$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa File: 1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa (raw, json) Hash identifier: 5jvzGfebSTLrU09zOnAyeZow5CS/yY2Br6TqGGMD3MI= Subject key identifier: CB:26:BA:A7:42:C7:40:01:68:EE:81:F1:42:6B:8A:58:CE:29:93:3A Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584BA9326FC93B09496591F28A00 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 7265 IP address blocks: 216.47.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6f:c9:3b:09:49:65:91:f2:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=8b86bc09-b754-45fd-a280-fa2f9fcca869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:80:9b:41:4b:df:3b:42:da:32:e0:b0:01:e7: aa:c6:c6:f0:38:d7:b4:b6:ea:3c:57:a6:09:5c:6d: ad:d5:c3:b6:a4:b4:9f:20:d3:fc:d7:7a:96:63:6f: 73:dd:b4:75:2a:8f:34:da:91:bc:da:9b:b3:46:48: 91:ea:8b:90:3d:16:fd:71:b9:ba:91:96:ec:b5:fb: d6:26:2a:15:74:c6:8c:1c:05:8d:47:58:3e:c4:8c: 36:39:23:b4:06:19:a7:99:23:30:06:2c:aa:65:d1: 08:9e:d1:b8:22:6c:40:ac:16:b5:ca:c8:a0:c9:7f: 03:08:61:a9:41:88:a6:cd:44:b1:78:31:94:10:22: 7c:f0:33:7c:79:23:e3:34:1c:dc:c4:a3:8a:01:f8: e4:b5:b7:9c:6d:8a:fe:02:de:1b:25:3e:87:06:22: db:f2:ae:f5:20:3d:45:1c:96:75:f0:26:8c:bd:09: b2:e3:43:29:54:05:d5:7f:8d:9e:5a:bc:44:33:86: 22:9f:1d:e7:97:4c:cf:61:37:b8:7b:92:3c:c0:f8: f1:2f:81:c2:08:41:68:6c:97:f7:cc:a7:bc:49:7b: a0:35:e2:0c:b4:51:29:04:02:d3:a2:42:47:df:75: 43:ac:ec:42:a9:b1:e0:aa:78:ed:0d:f0:f5:b7:92: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:26:BA:A7:42:C7:40:01:68:EE:81:F1:42:6B:8A:58:CE:29:93:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1acf36fc-5570-3f6e-bcb8-b29812b0bb90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.47.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:53:8a:14:02:45:4b:19:5b:09:be:70:18:45:d7:95:9e:d0: a6:4b:e8:2a:b7:98:ea:9f:b1:40:1b:c7:58:4f:2d:1a:8b:bd: f8:14:42:59:b4:aa:39:77:e0:55:dd:ec:8b:07:2c:84:7a:41: 51:52:0e:18:e2:de:00:79:79:0b:b3:31:e3:66:f0:36:dc:20: 0b:dc:74:65:e9:a6:2c:8b:1f:c1:2d:23:a9:5a:c5:1d:90:ac: 64:96:89:55:a3:7a:e5:42:19:a1:30:8c:31:b2:75:49:8e:96: de:1e:32:93:35:9b:a7:5d:0d:73:5a:86:e0:0a:53:e5:45:67: f3:ec:78:79:ba:e0:fc:88:e6:a2:b2:6a:bd:bc:75:b1:a1:2c: 6a:55:bc:70:b9:52:4c:83:50:27:90:55:8d:6f:13:14:c6:a0: 29:34:a2:67:df:b9:da:1c:fc:0e:9e:3b:a1:2c:da:6a:8a:98: 9e:fd:01:b9:15:82:23:80:e6:06:56:6f:f3:0a:bc:4d:5b:cc: ca:b9:38:97:22:1a:8d:bf:00:34:13:ed:84:45:17:aa:0e:7d: 3e:6a:9d:68:d5:a7:1d:1b:1f:95:ac:2c:54:16:c5:22:08:18: b4:c4:23:27:82:a6:0b:11:d5:ca:08:cf:58:8b:ff:91:ca:91: 70:af:a3:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMm/JOwlJZZHyigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OGI4NmJjMDktYjc1NC00NWZkLWEyODAtZmEyZjlmY2NhODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiICbQUvfO0LaMuCwAeeqxsbwONe0tuo8V6YJ XG2t1cO2pLSfINP813qWY29z3bR1Ko802pG82puzRkiR6ouQPRb9cbm6kZbstfvW JioVdMaMHAWNR1g+xIw2OSO0BhmnmSMwBiyqZdEIntG4ImxArBa1ysigyX8DCGGp QYimzUSxeDGUECJ88DN8eSPjNBzcxKOKAfjktbecbYr+At4bJT6HBiLb8q71ID1F HJZ18CaMvQmy40MpVAXVf42eWrxEM4Yinx3nl0zPYTe4e5I8wPjxL4HCCEFobJf3 zKe8SXugNeIMtFEpBALTokJH33VDrOxCqbHgqnjtDfD1t5IOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsmuqdCx0ABaO6B8UJriljOKZM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMWFjZjM2ZmMtNTU3MC0z ZjZlLWJjYjgtYjI5ODEyYjBiYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2C/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9TihQCRUsZWwm+cBhF15We0KZL6Cq3mOqfsUAbx1hPLRqLvfgUQlm0 qjl34FXd7IsHLIR6QVFSDhji3gB5eQuzMeNm8DbcIAvcdGXppiyLH8EtI6laxR2Q rGSWiVWjeuVCGaEwjDGydUmOlt4eMpM1m6ddDXNahuAKU+VFZ/PseHm64PyI5qKy ar28dbGhLGpVvHC5UkyDUCeQVY1vExTGoCk0omffudoc/A6eO6Es2mqKmJ79AbkV giOA5gZWb/MKvE1bzMq5OJciGo2/ADQT7YRFF6oOfT5qnWjVpx0bH5WsLFQWxSII GLTEIyeCpgsR1coIz1iL/5HKkXCvo/4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:38 2025 by rpki-client