$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa File: c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (raw, json) Hash identifier: fyUU1XXp6zF1eD/qKQxd+76sKoLOCMxyeFXkS5Ve/Vc= Subject key identifier: 71:24:DA:08:1B:B3:9B:F5:30:72:D3:07:2A:EC:F9:D5:B5:72:FC:78 Certificate issuer: /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Certificate serial: 010D0C9F4328584BC10ADD6326E09F3091B1A700 Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 398803 IP address blocks: 136.175.44.0/22 maxlen: 24 2602:fd08::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:dd:63:26:e0:9f:30:91:b1:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=1b42cec2-a1c0-4434-bba4-cd5220c59682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:32:33:11:99:be:86:10:ae:ce:ce:02:80: cd:94:44:84:a2:23:01:3f:a6:40:a3:e5:e9:a7:ca: f9:04:6b:63:b0:8e:6d:8c:04:c4:96:1d:45:0f:3d: b5:84:59:c5:d1:ca:df:70:f6:70:ed:20:d0:bb:a4: 9d:f8:5c:d8:3a:11:98:b1:0e:51:ff:d3:9e:bb:e8: 3f:5a:75:ea:cd:f6:23:c0:08:03:07:1b:51:dd:3c: e9:3b:0c:94:90:32:b1:bf:70:77:81:43:79:a6:56: 6d:82:23:51:59:03:10:9d:f2:9f:e4:fb:cb:14:ac: ab:bb:2e:be:66:2b:ae:2e:5e:8d:4a:f5:05:01:34: dc:f9:41:f0:de:2a:36:6b:23:12:31:14:92:a4:54: 15:a6:cb:08:c9:1e:15:33:14:85:65:5c:61:6d:7a: 86:a8:32:22:fb:38:f2:cc:66:b0:4a:da:84:ad:0f: f6:06:6c:e4:e3:58:c4:63:73:e7:70:78:a3:17:e6: 09:4b:0b:b9:fb:77:45:73:90:4d:8c:c8:b3:71:cd: c5:6f:24:d2:75:9a:1f:31:be:a3:94:12:c5:af:84: 84:07:0d:0d:4b:0b:3e:b3:92:66:96:ab:52:0c:a5: 34:7a:d4:fd:f7:61:49:a5:5f:88:d2:32:7e:84:da: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:24:DA:08:1B:B3:9B:F5:30:72:D3:07:2A:EC:F9:D5:B5:72:FC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl X509v3 Authority Key Identifier: keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer sbgp-ipAddrBlock: critical IPv4: 136.175.44.0/22 IPv6: 2602:fd08::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:eb:e8:d2:80:fe:d5:d0:9c:99:12:85:9f:ce:09:2e:2e:32: 4c:f5:70:15:9c:e5:9f:03:6f:f3:80:13:83:46:e5:fa:89:d6: 99:42:7b:63:d8:1f:e2:b5:b1:5c:e9:c9:91:db:ca:f3:24:9b: a2:3f:0b:81:d8:dd:f1:9a:21:ff:a4:57:b0:33:9f:e6:13:2e: 93:97:ca:93:6f:2e:60:4b:d0:78:37:51:56:91:ab:7d:55:1f: 92:11:49:8d:29:2c:db:64:56:a7:3a:c2:3b:08:d6:b7:30:ad: 38:4e:da:da:c2:d2:1d:97:20:94:b9:89:69:00:36:c9:f8:a2: 9f:3b:2f:c1:8a:44:05:b1:c9:7a:f9:80:c4:d3:9b:0e:c8:02: c1:9e:f4:29:aa:f5:45:34:ea:9b:73:37:0c:85:07:79:55:91: 29:fd:d1:e5:63:e3:3a:8a:4d:61:3f:39:5e:32:6f:23:13:0e: 31:b1:65:18:74:2a:a4:11:8b:69:a5:6c:f4:ac:3f:76:4f:38: 90:82:52:22:78:7e:22:02:fb:2f:00:1a:e4:9f:5c:e9:8e:b7: 92:27:70:e9:77:bb:f8:21:df:f9:d1:29:da:20:9f:68:ba:7d: 3e:10:4f:21:2e:21:31:c0:22:6d:57:8e:1e:7d:36:58:19:64: 82:d8:4b:97 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEvBCt1jJuCfMJGxpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFkMDg2OTItN2RlMS00OTczLWI3YWUtNWEwMzk3ZTZi NjBjMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MWI0MmNlYzItYTFjMC00NDM0LWJiYTQtY2Q1MjIwYzU5NjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqAyMxGZvoYQrs7OAoDNlESEoiMBP6ZAo+Xp p8r5BGtjsI5tjATElh1FDz21hFnF0crfcPZw7SDQu6Sd+FzYOhGYsQ5R/9Oeu+g/ WnXqzfYjwAgDBxtR3TzpOwyUkDKxv3B3gUN5plZtgiNRWQMQnfKf5PvLFKyruy6+ ZiuuLl6NSvUFATTc+UHw3io2ayMSMRSSpFQVpssIyR4VMxSFZVxhbXqGqDIi+zjy zGawStqErQ/2Bmzk41jEY3PncHijF+YJSwu5+3dFc5BNjMizcc3FbyTSdZofMb6j lBLFr4SEBw0NSws+s5JmlqtSDKU0etT992FJpV+I0jJ+hNpidQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHEk2ggbs5v1MHLTByrs+dW1cvx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MWQw ODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAzOTdlNmI2MGMvYzNjZmJhYmItNDA1NS0z ZDhmLTg3ZTktMzM5YTIyZjQ2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzFkMDg2OTItN2RlMS00OTczLWI3 YWUtNWEwMzk3ZTZiNjBjLzcxZDA4NjkyLTdkZTEtNDk3My1iN2FlLTVhMDM5N2U2 YjYwYy5jcmwwHwYDVR0jBBgwFoAUsY6RxJzyR2i+Iqp+7ZLAkU6999swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MWQwODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAz OTdlNmI2MGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCiK8sMA4E AgACMAgDBgQmAv0IADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB26+jSgP7V0JyZEoWfzgkuLjJM9XAVnOWf A2/zgBODRuX6idaZQntj2B/itbFc6cmR28rzJJuiPwuB2N3xmiH/pFewM5/mEy6T l8qTby5gS9B4N1FWkat9VR+SEUmNKSzbZFanOsI7CNa3MK04TtrawtIdlyCUuYlp ADbJ+KKfOy/BikQFscl6+YDE05sOyALBnvQpqvVFNOqbczcMhQd5VZEp/dHlY+M6 ik1hPzleMm8jEw4xsWUYdCqkEYtppWz0rD92TziQglIieH4iAvsvABrkn1zpjreS J3Dpd7v4Id/50SnaIJ9oun0+EE8hLiExwCJtV44efTZYGWSC2EuX -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:54 2025 by rpki-client