$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/a5885396-8c4f-3c0c-a08d-0df23e95fe12.roa File: a5885396-8c4f-3c0c-a08d-0df23e95fe12.roa (raw, json) Hash identifier: D2hx5og5rdAoRtrqWHiq3EfWefcUDAk4/Jo1JgBoxnA= Subject key identifier: 94:2B:CA:61:A9:52:B0:E9:9A:31:0A:F9:02:78:E0:09:E3:F7:7C:EE Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584BC10ADD4CE76643E25AC55180 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/a5885396-8c4f-3c0c-a08d-0df23e95fe12.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 45445 IP address blocks: 198.208.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:dd:4c:e7:66:43:e2:5a:c5:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=66836efb-b617-4f30-b341-6b36dd47d5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:4c:71:36:48:43:40:e6:39:b2:06:2a:b6: e8:97:41:1d:16:68:18:3e:b2:45:f6:d5:eb:15:52: 13:31:52:41:2a:70:3f:54:15:60:64:2f:f0:70:3d: d4:af:29:13:9f:fa:3c:62:72:d7:ef:7e:e4:57:a7: f1:2a:5c:de:c5:bb:86:cd:8e:54:a5:7c:b3:83:3c: 0c:89:e4:c1:24:27:63:f1:b1:23:c9:72:94:d4:f6: 25:3a:1e:fa:97:70:15:bf:01:17:0c:9d:60:21:c3: 5c:14:0d:1d:c2:a1:a6:dc:48:d8:12:c8:79:44:0e: d0:9e:23:c4:fe:c1:64:10:f7:e2:1c:b3:6d:cd:93: 96:ba:f1:65:29:4f:d4:d3:d4:cb:fc:1e:66:1c:8e: 99:16:dd:fe:00:0f:db:66:8c:27:bd:5f:a7:39:f6: c4:7f:71:3f:31:44:75:54:dc:77:ab:fc:87:11:3b: 99:7e:53:70:df:93:f0:39:7f:5c:f8:07:2f:dd:0c: 80:1d:5b:00:16:48:cf:3b:27:f8:47:00:04:2a:db: 73:21:9a:d1:d7:b6:95:2c:e3:17:1f:fa:dc:ff:98: 78:7a:81:ac:10:61:4d:03:e3:fd:5f:32:55:05:ff: ac:17:e4:c2:0d:1f:5c:a2:79:55:48:b2:05:38:7c: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2B:CA:61:A9:52:B0:E9:9A:31:0A:F9:02:78:E0:09:E3:F7:7C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/a5885396-8c4f-3c0c-a08d-0df23e95fe12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6f:6d:a9:9d:bc:2a:39:19:3c:c2:69:53:02:6e:67:63:60: 8d:71:cd:72:be:f0:48:3e:17:1c:d7:bd:01:a8:1b:ab:84:4f: 0b:90:79:dd:42:02:85:80:0b:02:47:90:cf:b9:10:3d:a3:ec: 7d:49:c9:a3:1b:46:62:36:3c:99:71:95:91:82:56:59:a9:8c: ec:4e:57:7a:77:b0:3b:97:ab:ba:26:6a:59:ac:e1:5a:4e:0f: b3:c3:cc:93:6e:f9:59:d5:b7:ca:5e:77:d1:25:68:bf:f5:a3: c8:ee:6f:d1:c8:bb:fb:29:ec:31:9a:26:7d:14:34:54:76:c6: 17:34:4b:e0:80:77:1a:90:34:aa:cb:5b:4a:18:6b:45:35:b4: 0c:e4:5f:72:50:a4:85:75:4e:5b:7e:95:ea:a6:99:16:56:cd: 09:b5:d4:e4:f0:dc:e3:3c:8b:87:e5:ce:cb:f8:89:21:4c:c2: bd:b5:8c:f9:9c:5f:84:08:11:d3:37:69:d0:11:0d:fd:0b:f2: fd:16:94:44:87:ab:29:ac:16:43:ff:37:4a:d2:87:87:bf:a2: f8:d2:21:7b:0a:af:7e:67:93:e6:58:75:4e:1d:15:02:e0:1a: 2d:2e:94:2b:18:c4:bc:0d:3c:ab:ca:a3:0f:7e:73:4b:c9:3f: 21:d4:bc:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCt1M52ZD4lrFUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk NjY4MzZlZmItYjYxNy00ZjMwLWIzNDEtNmIzNmRkNDdkNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqItMcTZIQ0DmObIGKrbol0EdFmgYPrJF9tXr FVITMVJBKnA/VBVgZC/wcD3UrykTn/o8YnLX737kV6fxKlzexbuGzY5UpXyzgzwM ieTBJCdj8bEjyXKU1PYlOh76l3AVvwEXDJ1gIcNcFA0dwqGm3EjYEsh5RA7QniPE /sFkEPfiHLNtzZOWuvFlKU/U09TL/B5mHI6ZFt3+AA/bZownvV+nOfbEf3E/MUR1 VNx3q/yHETuZflNw35PwOX9c+Acv3QyAHVsAFkjPOyf4RwAEKttzIZrR17aVLOMX H/rc/5h4eoGsEGFNA+P9XzJVBf+sF+TCDR9conlVSLIFOHxUdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQrymGpUrDpmjEK+QJ44Anj93zuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvYTU4ODUzOTYtOGM0Zi0z YzBjLWEwOGQtMGRmMjNlOTVmZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxtBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNvbamdvCo5GTzCaVMCbmdjYI1xzXK+8Eg+FxzXvQGoG6uETwuQed1C AoWACwJHkM+5ED2j7H1JyaMbRmI2PJlxlZGCVlmpjOxOV3p3sDuXq7omalms4VpO D7PDzJNu+VnVt8ped9ElaL/1o8jub9HIu/sp7DGaJn0UNFR2xhc0S+CAdxqQNKrL W0oYa0U1tAzkX3JQpIV1Tlt+leqmmRZWzQm11OTw3OM8i4flzsv4iSFMwr21jPmc X4QIEdM3adARDf0L8v0WlESHqymsFkP/N0rSh4e/ovjSIXsKr35nk+ZYdU4dFQLg Gi0ulCsYxLwNPKvKow9+c0vJPyHUvHw= -----END CERTIFICATE-----Generated at Wed Nov 5 21:46:08 2025 by rpki-client