$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa File: 1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa (raw, json) Hash identifier: dM7zaetKSGJ4eJc3w3kW8OGquJhewMHklZQ/5V+pOIE= Subject key identifier: E7:FA:9C:78:E7:92:1A:31:7B:48:D7:D4:BA:6D:D4:13:54:17:DD:44 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584BA0D25C380A9DC10CC58DAE60 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 212238 IP address blocks: 172.102.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5c:38:0a:9d:c1:0c:c5:8d:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=4b96a155-9eeb-4f20-b5d3-308da1b986d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:da:c1:c9:af:88:67:f1:10:7f:b4:c4:ca: 9e:47:36:9b:df:b1:1c:ef:97:c2:3b:65:e5:76:b8: f4:ea:d3:22:5d:aa:36:64:72:81:33:88:2b:af:8c: 96:41:9f:42:fb:98:92:df:8e:6a:b2:be:bc:d5:12: bb:0c:36:bf:37:b1:d9:8a:43:a9:80:45:ff:8a:f7: 8e:89:af:a8:ed:57:14:22:12:95:95:3a:c1:2f:53: b5:fb:b8:3f:95:89:40:90:32:6a:7b:db:66:46:ca: fe:6b:7a:ff:0c:35:ae:5e:54:ce:87:46:61:7a:76: ec:c8:83:8c:53:a3:1a:9e:bf:4a:96:c3:dc:10:45: 95:ad:bb:0f:bc:78:66:d2:09:db:2a:f9:4a:07:4c: 0c:39:b3:f5:a2:9d:b4:b1:33:54:75:09:a0:46:35: 60:fc:3c:3a:f8:26:19:23:c4:1e:23:1a:1d:70:3b: 6f:31:dc:50:ce:f2:91:79:52:28:76:76:2b:94:c5: dc:ea:05:ac:e6:1d:1e:5b:d2:eb:53:d5:77:f6:95: 9f:cb:45:b3:db:cd:06:9d:26:3d:0d:88:90:50:b6: b1:5c:bf:85:1a:ca:95:65:4f:96:1b:09:82:ae:3a: ab:15:75:d3:fc:44:5d:0c:8a:48:9e:32:de:cf:79: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FA:9C:78:E7:92:1A:31:7B:48:D7:D4:BA:6D:D4:13:54:17:DD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:92:85:a3:97:07:97:6f:59:ff:29:ae:76:7d:0e:3a:9e:38: 73:0e:8f:68:c6:7a:3c:92:69:6d:d8:35:cc:9e:ab:7b:6e:9a: 55:3b:35:3d:33:1b:43:32:df:2c:f8:2b:b9:a9:a2:17:ed:05: 8f:a7:30:e3:47:03:0e:85:a4:42:b3:79:89:b9:28:ea:31:22: 5e:a1:30:19:b6:e5:63:3c:22:e5:a6:79:39:f0:8b:e2:e1:1c: c8:ec:e7:3a:f8:45:9d:99:d8:27:0a:1b:a4:e2:09:0e:e1:a7: 0b:42:b8:13:4d:c3:03:01:9f:98:88:f6:60:19:8c:97:b9:22: 84:32:e4:0e:57:80:ca:45:82:17:b9:71:e7:71:0f:2c:ed:51: c0:24:db:53:6c:a4:ec:53:60:70:e4:6f:c3:ec:11:a2:16:21: 09:2e:23:01:ab:60:75:5e:58:2c:d7:91:76:08:b8:6b:8d:07: 4c:df:de:94:ec:17:93:46:53:30:77:ad:10:21:2f:64:54:92: 12:95:06:c2:1a:88:1f:1a:d2:69:24:bd:73:3e:ba:61:67:12: f7:f8:ab:15:e0:16:34:20:72:9c:55:bf:ef:bf:0c:be:5c:73: 81:06:cc:68:6d:5f:14:b1:a4:3d:c1:61:92:ff:a9:fe:cd:c3: fa:f6:e3:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lw4Cp3BDMWNrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NGI5NmExNTUtOWVlYi00ZjIwLWI1ZDMtMzA4ZGExYjk4NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaTawcmviGfxEH+0xMqeRzab37Ec75fCO2Xl drj06tMiXao2ZHKBM4grr4yWQZ9C+5iS345qsr681RK7DDa/N7HZikOpgEX/iveO ia+o7VcUIhKVlTrBL1O1+7g/lYlAkDJqe9tmRsr+a3r/DDWuXlTOh0ZhenbsyIOM U6Manr9KlsPcEEWVrbsPvHhm0gnbKvlKB0wMObP1op20sTNUdQmgRjVg/Dw6+CYZ I8QeIxodcDtvMdxQzvKReVIodnYrlMXc6gWs5h0eW9LrU9V39pWfy0Wz280GnSY9 DYiQULaxXL+FGsqVZU+WGwmCrjqrFXXT/ERdDIpInjLez3nu7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf6nHjnkhoxe0jX1Lpt1BNUF91EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMWViNmRkOGMtZDZkNy0z OTY3LTk4M2MtYTJhMWU4NWJkNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiShaOXB5dvWf8prnZ9DjqeOHMOj2jGejySaW3YNcyeq3tumlU7NT0z G0My3yz4K7mpohftBY+nMONHAw6FpEKzeYm5KOoxIl6hMBm25WM8IuWmeTnwi+Lh HMjs5zr4RZ2Z2CcKG6TiCQ7hpwtCuBNNwwMBn5iI9mAZjJe5IoQy5A5XgMpFghe5 cedxDyztUcAk21NspOxTYHDkb8PsEaIWIQkuIwGrYHVeWCzXkXYIuGuNB0zf3pTs F5NGUzB3rRAhL2RUkhKVBsIaiB8a0mkkvXM+umFnEvf4qxXgFjQgcpxVv++/DL5c c4EGzGhtXxSxpD3BYZL/qf7Nw/r24/E= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:57 2025 by rpki-client