$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa File: fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa (raw, json) Hash identifier: mNdbPyQucTnvEs0FEo5Qv9kzAlE7uOIPJD6BPA994zA= Subject key identifier: 26:71:10:68:72:0B:45:5B:87:2E:64:EC:59:00:5A:F3:25:4F:14:F1 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584BB45D2CD046E4D8EAF46E57C0 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 10430 IP address blocks: 152.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2c:d0:46:e4:d8:ea:f4:6e:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=c75c1c2c-ce89-4b3d-877f-d64972ff5fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:07:57:79:cc:e2:b6:69:df:9c:f9:19:16: 9d:c5:1b:96:30:45:b7:11:ae:36:f8:0b:ca:73:c4: 57:62:01:60:c8:c8:20:86:22:8d:cc:b1:d6:3c:d8: 25:ff:ed:b9:dc:73:58:76:f1:6a:16:7a:b4:ad:31: 8a:8a:18:f6:82:b6:fb:ff:2a:84:6d:45:1f:09:01: a7:1e:73:d7:58:2a:c2:e0:56:eb:5d:d2:59:1f:13: c9:ab:e5:df:bb:db:00:c2:d3:a6:68:c8:e1:32:7d: cf:46:90:4b:c1:c2:ad:c0:39:bd:14:55:56:2e:4a: a1:b8:c4:65:32:2a:70:ac:85:18:a8:f5:70:76:21: 74:33:ec:76:1f:8d:1f:8b:90:03:b9:be:e6:bd:40: 2f:3f:ac:7c:77:d1:92:ef:c8:87:63:a5:a2:a0:53: fa:b9:aa:e1:cf:a6:ab:6a:b8:7b:91:f5:4e:b1:8a: 9b:33:8c:42:98:c7:69:d1:4a:a6:ff:60:e3:56:09: c0:3a:c6:b4:a6:18:7a:bf:27:fc:39:14:9a:50:13: 8e:ea:d5:ed:48:84:da:51:a1:43:31:d0:4c:0f:dc: 7c:31:fa:03:c9:6b:5f:49:95:50:06:df:8d:83:26: d4:e3:df:dc:43:b2:f3:87:f5:c3:34:46:65:cb:0c: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:71:10:68:72:0B:45:5B:87:2E:64:EC:59:00:5A:F3:25:4F:14:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:43:bb:5e:fa:32:95:2b:7b:9d:00:6f:2c:b2:98:1a:ae:9e: 45:61:2e:b5:fb:f2:10:51:9e:83:4b:4d:63:28:49:3a:77:bc: 64:a0:23:79:d5:e7:b7:d9:39:6e:c3:94:a2:a5:f4:44:ff:0d: 9c:9c:41:2d:7c:e9:77:69:cc:4b:6b:a8:3a:54:a7:6d:48:bc: 38:79:02:42:14:2d:7d:04:60:96:9e:43:11:d2:a4:1d:e7:ab: 04:b9:f1:29:7b:2b:dc:90:7f:7d:c5:59:f6:58:ac:d4:fc:9d: 41:be:93:3b:d2:5d:66:d1:49:f3:d5:98:01:db:c9:2a:db:93: c8:61:c7:92:9e:35:72:bc:d9:b4:1c:e7:3e:53:c1:ee:24:e8: e9:a1:6e:80:68:12:4c:73:bf:2e:04:90:55:ea:fa:b8:21:78: f6:43:9c:c1:8d:d1:6f:a4:36:f1:e7:12:e4:ba:f5:4a:e5:11: b8:62:ab:93:7a:c1:e2:9c:a3:80:24:10:1e:0e:80:00:6f:e1: 87:5a:f0:0b:98:8c:89:54:e7:90:46:60:27:3a:58:32:b0:da: 76:2b:f5:ee:2d:da:fc:1c:bb:43:fb:c4:4f:40:a6:dd:f8:43: 42:b5:9b:1e:06:86:85:8a:04:a0:ad:24:8f:7d:65:34:00:37: 69:43:94:c9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEu0XSzQRuTY6vRuV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Yzc1YzFjMmMtY2U4OS00YjNkLTg3N2YtZDY0OTcyZmY1ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLQHV3nM4rZp35z5GRadxRuWMEW3Ea42+AvK c8RXYgFgyMgghiKNzLHWPNgl/+253HNYdvFqFnq0rTGKihj2grb7/yqEbUUfCQGn HnPXWCrC4FbrXdJZHxPJq+Xfu9sAwtOmaMjhMn3PRpBLwcKtwDm9FFVWLkqhuMRl MipwrIUYqPVwdiF0M+x2H40fi5ADub7mvUAvP6x8d9GS78iHY6WioFP6uarhz6ar arh7kfVOsYqbM4xCmMdp0Uqm/2DjVgnAOsa0phh6vyf8ORSaUBOO6tXtSITaUaFD MdBMD9x8MfoDyWtfSZVQBt+NgybU49/cQ7Lzh/XDNEZlywxLdwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCZxEGhyC0Vbhy5k7FkAWvMlTxTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZmM3MWJiYzUtNTE2ZS0z YWQ5LWIzMzAtMzc2YjdkOGJkYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmJ0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKkO7XvoylSt7nQBvLLKYGq6eRWEutfvyEFGeg0tNYyhJOne8ZKAjedXn t9k5bsOUoqX0RP8NnJxBLXzpd2nMS2uoOlSnbUi8OHkCQhQtfQRglp5DEdKkHeer BLnxKXsr3JB/fcVZ9lis1PydQb6TO9JdZtFJ89WYAdvJKtuTyGHHkp41crzZtBzn PlPB7iTo6aFugGgSTHO/LgSQVer6uCF49kOcwY3Rb6Q28ecS5Lr1SuURuGKrk3rB 4pyjgCQQHg6AAG/hh1rwC5iMiVTnkEZgJzpYMrDadiv17i3a/By7Q/vET0Cm3fhD QrWbHgaGhYoEoK0kj31lNAA3aUOUyQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:28 2025 by rpki-client