$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9693b066-cbf9-3afd-b38d-443224b1bad1.roa File: 9693b066-cbf9-3afd-b38d-443224b1bad1.roa (raw, json) Hash identifier: 3N+tEWrfGA6BkAmwUigPCjRO+zFK5tIjpb2oYzaQs6A= Subject key identifier: C2:EE:4B:98:31:B6:16:B8:22:AC:85:AF:F6:39:83:26:C7:D4:68:2B Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584BA932702816CB494671B2C940 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9693b066-cbf9-3afd-b38d-443224b1bad1.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 7265 IP address blocks: 216.47.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:70:28:16:cb:49:46:71:b2:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4a14fab3-1df1-4237-9ab9-9604a001957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:7b:f2:18:1d:fb:80:12:66:b8:cd:74:f7: ef:fd:59:dd:c5:11:29:9b:a9:04:ac:23:84:82:af: 64:c4:07:b6:f1:67:f2:4f:26:fc:0f:f7:59:f0:96: 75:70:1d:1a:95:03:7d:43:76:5f:ae:b3:bb:0c:c6: f0:c1:f7:fe:c7:e7:e1:aa:f0:d8:0b:f4:d8:9e:32: bc:1c:7c:43:b0:e8:36:ed:04:16:f5:77:7b:61:b7: 8c:2f:e4:13:68:35:e1:dc:08:94:19:3e:7d:76:f8: 5d:e7:14:10:95:c3:5b:af:63:cb:76:60:bb:06:9c: 53:0f:b2:4b:4f:97:ca:e9:56:c3:fb:6a:a8:c8:ba: 6b:33:8d:38:1b:a4:a7:ab:2a:11:78:a6:d3:d9:68: d9:17:30:c8:30:1f:b0:f5:e9:1d:72:f7:f1:75:5a: 28:a2:91:45:f2:59:be:88:29:ec:ea:a9:d9:a1:5a: 7e:f6:12:d7:66:4a:e1:5b:0a:7b:2e:94:a3:53:e7: 5d:b8:46:76:67:4f:04:80:dd:63:54:a8:e9:b4:28: 8d:e5:ba:d2:79:f9:10:89:fa:e8:d9:82:48:34:22: f7:74:42:ce:a5:a8:75:57:34:c0:62:ea:50:ac:1a: 98:fa:4e:72:b3:13:74:2b:be:df:fd:a2:e4:05:f6: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:4B:98:31:B6:16:B8:22:AC:85:AF:F6:39:83:26:C7:D4:68:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9693b066-cbf9-3afd-b38d-443224b1bad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.47.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:06:26:13:59:04:5a:55:88:d0:f7:ad:95:60:42:e6:be:39: db:6c:77:30:9b:87:60:86:25:bd:d4:fe:08:16:c3:b0:64:8a: 6c:62:f8:07:9f:ba:1f:49:89:66:1e:f9:da:56:35:74:d4:c4: 0f:a3:e2:fa:e5:a3:81:18:a8:36:77:ec:43:b9:51:ee:35:ac: 48:c1:94:98:a4:1b:94:60:88:c4:38:16:b6:c8:34:9a:9e:01: f0:b5:85:76:4d:4a:ba:c1:6c:f2:22:bd:6d:45:bc:48:d5:63: df:bb:29:c0:67:6d:8a:00:58:cf:ed:42:76:a2:37:9f:80:93: 12:50:89:87:fb:c0:ce:9e:81:b7:d2:45:f3:70:a7:dd:db:3a: 21:cb:27:9d:bb:d4:5c:c7:54:69:c4:99:e8:68:9a:f8:8e:d6: 26:9e:47:25:2f:49:d5:82:40:27:15:8a:24:63:02:d3:e1:24: 8f:f2:b4:b5:a1:91:94:20:26:b3:a7:be:f9:92:61:43:fa:bb: 36:cb:ab:dd:d8:0f:7a:28:1e:c2:d2:f5:a2:b6:03:59:8a:29: 75:2d:24:a6:aa:69:f7:26:d4:82:96:91:ce:87:0d:20:6f:c0: 2f:12:6f:c9:29:e7:6e:0d:bd:e2:49:dc:b0:ad:21:f8:ce:6e: 5d:64:e6:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnAoFstJRnGyyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NGExNGZhYjMtMWRmMS00MjM3LTlhYjktOTYwNGEwMDE5NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos978hgd+4ASZrjNdPfv/VndxREpm6kErCOE gq9kxAe28WfyTyb8D/dZ8JZ1cB0alQN9Q3ZfrrO7DMbwwff+x+fhqvDYC/TYnjK8 HHxDsOg27QQW9Xd7YbeML+QTaDXh3AiUGT59dvhd5xQQlcNbr2PLdmC7BpxTD7JL T5fK6VbD+2qoyLprM404G6SnqyoReKbT2WjZFzDIMB+w9ekdcvfxdVooopFF8lm+ iCns6qnZoVp+9hLXZkrhWwp7LpSjU+dduEZ2Z08EgN1jVKjptCiN5brSefkQifro 2YJINCL3dELOpah1VzTAYupQrBqY+k5ysxN0K77f/aLkBfZABwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLuS5gxtha4IqyFr/Y5gybH1GgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOTY5M2IwNjYtY2JmOS0z YWZkLWIzOGQtNDQzMjI0YjFiYWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2C/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIGJhNZBFpViND3rZVgQua+OdtsdzCbh2CGJb3U/ggWw7Bkimxi+Aef uh9JiWYe+dpWNXTUxA+j4vrlo4EYqDZ37EO5Ue41rEjBlJikG5RgiMQ4FrbINJqe AfC1hXZNSrrBbPIivW1FvEjVY9+7KcBnbYoAWM/tQnaiN5+AkxJQiYf7wM6egbfS RfNwp93bOiHLJ5271FzHVGnEmehomviO1iaeRyUvSdWCQCcViiRjAtPhJI/ytLWh kZQgJrOnvvmSYUP6uzbLq93YD3ooHsLS9aK2A1mKKXUtJKaqafcm1IKWkc6HDSBv wC8Sb8kp524NveJJ3LCtIfjObl1k5gc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:14 2025 by rpki-client