$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa File: 0253e5ee-877d-38d4-a970-551d593f295d.roa (raw, json) Hash identifier: CAoXT6qQ557d1/VAKZPNA1IElnrYQsNqh3bg8pAuAes= Subject key identifier: 6D:10:29:47:C1:8E:84:78:96:AD:1B:09:F9:A5:AE:0C:D2:3B:70:06 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584BB45D18551A3D62D152E15900 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 6461 IP address blocks: 216.158.207.0/24 maxlen: 24 216.158.211.0/24 maxlen: 24 216.158.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:18:55:1a:3d:62:d1:52:e1:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=4c6b5eb0-d4af-41aa-b8d7-5799f99cccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:17:c1:14:6c:f1:54:51:18:69:1b:b4:50: f5:e0:e2:81:31:90:1a:ef:bf:61:f5:51:84:f6:b3: ca:22:86:3b:92:80:c2:b1:c3:13:dd:de:86:20:1e: df:30:d1:e3:0e:07:59:e0:73:b4:2d:a4:13:25:4e: 7a:3c:dd:a0:88:d8:e1:45:20:0d:f7:23:17:60:12: f1:9b:48:32:93:0b:95:83:62:a2:36:e5:c4:3c:54: 01:17:7b:a6:c3:c9:ed:4e:25:05:5b:eb:62:80:0b: f9:bb:80:99:ad:60:bf:5a:e3:a4:4f:03:8e:4b:dc: 89:31:1b:db:85:ec:97:6f:c3:63:a6:23:d4:53:dc: ed:10:8b:ef:b8:5d:51:f0:47:5c:26:46:42:f1:19: 9b:cd:97:60:73:9d:9a:01:22:0f:fb:c4:f1:94:f7: c3:01:c7:35:3e:17:1e:3e:98:81:23:26:6c:a6:62: 9e:02:d0:65:d5:c9:4d:51:62:8a:00:51:0d:63:b4: 71:e8:6b:c6:b9:55:0a:05:f5:7c:2e:92:4a:b3:9b: fb:d3:04:82:43:4a:4c:76:e2:1e:a6:67:f2:1d:52: 60:04:6c:ae:9c:80:b0:3c:75:69:c3:f9:88:e4:a9: e2:93:ee:2e:21:c9:02:18:a2:b3:d4:ef:75:5c:90: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:10:29:47:C1:8E:84:78:96:AD:1B:09:F9:A5:AE:0C:D2:3B:70:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.207.0/24 216.158.211.0/24 216.158.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:43:28:fd:ac:fb:40:16:62:9a:99:21:1c:32:63:e9:13:99: e7:74:40:2f:48:4f:df:3e:1e:a8:a7:80:ef:90:25:98:fd:89: f9:3b:60:d9:82:85:70:3e:11:dc:c1:71:f8:5e:64:b3:df:d0: ec:e1:a3:47:bc:ba:ee:0e:e7:ce:ed:e5:3b:8f:d3:13:93:57: 6e:bd:14:1d:98:98:e4:06:e6:1d:6c:36:75:41:94:29:8b:13: 1e:7a:a7:67:d0:7f:6d:f9:53:23:1b:bd:12:4d:89:bd:d7:95: 6f:d4:a4:2b:dd:6b:bc:f2:ca:65:ab:d3:03:89:8d:00:e0:d1: 8e:b6:a0:25:3e:8b:83:79:7e:e5:23:8c:01:67:7a:64:fc:67: 35:e2:84:78:78:16:00:b2:c5:47:27:67:ef:52:a9:b4:0e:12: 38:fc:d4:e4:45:af:93:5f:c2:57:2c:78:bd:00:c0:f6:d0:ec: d3:3f:30:19:85:dd:7a:a0:4a:4b:a9:63:ff:cf:d9:9e:f1:fb: 41:3d:b5:84:2d:61:a2:47:fa:b0:b6:a3:07:15:91:26:cb:55: 91:6b:18:72:3d:cb:22:67:8f:7f:46:02:c7:29:26:78:44:73: c1:d5:94:f0:86:90:c5:87:c7:c3:0b:40:2e:e6:9e:e6:a4:f1: 3e:c0:68:c3 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu0XRhVGj1i0VLhWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NGM2YjVlYjAtZDRhZi00MWFhLWI4ZDctNTc5OWY5OWNjY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7QXwRRs8VRRGGkbtFD14OKBMZAa779h9VGE 9rPKIoY7koDCscMT3d6GIB7fMNHjDgdZ4HO0LaQTJU56PN2giNjhRSAN9yMXYBLx m0gykwuVg2KiNuXEPFQBF3umw8ntTiUFW+tigAv5u4CZrWC/WuOkTwOOS9yJMRvb heyXb8NjpiPUU9ztEIvvuF1R8EdcJkZC8RmbzZdgc52aASIP+8TxlPfDAcc1Phce PpiBIyZspmKeAtBl1clNUWKKAFENY7Rx6GvGuVUKBfV8LpJKs5v70wSCQ0pMduIe pmfyHVJgBGyunICwPHVpw/mI5Knik+4uIckCGKKz1O91XJBCkwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFG0QKUfBjoR4lq0bCfmlrgzSO3AGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMDI1M2U1ZWUtODc3ZC0z OGQ0LWE5NzAtNTUxZDU5M2YyOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2J7PAwQA 2J7TAwQA2J7cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGxDKP2s+0AWYpqZIRwyY+kTmed0QC9IT98+Hqin gO+QJZj9ifk7YNmChXA+EdzBcfheZLPf0Ozho0e8uu4O587t5TuP0xOTV269FB2Y mOQG5h1sNnVBlCmLEx56p2fQf235UyMbvRJNib3XlW/UpCvda7zyymWr0wOJjQDg 0Y62oCU+i4N5fuUjjAFnemT8ZzXihHh4FgCyxUcnZ+9SqbQOEjj81ORFr5Nfwlcs eL0AwPbQ7NM/MBmF3XqgSkupY//P2Z7x+0E9tYQtYaJH+rC2owcVkSbLVZFrGHI9 yyJnj39GAscpJnhEc8HVlPCGkMWHx8MLQC7mnuak8T7AaMM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:27 2025 by rpki-client