$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa File: 328a9f9e-f8c1-360f-88b5-5283333c29d7.roa (raw, json) Hash identifier: 67fv4cCPWWxgqmSz+GCKcbSURiRuLbQLLtspF6pJyr4= Subject key identifier: 0D:5D:E6:53:FE:70:B4:7B:8A:F8:07:2E:E5:63:08:3B:B3:93:A8:5A Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F4328584B6D2C986BCC74FE8B4894C1A0 Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 46694 IP address blocks: 216.229.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:98:6b:cc:74:fe:8b:48:94:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=bf900916-e726-4dbc-b473-bf0bb982d557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:90:5f:fc:d9:59:a0:9c:e6:b3:c3:38:82:e6: 32:55:5e:03:9d:71:e1:52:34:a2:87:90:05:20:c3: 8c:92:f0:8b:65:0e:e5:15:f9:25:a9:de:5a:6f:4e: a6:06:98:57:7d:8e:86:92:1a:80:e0:09:5e:2a:90: 8d:19:96:e0:83:99:a1:a3:26:98:1c:bd:10:1c:e1: 99:3b:88:9a:0f:da:fd:4d:87:e3:a5:89:8c:7e:5a: 06:a0:d6:c6:fa:7f:f7:a0:48:1d:6a:ec:02:e8:71: b9:e8:b2:10:5e:d9:f6:fc:c5:18:86:8e:7a:47:be: f1:d8:b8:a8:07:e5:49:22:53:dd:cc:8b:5d:10:01: 37:ba:59:be:65:e2:e4:c7:43:cc:95:72:7b:6a:87: 22:51:cd:52:48:b9:9e:79:4b:0d:9e:fe:e1:64:62: 27:80:ae:e1:91:72:28:47:25:f6:42:4a:9f:f2:11: 9a:40:3b:55:d1:9f:e1:f2:b0:ac:a8:ff:e6:af:06: f2:be:99:6d:4b:23:38:4b:d7:66:f1:54:f4:02:92: 64:b4:d4:64:d1:f8:6a:de:5a:09:fe:11:1d:a1:f7: f9:c7:01:d2:2c:8c:09:51:1a:d1:50:72:95:76:8b: 62:40:cc:34:a5:50:a3:30:4f:8d:bb:99:a8:b1:8d: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5D:E6:53:FE:70:B4:7B:8A:F8:07:2E:E5:63:08:3B:B3:93:A8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv4: 216.229.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0f:ff:ef:70:ca:a2:59:49:ef:ef:d6:a0:8f:29:b0:80:84: 2f:cd:16:8b:9f:aa:75:f7:be:eb:dd:49:00:ca:fb:db:b5:ef: 5c:fb:36:2e:bc:62:e4:43:02:22:dd:ef:c8:12:97:0c:89:8b: bb:52:5c:e0:c1:e7:76:40:f6:f2:de:5b:d7:86:8b:5c:a3:a7: b7:98:86:2f:35:2c:2e:c0:0f:f9:be:29:2b:24:f4:95:a4:85: 47:ee:bc:6e:41:ff:b7:51:95:5f:d4:6b:24:ce:cc:b5:dd:a3: d0:60:38:02:73:56:0e:f4:d6:0b:6c:80:81:88:84:f2:58:df: 89:4f:15:66:9b:e0:4f:4e:42:c2:8a:fd:1e:46:00:41:3b:3e: 66:a4:7c:f9:60:c4:89:03:17:fe:60:d3:51:aa:4a:db:2b:29: d6:ce:d2:ec:b9:21:20:18:c9:e7:b7:82:e2:28:17:c9:e8:9e: 97:00:4a:7b:e0:7e:a7:1b:45:c5:2b:e2:d5:49:d7:0d:f8:d2: 2e:82:bb:97:fc:fd:d9:31:e5:ca:3e:45:65:1e:90:b3:cf:76: 36:5a:8e:37:2a:ae:0e:88:11:e6:96:ab:10:0a:72:97:32:57: 79:43:6f:6e:36:c7:cb:64:4f:f2:6e:10:d3:d4:8a:3b:d5:95: 98:59:42:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJhrzHT+i0iUwaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YmY5MDA5MTYtZTcyNi00ZGJjLWI0NzMtYmYwYmI5ODJkNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5Bf/NlZoJzms8M4guYyVV4DnXHhUjSih5AF IMOMkvCLZQ7lFfklqd5ab06mBphXfY6GkhqA4AleKpCNGZbgg5mhoyaYHL0QHOGZ O4iaD9r9TYfjpYmMfloGoNbG+n/3oEgdauwC6HG56LIQXtn2/MUYho56R77x2Lio B+VJIlPdzItdEAE3ulm+ZeLkx0PMlXJ7aociUc1SSLmeeUsNnv7hZGIngK7hkXIo RyX2Qkqf8hGaQDtV0Z/h8rCsqP/mrwbyvpltSyM4S9dm8VT0ApJktNRk0fhq3loJ /hEdoff5xwHSLIwJURrRUHKVdotiQMw0pVCjME+Nu5mosY2d4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1d5lP+cLR7ivgHLuVjCDuzk6haMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvMzI4YTlmOWUtZjhjMS0z NjBmLTg4YjUtNTI4MzMzM2MyOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8P/+9wyqJZSe/v1qCPKbCAhC/NFoufqnX3vuvdSQDK+9u171z7Ni68 YuRDAiLd78gSlwyJi7tSXODB53ZA9vLeW9eGi1yjp7eYhi81LC7AD/m+KSsk9JWk hUfuvG5B/7dRlV/UayTOzLXdo9BgOAJzVg701gtsgIGIhPJY34lPFWab4E9OQsKK /R5GAEE7PmakfPlgxIkDF/5g01GqStsrKdbO0uy5ISAYyee3guIoF8nonpcASnvg fqcbRcUr4tVJ1w340i6Cu5f8/dkx5co+RWUekLPPdjZajjcqrg6IEeaWqxAKcpcy V3lDb242x8tkT/JuENPUijvVlZhZQsU= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:31 2025 by rpki-client