$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa File: 0568fe72-18f4-3078-87af-4c1fec2146c9.roa (raw, json) Hash identifier: XKaHfTL161+xhvjOfPbwhTgiFg5sxR5NZT+tIWxAWyQ= Subject key identifier: CC:3C:FE:6D:35:3E:44:E8:86:62:68:F9:7F:70:7A:B0:D7:87:D9:B6 Certificate issuer: /CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7 Certificate serial: 010D0C9F4328584B715CAA6F8D9535028FF43E80 Authority key identifier: FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 8075 IP address blocks: 216.126.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:aa:6f:8d:95:35:02:8f:f4:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=38aca584-9ba5-435e-99d0-961136a12195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:97:6d:9d:5e:68:e9:3e:36:ff:96:d5:7c: 50:0d:da:ac:3a:fe:c9:8f:08:d4:ef:35:da:a9:95: dc:d6:3b:cf:27:a8:ba:61:47:2b:4b:91:90:d3:08: 7a:4a:a4:18:12:9d:2c:93:e1:2e:4a:f5:e0:35:bb: 85:56:b3:e5:c1:ba:5f:8a:ed:2a:15:e4:78:2a:d1: e4:bb:26:5b:cb:83:a1:62:4f:74:df:27:b5:b3:b1: bd:9d:a5:1d:06:6d:74:78:74:fd:6f:46:1f:f5:1d: d1:ad:da:6f:f2:9b:54:d6:f2:f1:c6:55:2f:09:bb: ad:72:8e:c4:f5:da:6c:ba:69:1a:39:14:76:55:d6: 0d:fe:61:25:65:b5:06:11:70:97:e4:f1:c6:12:a1: ff:ae:de:fb:0b:d8:3a:b9:73:46:f8:f2:7a:b1:f1: 8f:87:8a:3d:51:0e:39:2d:7c:b8:b4:ec:c8:dc:63: 06:48:9c:76:a9:71:b0:20:98:66:b2:c4:56:28:da: 2c:90:63:ef:72:98:f3:36:f6:fa:ad:d7:ab:58:33: 06:32:d5:16:17:6c:72:83:37:3e:a4:b7:fb:64:e5: 77:19:bb:e1:f4:97:d9:0a:cc:15:f7:73:61:79:ea: b6:66:de:ba:bb:1f:88:aa:58:53:a7:00:6b:32:42: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3C:FE:6D:35:3E:44:E8:86:62:68:F9:7F:70:7A:B0:D7:87:D9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl X509v3 Authority Key Identifier: keyid:FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer sbgp-ipAddrBlock: critical IPv4: 216.126.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:72:dc:cf:ef:f0:06:02:a2:bd:a7:5e:e3:ad:08:8c:7c:97: d2:6b:7c:de:75:ec:a0:50:7b:ed:38:08:ea:59:64:05:e6:9a: c1:69:1d:c3:07:fa:10:eb:96:e4:5c:ab:89:c5:a9:a0:4c:04: 1f:b0:13:8a:d0:ca:8c:f2:e4:c6:cd:0e:aa:08:a2:1f:8f:b6: e2:0c:6d:81:af:10:71:ca:6d:a5:89:1f:dd:c7:a4:0b:37:01: 6f:39:24:66:b9:ae:0a:f2:c0:50:96:76:d3:39:79:30:2e:30: 5d:08:d1:16:f9:16:5b:a2:d0:73:97:4d:15:96:0a:ef:21:d6: 19:3f:d5:ab:22:c6:82:4a:a2:35:e3:16:0a:97:61:b4:b2:21: 32:55:c8:ff:2e:94:17:54:60:cf:01:a8:b6:e3:51:64:81:7b: a9:f5:bf:a6:7d:1a:13:5f:c7:00:64:17:be:27:94:a0:c6:c9: a0:18:82:fd:10:8a:dc:93:ed:b7:88:ac:5f:48:53:1a:96:47: 24:04:64:18:0d:44:81:2a:d6:52:c9:f0:5c:40:8f:35:2e:99: bf:f3:3c:a2:52:88:83:0c:e9:a3:91:20:67:05:84:52:3a:a9: 14:6b:41:03:81:4b:1a:ab:ed:e1:6b:c0:d8:43:46:96:40:16: 5d:cb:22:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKpvjZU1Ao/0PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2YzcwMDUtZjBmZS00NDExLTg1MzEtMGE5YzViOWIx YWE3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzhhY2E1ODQtOWJhNS00MzVlLTk5ZDAtOTYxMTM2YTEyMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynWXbZ1eaOk+Nv+W1XxQDdqsOv7JjwjU7zXa qZXc1jvPJ6i6YUcrS5GQ0wh6SqQYEp0sk+EuSvXgNbuFVrPlwbpfiu0qFeR4KtHk uyZby4OhYk903ye1s7G9naUdBm10eHT9b0Yf9R3Rrdpv8ptU1vLxxlUvCbutco7E 9dpsumkaORR2VdYN/mElZbUGEXCX5PHGEqH/rt77C9g6uXNG+PJ6sfGPh4o9UQ45 LXy4tOzI3GMGSJx2qXGwIJhmssRWKNoskGPvcpjzNvb6rderWDMGMtUWF2xygzc+ pLf7ZOV3Gbvh9JfZCswV93Nheeq2Zt66ux+IqlhTpwBrMkK62QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw8/m01PkTohmJo+X9werDXh9m2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZj NzAwNS1mMGZlLTQ0MTEtODUzMS0wYTljNWI5YjFhYTcvMDU2OGZlNzItMThmNC0z MDc4LTg3YWYtNGMxZmVjMjE0NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ2YzcwMDUtZjBmZS00NDExLTg1 MzEtMGE5YzViOWIxYWE3L2FkNmM3MDA1LWYwZmUtNDQxMS04NTMxLTBhOWM1Yjli MWFhNy5jcmwwHwYDVR0jBBgwFoAU/mBVJ5MC/6xAQIrhnF4YXFLwh5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZjNzAwNS1mMGZlLTQ0MTEtODUzMS0wYTlj NWI5YjFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdy3M/v8AYCor2nXuOtCIx8l9JrfN517KBQe+04COpZZAXmmsFpHcMH +hDrluRcq4nFqaBMBB+wE4rQyozy5MbNDqoIoh+PtuIMbYGvEHHKbaWJH93HpAs3 AW85JGa5rgrywFCWdtM5eTAuMF0I0Rb5Flui0HOXTRWWCu8h1hk/1asixoJKojXj FgqXYbSyITJVyP8ulBdUYM8BqLbjUWSBe6n1v6Z9GhNfxwBkF74nlKDGyaAYgv0Q ityT7beIrF9IUxqWRyQEZBgNRIEq1lLJ8FxAjzUumb/zPKJSiIMM6aORIGcFhFI6 qRRrQQOBSxqr7eFrwNhDRpZAFl3LIrQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:16 2025 by rpki-client