$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa File: a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa (raw, json) Hash identifier: qcnIVoxvt2W2pG6GnfQPciVNKpURxUpT19fFhRne0p0= Subject key identifier: 40:9C:FB:DB:B1:BB:EA:64:A9:40:A9:06:97:79:85:59:2E:09:D0:70 Certificate issuer: /CN=c35e2c52-3f0c-44a4-8b47-f414626715a0 Certificate serial: 010D0C9F4328584BA39D199E5A2AF5099EAEE528 Authority key identifier: 76:49:E2:8B:A7:0E:58:B3:54:F9:70:3D:44:24:C4:0F:46:A1:AD:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 63406 IP address blocks: 216.83.168.0/24 maxlen: 24 2602:815:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/c35e2c52-3f0c-44a4-8b47-f414626715a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/c35e2c52-3f0c-44a4-8b47-f414626715a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:19:9e:5a:2a:f5:09:9e:ae:e5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35e2c52-3f0c-44a4-8b47-f414626715a0 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=5af7f968-f7f9-4648-87c2-2da8eeed7e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:3f:8d:5a:f5:79:83:6e:b1:93:93:78:0a: 07:96:18:c5:d7:a7:28:86:3b:42:4a:c8:6e:c1:22: 4a:b9:94:ed:69:47:a1:0e:61:7c:14:58:5c:fe:83: a7:94:02:73:08:02:59:12:84:90:9a:38:7b:c9:64: 7c:29:97:f9:24:43:1f:86:a8:db:0b:f1:3b:17:5a: 24:f9:1d:04:bd:e5:8f:6c:54:cb:b6:a1:76:9c:20: 05:87:4b:aa:81:07:6e:e8:09:47:84:4c:12:de:68: db:cc:58:52:51:a6:91:fc:c7:c9:b6:42:50:c7:99: 8e:c6:04:73:1e:63:b2:4c:bb:d1:55:95:56:9c:7d: a4:01:ec:87:d4:3c:3d:81:db:69:ab:ca:8c:6b:a2: eb:e3:ef:84:73:cf:41:78:4a:a1:f2:ff:e7:b7:ce: 8a:ef:8c:04:c8:98:dd:5d:33:b4:03:28:ad:16:bf: f6:67:b6:ca:73:3d:f2:fd:8e:99:50:90:83:4a:90: db:19:55:0a:5d:86:4f:a1:12:07:00:08:94:0b:1e: 16:82:21:18:8a:3d:f0:3c:ce:69:57:8f:ed:a6:d9: d2:e1:72:04:d3:63:f7:48:4b:ad:45:4f:d0:ba:38: ad:88:c8:a5:f0:16:80:e6:5d:65:f2:f0:22:6e:93: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:FB:DB:B1:BB:EA:64:A9:40:A9:06:97:79:85:59:2E:09:D0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/a0ba7a33-645b-34be-a2d8-82b28e0198c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0/c35e2c52-3f0c-44a4-8b47-f414626715a0.crl X509v3 Authority Key Identifier: keyid:76:49:E2:8B:A7:0E:58:B3:54:F9:70:3D:44:24:C4:0F:46:A1:AD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c35e2c52-3f0c-44a4-8b47-f414626715a0.cer sbgp-ipAddrBlock: critical IPv4: 216.83.168.0/24 IPv6: 2602:815:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:45:f2:0b:b9:e1:62:a2:2c:b2:71:64:eb:9f:20:53:a9:b6: 88:2f:c8:c9:0b:10:a4:a7:87:30:d4:6e:91:c0:dd:cb:0d:39: 98:f0:fa:99:58:b6:23:f3:38:44:74:5a:aa:a4:ee:4f:cb:fa: 32:b7:80:6f:d4:23:b5:a8:45:3d:75:63:74:01:1e:49:4f:61: 6f:49:25:9f:44:88:d3:d5:dd:79:4b:d8:32:99:4e:43:67:c2: ad:93:8f:dd:8e:2e:3e:8f:dc:ab:eb:ed:a8:de:36:f5:a6:40: d0:33:06:13:2d:e4:44:45:66:14:af:9e:ab:cc:54:86:b0:b6: 02:f3:02:8e:ce:75:75:60:4a:e2:4d:3e:54:11:35:88:dd:b5: c0:29:5b:39:97:98:c1:09:f8:8e:dc:3f:29:24:cb:5b:54:d2: f1:88:18:be:50:56:f6:f0:c5:5e:57:6c:7e:3d:21:a1:47:df: 15:45:41:36:89:78:31:b8:9f:0f:e9:a6:f9:8a:56:a2:3a:4b: 61:a3:9a:36:76:1d:bf:0d:d3:1b:9e:d6:f9:39:9f:0e:56:38: e3:79:98:8d:86:fc:77:0d:a4:e4:94:90:26:92:a8:64:12:2d: 95:01:fe:3f:de:e9:83:4f:ed:49:2d:dd:10:24:02:ff:ae:99: 99:67:3f:9d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEujnRmeWir1CZ6u5SgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM1ZTJjNTItM2YwYy00NGE0LThiNDctZjQxNDYyNjcx NWEwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWFmN2Y5NjgtZjdmOS00NjQ4LTg3YzItMmRhOGVlZWQ3ZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFE/jVr1eYNusZOTeAoHlhjF16cohjtCSshu wSJKuZTtaUehDmF8FFhc/oOnlAJzCAJZEoSQmjh7yWR8KZf5JEMfhqjbC/E7F1ok +R0EveWPbFTLtqF2nCAFh0uqgQdu6AlHhEwS3mjbzFhSUaaR/MfJtkJQx5mOxgRz HmOyTLvRVZVWnH2kAeyH1Dw9gdtpq8qMa6Lr4++Ec89BeEqh8v/nt86K74wEyJjd XTO0AyitFr/2Z7bKcz3y/Y6ZUJCDSpDbGVUKXYZPoRIHAAiUCx4WgiEYij3wPM5p V4/tptnS4XIE02P3SEutRU/QujitiMil8BaA5l1l8vAibpOlPwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFECc+9uxu+pkqUCpBpd5hVkuCdBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzVl MmM1Mi0zZjBjLTQ0YTQtOGI0Ny1mNDE0NjI2NzE1YTAvYTBiYTdhMzMtNjQ1Yi0z NGJlLWEyZDgtODJiMjhlMDE5OGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzM1ZTJjNTItM2YwYy00NGE0LThi NDctZjQxNDYyNjcxNWEwL2MzNWUyYzUyLTNmMGMtNDRhNC04YjQ3LWY0MTQ2MjY3 MTVhMC5jcmwwHwYDVR0jBBgwFoAUdknii6cOWLNU+XA9RCTED0ahrbMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzVlMmM1Mi0zZjBjLTQ0YTQtOGI0Ny1mNDE0 NjI2NzE1YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2FOoMA4E AgACMAgDBgAmAggVIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAURfILueFioiyycWTrnyBTqbaIL8jJCxCk p4cw1G6RwN3LDTmY8PqZWLYj8zhEdFqqpO5Py/oyt4Bv1CO1qEU9dWN0AR5JT2Fv SSWfRIjT1d15S9gymU5DZ8Ktk4/dji4+j9yr6+2o3jb1pkDQMwYTLeRERWYUr56r zFSGsLYC8wKOznV1YEriTT5UETWI3bXAKVs5l5jBCfiO3D8pJMtbVNLxiBi+UFb2 8MVeV2x+PSGhR98VRUE2iXgxuJ8P6ab5ilaiOktho5o2dh2/DdMbntb5OZ8OVjjj eZiNhvx3DaTklJAmkqhkEi2VAf4/3umDT+1JLd0QJAL/rpmZZz+d -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:35 2025 by rpki-client