2ysjjV2YQoX3EndTOEmdwvTk= Subject key identifier: 11:58:9A:D3:B4:7C:AC:AA:F0:DF:76:95:C8:FA:1A:0D:07:C7:E1:8B Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB759214B95D3C765E9ED900 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 216.255.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:92:14:b9:5d:3c:76:5e:9e:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=6d7ac492-6aab-44e3-b5f6-fd4e6f604c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:e0:75:ca:92:41:08:2b:98:ab:cc:96:5c: 34:2a:26:81:c5:5a:27:1e:da:26:c8:df:d7:ce:b1: 8d:19:77:78:5e:f2:d0:87:8c:c4:b2:27:6c:27:65: 93:46:f7:4e:f9:ab:e7:75:a3:36:77:63:20:de:58: fa:a3:cb:cd:ee:8e:31:e1:75:6f:1b:cf:a9:5c:37: 88:31:4c:ee:4e:a1:5a:0f:15:a2:58:9c:f6:b7:7e: 0a:cd:3e:3a:b6:d0:e4:a4:2d:8e:02:47:a3:c3:44: 0b:33:3e:a0:02:91:17:77:2b:12:75:fa:24:21:6c: ca:a7:bb:ac:b8:31:b4:28:8f:b0:31:38:2e:fa:4b: 0f:ef:a7:21:14:26:27:1f:a7:0e:8d:fc:04:77:80: b1:68:63:53:f8:7d:c5:2c:f0:88:83:c3:ba:d3:c4: fd:a9:28:c0:b1:2b:58:d1:dc:32:e4:32:77:90:d1: 29:c9:b2:b0:38:d7:2e:90:10:24:ca:da:c8:1e:d1: 14:38:7f:4c:18:f6:80:2b:a1:eb:7b:ae:71:b3:90: 4d:2c:c1:e3:d9:1d:6b:0f:18:63:b1:84:5c:3a:8e: 1d:a2:47:e8:8c:c2:bd:ae:12:ea:ae:14:4b:0e:5b: 9f:d6:b5:2c:ae:7d:89:67:f8:36:32:b2:15:b1:ca: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:58:9A:D3:B4:7C:AC:AA:F0:DF:76:95:C8:FA:1A:0D:07:C7:E1:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:37:7f:6d:6e:14:91:6f:cc:5a:2d:67:4e:0f:7e:8d:2e:c7: 84:29:2d:00:55:c8:c2:bf:13:49:d1:8a:a6:a3:4f:ac:01:60: 97:58:c3:30:0b:6a:3d:26:9c:be:b1:d6:7e:a8:ff:af:ed:4f: ed:be:4e:fe:84:78:60:ed:4d:68:8d:cf:55:4a:1a:dc:de:55: ae:dc:37:f6:d4:cf:6f:b2:63:7c:ea:5b:60:67:0a:08:4a:4b: a4:5c:54:5b:43:bb:62:4a:37:49:8a:f6:2b:01:ac:aa:d1:8a: e7:f1:29:4e:f1:a1:11:06:56:3c:8b:f4:ec:af:31:99:7c:fe: 42:74:bb:b5:ad:4b:08:37:ab:84:a8:8a:14:2e:b1:ea:8c:20: 19:b5:05:34:33:69:be:9f:56:42:48:7e:f2:42:a6:5b:da:c2: 49:79:91:51:66:b3:53:9b:e7:c5:de:5b:ba:76:06:19:a3:fc: e9:fe:ca:70:a9:55:00:62:2e:38:d4:41:70:51:aa:0d:f1:e0: 7d:45:ad:07:85:f9:bf:f2:a9:22:bd:ea:8b:fe:99:6b:fe:10: ff:bd:23:68:60:7f:96:03:cf:fc:c8:65:b7:50:9d:40:65:38: 2c:e9:cd:76:a7:90:3f:60:c1:7f:bb:da:86:ec:96:00:1b:f0: 9f:a2:ee:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZIUuV08dl6e2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NmQ3YWM0OTItNmFhYi00NGUzLWI1ZjYtZmQ0ZTZmNjA0YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4XgdcqSQQgrmKvMllw0KiaBxVonHtomyN/X zrGNGXd4XvLQh4zEsidsJ2WTRvdO+avndaM2d2Mg3lj6o8vN7o4x4XVvG8+pXDeI MUzuTqFaDxWiWJz2t34KzT46ttDkpC2OAkejw0QLMz6gApEXdysSdfokIWzKp7us uDG0KI+wMTgu+ksP76chFCYnH6cOjfwEd4CxaGNT+H3FLPCIg8O608T9qSjAsStY 0dwy5DJ3kNEpybKwONcukBAkytrIHtEUOH9MGPaAK6Hre65xs5BNLMHj2R1rDxhj sYRcOo4dokfojMK9rhLqrhRLDluf1rUsrn2JZ/g2MrIVscqBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFYmtO0fKyq8N92lcj6Gg0Hx+GLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMGFkNmUzYzEtZDQwMy0z MzQ5LTgzZjUtZjBlZjBmY2EyNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI3f21uFJFvzFotZ04Pfo0ux4QpLQBVyMK/E0nRiqajT6wBYJdYwzAL aj0mnL6x1n6o/6/tT+2+Tv6EeGDtTWiNz1VKGtzeVa7cN/bUz2+yY3zqW2BnCghK S6RcVFtDu2JKN0mK9isBrKrRiufxKU7xoREGVjyL9OyvMZl8/kJ0u7WtSwg3q4So ihQuseqMIBm1BTQzab6fVkJIfvJCplvawkl5kVFms1Ob58XeW7p2Bhmj/On+ynCp VQBiLjjUQXBRqg3x4H1FrQeF+b/yqSK96ov+mWv+EP+9I2hgf5YDz/zIZbdQnUBl OCzpzXankD9gwX+72obslgAb8J+i7qI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:13:08 2025 by rpki-client