$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa File: ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa (raw, json) Hash identifier: 6+zO6FgIZeIaLUqSTyb1W/tEBw2//cVMM4kqNddZRzw= Subject key identifier: 64:0C:77:3C:A4:72:FE:96:CD:75:A1:FC:75:BB:E8:7E:95:59:A8:5D Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584BB45D3280566172AD8D6446C4 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 27183 IP address blocks: 152.157.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:32:80:56:61:72:ad:8d:64:46:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=e73d90db-96b1-47fc-bab1-a58022962833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:92:ed:47:44:32:e4:99:fd:f5:ed:93:88: b8:24:fe:8f:85:14:57:6c:9c:3f:e5:a5:e5:02:03: 4a:80:b7:80:82:5e:2a:d1:ae:32:89:38:43:0c:b2: 4a:57:a6:24:62:e2:2c:7b:8b:45:eb:47:1e:e2:a1: 5f:ac:13:52:e4:7b:80:4e:93:ee:27:e1:0a:21:2e: 27:01:3b:34:0f:37:9a:73:7c:5c:cf:99:99:33:9f: 57:56:5c:c3:48:21:dc:15:fd:f6:56:1a:da:f5:f9: 89:a0:fa:c9:ec:9b:0f:91:e5:e1:78:3b:63:3c:3a: 12:d1:ae:88:55:ec:a5:31:33:25:38:c6:4b:c0:fd: f1:16:0b:6e:a3:24:b7:33:c9:d0:da:6f:e3:13:22: f3:aa:0b:d7:2d:9c:7a:2b:60:aa:f8:fa:62:aa:62: d7:23:4e:a3:ec:1c:c3:ed:b3:f4:bc:fe:a8:5f:41: 16:1f:f7:53:1a:66:28:5f:19:5f:5d:c1:cd:9b:15: 93:d0:e9:02:04:af:54:61:95:cc:8a:56:9b:d1:e0: 74:cb:99:85:84:10:c9:0b:df:37:e0:db:86:14:5d: 0b:13:04:ed:db:97:af:07:b0:ce:49:db:e5:11:ab: e0:a9:4c:f9:9b:9d:66:4a:33:ce:a8:3c:70:bf:db: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0C:77:3C:A4:72:FE:96:CD:75:A1:FC:75:BB:E8:7E:95:59:A8:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7d:04:86:58:53:c3:82:77:18:c6:6f:a9:e3:96:9f:b5:81: 85:e6:4d:a0:ad:85:f3:da:75:dc:7f:1c:ec:40:84:fb:84:ca: d0:10:e5:03:d3:c3:4d:47:4d:8f:65:d2:fd:cd:66:d1:ab:e6: 26:2d:24:9d:e7:88:c4:5e:e7:d7:0b:68:a3:98:20:2f:83:88: bd:8a:43:c7:29:ef:6d:db:6b:9b:4c:d0:a7:93:65:43:50:83: 20:97:fd:f2:e8:2d:7c:18:f7:83:2b:1d:e8:99:11:83:fd:53: 0c:18:a1:f4:e9:19:57:72:d8:bc:16:5f:80:4e:45:77:f9:39: 4a:45:67:31:b9:8c:f2:65:33:8f:f9:33:a3:fb:11:5b:2a:50: 97:22:ec:2b:2a:b1:a2:92:ee:f3:bc:c3:8d:95:d7:95:37:b5: 63:04:20:98:bb:6f:ac:36:61:e6:2c:e1:ab:2e:ec:26:7a:bf: cd:76:53:59:c5:5f:00:9b:ab:bd:4f:be:55:62:e5:48:97:40: 5a:0d:73:ff:b5:3e:89:2f:1c:f0:6d:bf:18:4c:62:3d:71:2c: c6:e6:bb:8b:c8:1c:28:d1:6a:50:85:02:82:a8:3e:26:45:33: 3a:06:c1:1f:7a:fe:36:c5:46:35:08:82:e8:49:b1:6e:3c:d1: 6c:8c:36:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTKAVmFyrY1kRsQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZTczZDkwZGItOTZiMS00N2ZjLWJhYjEtYTU4MDIyOTYyODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaCS7UdEMuSZ/fXtk4i4JP6PhRRXbJw/5aXl AgNKgLeAgl4q0a4yiThDDLJKV6YkYuIse4tF60ce4qFfrBNS5HuATpPuJ+EKIS4n ATs0Dzeac3xcz5mZM59XVlzDSCHcFf32Vhra9fmJoPrJ7JsPkeXheDtjPDoS0a6I VeylMTMlOMZLwP3xFgtuoyS3M8nQ2m/jEyLzqgvXLZx6K2Cq+PpiqmLXI06j7BzD 7bP0vP6oX0EWH/dTGmYoXxlfXcHNmxWT0OkCBK9UYZXMilab0eB0y5mFhBDJC983 4NuGFF0LEwTt25evB7DOSdvlEavgqUz5m51mSjPOqDxwv9ufwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQMdzykcv6WzXWh/HW76H6VWahdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZmZlNGZiNTYtMzVlNi0z ZjEyLTk5ZjAtYjExMzlkMjhlNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh9BIZYU8OCdxjGb6njlp+1gYXmTaCthfPaddx/HOxAhPuEytAQ5QPT w01HTY9l0v3NZtGr5iYtJJ3niMRe59cLaKOYIC+DiL2KQ8cp723ba5tM0KeTZUNQ gyCX/fLoLXwY94MrHeiZEYP9UwwYofTpGVdy2LwWX4BORXf5OUpFZzG5jPJlM4/5 M6P7EVsqUJci7CsqsaKS7vO8w42V15U3tWMEIJi7b6w2YeYs4asu7CZ6v812U1nF XwCbq71PvlVi5UiXQFoNc/+1PokvHPBtvxhMYj1xLMbmu4vIHCjRalCFAoKoPiZF MzoGwR96/jbFRjUIguhJsW480WyMNkQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:38 2025 by rpki-client