$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa File: ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa (raw, json) Hash identifier: e/gpBNsKw9gTdJCoG1mukL+s1U1nO5pFEnhChMJu+Io= Subject key identifier: A4:91:B3:D6:8F:11:D3:A2:FD:78:75:6C:0D:DB:30:DB:BB:BE:EE:B5 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584BA0D2668C7012043DE7528E00 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 209854 IP address blocks: 216.158.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:66:8c:70:12:04:3d:e7:52:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=dcb42f4e-b423-4fa7-8ad8-ceb508486337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:82:f0:e4:c3:d1:90:c5:a8:fb:06:a1:41: ee:eb:08:2c:03:18:f8:bb:cb:99:61:32:83:c6:a3: 73:3b:83:17:90:57:fe:16:93:2d:32:9c:5a:81:97: d3:47:83:6b:6d:a9:e5:26:3e:6f:83:fc:4a:3f:ab: 48:a2:ad:ea:b7:64:02:9f:26:ee:72:05:8f:7d:66: 61:10:d6:83:70:f1:bc:3d:77:f8:7b:83:81:72:6d: 1c:c7:b7:98:02:66:ce:f8:17:16:60:42:71:37:98: fb:0c:31:52:04:5e:b9:19:e1:91:5c:0f:69:dd:78: 16:24:50:20:cd:ce:b9:cd:69:14:53:2c:b7:4f:ab: cb:f5:db:62:20:2e:b5:60:ce:10:f9:b7:5f:5e:8d: f0:73:75:0d:b3:52:9b:cf:90:aa:ac:d7:01:97:c0: d0:e2:5b:99:2d:08:3b:d9:7b:b5:2e:53:e6:b1:a8: 2f:f5:cf:03:a1:50:a2:19:d4:97:31:48:00:34:6c: 42:3a:ff:ec:d1:a4:95:1b:f2:25:30:42:55:e6:58: 59:0a:d6:9c:c3:d6:b7:b2:0b:d7:cd:ea:39:14:f7: bd:d0:4a:cd:42:9c:50:d2:46:fc:51:d9:42:7b:dd: 55:17:2b:05:13:0f:38:7d:46:72:9f:d7:bf:d2:4f: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:91:B3:D6:8F:11:D3:A2:FD:78:75:6C:0D:DB:30:DB:BB:BE:EE:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c6:c0:3b:4e:46:24:9d:23:b1:4e:a2:3e:29:f2:d5:87:ee: 34:6a:1d:58:95:bf:db:38:0b:ca:d9:58:0d:a8:a6:13:f6:4e: 02:2b:6d:7c:2f:3c:55:1f:12:c2:27:cc:b5:4b:81:67:86:50: 61:a0:3b:50:bf:6b:e7:24:59:4e:5c:74:63:22:09:57:d7:e8: c7:0a:41:5a:6e:31:90:57:02:c2:c4:5d:82:88:13:87:92:4c: 95:d4:a1:09:e2:61:b3:b1:e7:21:cb:d1:83:6b:8c:9f:32:12: 80:c4:be:ac:7b:b0:b8:38:90:4b:45:e6:cf:e3:05:61:ba:b7: 41:90:1f:15:ba:ba:f2:a5:5a:bf:4f:91:e5:31:6d:40:b5:f6: 74:e7:61:5f:39:48:de:f5:28:73:d4:f2:a2:fa:57:67:12:ff: c9:55:4d:3e:cf:4a:bd:b8:93:3f:21:d9:45:01:b0:4c:6c:b8: 4f:a0:09:39:d5:b2:88:59:09:d0:4a:c6:3f:c0:b2:ba:9e:9a: 6d:3f:7d:b9:20:c1:25:4b:1c:75:26:50:9f:e2:49:57:50:7c: c8:ed:39:77:3b:38:7c:cc:88:e4:73:22:3a:74:6b:16:0e:4b: aa:b9:b4:18:5d:2a:f7:23:6a:9e:65:6e:03:3e:53:5e:55:75: 96:4b:1e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0maMcBIEPedSjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZGNiNDJmNGUtYjQyMy00ZmE3LThhZDgtY2ViNTA4NDg2MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyaC8OTD0ZDFqPsGoUHu6wgsAxj4u8uZYTKD xqNzO4MXkFf+FpMtMpxagZfTR4NrbanlJj5vg/xKP6tIoq3qt2QCnybucgWPfWZh ENaDcPG8PXf4e4OBcm0cx7eYAmbO+BcWYEJxN5j7DDFSBF65GeGRXA9p3XgWJFAg zc65zWkUUyy3T6vL9dtiIC61YM4Q+bdfXo3wc3UNs1Kbz5CqrNcBl8DQ4luZLQg7 2Xu1LlPmsagv9c8DoVCiGdSXMUgANGxCOv/s0aSVG/IlMEJV5lhZCtacw9a3sgvX zeo5FPe90ErNQpxQ0kb8UdlCe91VFysFEw84fUZyn9e/0k/JCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSRs9aPEdOi/Xh1bA3bMNu7vu61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZWJlYjBjMmYtZDRlMi0z NmEwLWI5MjMtMTY2NmFiMzNjNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvGwDtORiSdI7FOoj4p8tWH7jRqHViVv9s4C8rZWA2ophP2TgIrbXwv PFUfEsInzLVLgWeGUGGgO1C/a+ckWU5cdGMiCVfX6McKQVpuMZBXAsLEXYKIE4eS TJXUoQniYbOx5yHL0YNrjJ8yEoDEvqx7sLg4kEtF5s/jBWG6t0GQHxW6uvKlWr9P keUxbUC19nTnYV85SN71KHPU8qL6V2cS/8lVTT7PSr24kz8h2UUBsExsuE+gCTnV sohZCdBKxj/Asrqemm0/fbkgwSVLHHUmUJ/iSVdQfMjtOXc7OHzMiORzIjp0axYO S6q5tBhdKvcjap5lbgM+U15VdZZLHuY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:01 2025 by rpki-client