$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/4a040a24-5bae-3ee8-8138-da7d47f5f640.roa File: 4a040a24-5bae-3ee8-8138-da7d47f5f640.roa (raw, json) Hash identifier: r8DfzQUW7M58ilZr+OCy7YIkPMSKt9Y7Az/rLQC6fF8= Subject key identifier: EE:94:0B:01:38:F9:DC:62:15:65:74:A3:F7:10:61:CA:D8:18:C8:B7 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584BBE4024DE527AD318C3732B18 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/4a040a24-5bae-3ee8-8138-da7d47f5f640.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 18186 IP address blocks: 172.81.96.0/24 maxlen: 24 172.81.97.0/24 maxlen: 24 172.81.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:24:de:52:7a:d3:18:c3:73:2b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=e6864d4a-c702-4c2a-a502-3adcc81d1df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:a0:1a:1c:9f:1d:6d:5b:fe:28:e5:1a:42: 06:84:36:2b:e3:9f:5b:03:6e:04:7d:cb:06:05:86: 04:73:c7:05:db:99:9e:76:d5:8b:f8:1a:94:bb:ca: f2:f7:c9:51:a1:02:bc:e8:16:5c:36:af:19:d0:66: f1:15:d1:1c:5c:3c:1d:da:1c:5a:49:33:99:68:c5: 0e:8c:2e:93:2f:8d:57:9d:12:ba:1f:f9:2e:08:0a: 6b:31:82:1d:53:0e:14:4d:30:68:36:e4:28:1a:3c: d0:2f:d7:aa:c0:c7:cf:57:50:0b:c3:8e:55:b1:b7: 7e:ea:47:62:f2:30:fa:40:60:b3:c3:ea:11:90:bf: 4d:82:9e:60:f1:c2:b8:c9:19:53:44:9e:51:01:7a: a3:a5:5d:89:2c:09:d3:5d:2a:f4:0c:e0:3d:cb:d2: f8:46:ca:8e:58:0d:a4:38:ed:10:e1:f7:e3:3b:7d: e9:06:d1:40:f3:35:52:0d:05:7f:e1:ed:f9:1c:42: f1:4d:12:a3:7b:08:f0:b3:35:f0:84:30:3a:fa:3f: 2d:b1:2d:42:2f:6e:11:1a:f0:31:75:2d:a0:40:2e: d5:d8:92:e7:e1:f9:1e:73:65:0f:30:65:19:bc:de: 02:06:b4:0e:e6:92:70:0d:5c:8b:e2:15:49:1a:1e: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:94:0B:01:38:F9:DC:62:15:65:74:A3:F7:10:61:CA:D8:18:C8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/4a040a24-5bae-3ee8-8138-da7d47f5f640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 172.81.96.0-172.81.98.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d8:78:7f:1c:1c:67:ac:cb:c8:33:22:4b:01:4b:9e:bb:e8: 0e:1a:bd:6e:a9:6c:2b:b0:2f:b0:67:bd:fa:59:00:3e:1c:9f: 6c:56:1e:1e:2d:14:59:65:38:04:56:0e:df:e4:19:d8:9d:28: 41:e9:40:79:37:55:e3:5e:4c:29:9d:9d:32:ac:0f:a0:4c:17: ee:49:13:c6:4d:6c:b0:68:cd:d0:c8:62:a7:8e:f9:ac:52:6a: 41:27:c1:e1:16:d6:91:66:c7:de:a3:b6:00:e1:bf:b7:7a:e1: 91:12:47:34:92:af:ec:ef:30:1d:44:e0:f7:89:68:6d:a3:68: 7b:67:58:d7:40:6c:dd:d7:18:48:94:62:03:b4:89:65:51:45: 4b:4a:ba:2e:03:b6:1d:30:94:96:8a:d1:f9:8f:98:e1:c7:1c: 3e:4d:8a:a8:f8:8a:48:e6:10:42:72:76:c7:9c:37:4b:9d:e4: 3e:3a:cf:4a:47:e8:77:2f:57:8e:15:b4:8e:09:85:81:80:1a: b3:7b:7a:83:c9:b1:ce:4c:69:4c:ed:53:fa:17:38:95:3e:0a: eb:e5:04:0e:ab:65:72:05:87:2f:34:1b:9b:e0:8d:32:65:25: 76:62:32:6a:20:7f:d4:1c:61:61:2d:aa:07:29:9b:ce:2f:34: 87:ca:52:7c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEu+QCTeUnrTGMNzKxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZTY4NjRkNGEtYzcwMi00YzJhLWE1MDItM2FkY2M4MWQxZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTOgGhyfHW1b/ijlGkIGhDYr459bA24EfcsG BYYEc8cF25medtWL+BqUu8ry98lRoQK86BZcNq8Z0GbxFdEcXDwd2hxaSTOZaMUO jC6TL41XnRK6H/kuCAprMYIdUw4UTTBoNuQoGjzQL9eqwMfPV1ALw45Vsbd+6kdi 8jD6QGCzw+oRkL9Ngp5g8cK4yRlTRJ5RAXqjpV2JLAnTXSr0DOA9y9L4RsqOWA2k OO0Q4ffjO33pBtFA8zVSDQV/4e35HELxTRKjewjwszXwhDA6+j8tsS1CL24RGvAx dS2gQC7V2JLn4fkec2UPMGUZvN4CBrQO5pJwDVyL4hVJGh4INQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFO6UCwE4+dxiFWV0o/cQYcrYGMi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNGEwNDBhMjQtNWJhZS0z ZWU4LTgxMzgtZGE3ZDQ3ZjVmNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWsUWAD BACsUWIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGNh4fxwcZ6zLyDMiSwFLnrvoDhq9bqlsK7AvsGe9+lkA PhyfbFYeHi0UWWU4BFYO3+QZ2J0oQelAeTdV415MKZ2dMqwPoEwX7kkTxk1ssGjN 0Mhip475rFJqQSfB4RbWkWbH3qO2AOG/t3rhkRJHNJKv7O8wHUTg94lobaNoe2dY 10Bs3dcYSJRiA7SJZVFFS0q6LgO2HTCUlorR+Y+Y4cccPk2KqPiKSOYQQnJ2x5w3 S53kPjrPSkfody9XjhW0jgmFgYAas3t6g8mxzkxpTO1T+hc4lT4K6+UEDqtlcgWH LzQbm+CNMmUldmIyaiB/1BxhYS2qBymbzi80h8pSfA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:23:58 2025 by rpki-client