$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa File: 04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa (raw, json) Hash identifier: gkrB3Yc61HdOTl1TpCs9UMR6zdKF9ZzscqtQy9U35RU= Subject key identifier: E1:7C:F6:E7:F5:97:CF:24:68:0F:00:BE:A0:D2:3A:91:74:DE:A9:E6 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584BA932722CB841C39858820700 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11693 IP address blocks: 216.130.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:72:2c:b8:41:c3:98:58:82:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=1bde3945-3056-4c95-afef-a17ebcc2398a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:31:cb:83:0c:5b:03:7f:65:93:cb:d2:0d: 1f:be:5d:4e:26:4e:74:27:a1:73:83:a4:a7:7d:d4: 89:f2:f8:24:d0:a4:64:78:92:57:02:08:7f:19:14: 48:28:d8:4d:2e:ef:da:e2:4a:20:a5:8c:b6:81:39: 24:af:86:70:ce:04:f9:8e:84:20:0d:27:d3:44:ea: 2e:8f:81:89:91:9d:cd:85:25:10:e3:fa:a3:f9:e8: 00:3a:11:10:7a:3d:bc:e5:b1:16:f5:bb:87:0e:01: 75:5a:1d:01:97:75:38:ba:45:de:ce:16:bc:6a:94: 71:f2:7c:7c:97:cd:29:79:b2:5e:a6:a6:85:59:69: 3c:1a:d7:6f:a9:4b:35:b8:c3:bd:cb:6d:c8:1e:2f: 7a:55:b3:26:e3:e2:cf:64:64:cf:7c:d4:a7:a0:79: c5:35:b4:38:0a:3f:c8:1b:34:af:b9:b5:28:06:85: d9:32:29:1c:09:28:12:30:c6:f6:91:3f:a3:7c:ef: 41:74:4b:41:85:d2:99:cc:d8:6c:46:c8:52:ef:de: 41:cb:1b:03:e2:64:92:14:fc:d3:91:ce:a7:6f:c8: e3:d5:36:9b:35:36:d3:b7:9e:13:d0:9d:4c:05:dc: f4:8e:72:3c:01:99:e9:f1:8a:99:7f:0b:e1:d8:1f: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7C:F6:E7:F5:97:CF:24:68:0F:00:BE:A0:D2:3A:91:74:DE:A9:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.130.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7e:1d:e7:9e:f7:ae:6f:0d:80:d6:98:72:48:02:15:dd:c3: f5:0c:0e:b8:6f:c0:61:ca:40:75:d3:cd:11:cf:08:09:6d:b8: ef:3f:28:3d:2a:ce:fc:bf:f1:21:35:8e:61:d9:d4:4f:56:d4: 59:d1:ad:ef:51:70:9e:7b:01:61:62:8b:2c:dc:28:d3:d7:d9: 10:5e:0c:0e:52:6b:d8:49:ab:d6:1e:53:7c:69:ac:30:fd:be: dc:2b:26:8b:9a:4f:0d:4d:c4:e4:47:81:df:64:b7:e2:3d:b6: 4b:5f:3c:9b:02:02:5c:88:31:f1:3a:37:71:fa:5c:6e:e8:0f: 91:6c:c1:f1:a5:93:61:f7:9c:36:74:27:df:ab:43:0a:c0:57: c1:f1:a1:9d:ba:be:2b:7d:45:c1:68:09:71:0c:c7:ba:10:27: b5:83:48:16:1c:d5:4b:c5:a2:23:78:e9:8b:17:82:d7:85:03: d5:26:39:d7:9f:1f:c3:24:6d:b4:d7:91:37:2b:c7:8d:82:1d: ed:fd:2f:2a:e6:e5:56:8c:4f:91:2c:e4:4d:79:b8:ca:9a:80: 19:6a:76:0a:25:1e:e5:30:26:5e:73:9b:ec:de:5f:3a:52:4d: a7:24:f3:1b:4e:47:cb:3d:c7:bb:35:b3:3f:af:32:4d:72:e7: 31:dd:61:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnIsuEHDmFiCBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MWJkZTM5NDUtMzA1Ni00Yzk1LWFmZWYtYTE3ZWJjYzIzOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsYxy4MMWwN/ZZPL0g0fvl1OJk50J6Fzg6Sn fdSJ8vgk0KRkeJJXAgh/GRRIKNhNLu/a4kogpYy2gTkkr4ZwzgT5joQgDSfTROou j4GJkZ3NhSUQ4/qj+egAOhEQej285bEW9buHDgF1Wh0Bl3U4ukXezha8apRx8nx8 l80pebJepqaFWWk8GtdvqUs1uMO9y23IHi96VbMm4+LPZGTPfNSnoHnFNbQ4Cj/I GzSvubUoBoXZMikcCSgSMMb2kT+jfO9BdEtBhdKZzNhsRshS795ByxsD4mSSFPzT kc6nb8jj1TabNTbTt54T0J1MBdz0jnI8AZnp8YqZfwvh2B+9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF89uf1l88kaA8AvqDSOpF03qnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMDRhZDVhNDUtMGRjOS0z YjEwLWEyMjktNmI5ZWVmYzIxM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IKSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt+Heee965vDYDWmHJIAhXdw/UMDrhvwGHKQHXTzRHPCAltuO8/KD0q zvy/8SE1jmHZ1E9W1FnRre9RcJ57AWFiiyzcKNPX2RBeDA5Sa9hJq9YeU3xprDD9 vtwrJouaTw1NxORHgd9kt+I9tktfPJsCAlyIMfE6N3H6XG7oD5FswfGlk2H3nDZ0 J9+rQwrAV8HxoZ26vit9RcFoCXEMx7oQJ7WDSBYc1UvFoiN46YsXgteFA9UmOdef H8MkbbTXkTcrx42CHe39Lyrm5VaMT5Es5E15uMqagBlqdgolHuUwJl5zm+zeXzpS Tack8xtOR8s9x7s1sz+vMk1y5zHdYWk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:38 2025 by rpki-client