$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa File: 1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa (raw, json) Hash identifier: gY/JIh46SAVrCkGmcpPgpjmgmLqmrN3VZhUkI1LZlzw= Subject key identifier: F1:EC:88:4B:10:E1:23:ED:AF:81:01:35:AA:D9:71:D3:16:2E:A8:D3 Certificate issuer: /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff Certificate serial: 010D0C9F4328584B36BC50CBE5B8EA3ACBB706E0 Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 7896 IP address blocks: 216.128.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:50:cb:e5:b8:ea:3a:cb:b7:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=ae3311d8-c981-4d69-94a2-147eabfaa99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1b:6a:f6:a6:82:38:5e:a2:17:1a:aa:40:bc: 9b:eb:7b:43:49:a8:6f:88:8a:f1:cc:2f:91:6d:68: 77:2a:ae:bf:3a:e4:98:bd:cf:39:d2:c5:9b:cd:3d: 37:33:15:6f:34:ac:61:d6:8f:f8:f8:8f:6a:75:63: f5:bc:3f:b6:06:a9:d4:fa:56:dc:25:fd:50:db:9b: fb:96:04:aa:f5:81:7d:ee:d0:12:fe:d1:69:64:21: d8:94:d0:13:fd:8f:a1:5c:15:13:a1:43:95:77:e4: d6:d9:4f:3d:10:6f:9d:40:2f:d7:0c:38:8e:96:ec: 89:7a:e3:b0:25:12:76:b3:07:de:9f:2c:a3:98:94: f3:0d:ec:2f:36:57:cb:a8:8e:d2:93:50:51:9a:76: c6:36:e7:cf:40:df:89:f2:73:76:f1:5a:40:16:f0: da:1f:ed:eb:a5:2f:ce:f7:c2:5e:7f:ae:5b:e7:81: 23:cb:b7:d4:a2:22:38:9c:03:1f:0c:49:dc:17:e8: 21:e0:40:dd:60:da:20:9c:00:00:a3:80:d2:68:f3: 80:df:03:d9:98:5c:ae:95:b8:17:6e:00:af:2e:12: 7e:47:f8:bf:72:3a:08:b3:a1:92:9a:e9:f9:88:a1: aa:cd:5c:af:a3:43:79:ff:29:86:38:41:97:3b:b5: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EC:88:4B:10:E1:23:ED:AF:81:01:35:AA:D9:71:D3:16:2E:A8:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl X509v3 Authority Key Identifier: keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer sbgp-ipAddrBlock: critical IPv4: 216.128.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:87:95:71:83:fb:78:c2:aa:fb:42:f1:82:bd:e3:bb:39:56: f8:49:e1:6e:3d:6a:6b:7f:dd:18:ea:5e:02:0c:6a:37:01:8f: b6:5a:2f:63:8d:7e:be:eb:3a:46:56:95:9c:a1:70:cc:62:87: 92:ce:79:0c:36:ee:37:e2:15:84:f8:6d:a6:52:31:9e:e3:ee: 2d:cb:c2:2b:11:d0:9a:ac:8d:fc:cc:fb:f6:70:56:ae:9d:f0: bc:b5:9f:72:e7:95:7a:27:f5:46:1e:33:29:e5:04:9a:f9:83: ca:1c:b7:f6:7e:d0:be:e6:03:0f:dd:f7:48:25:2a:f7:07:ae: 4f:19:3f:cb:1b:6e:45:43:9f:ce:23:32:a6:ce:22:b5:b7:17: c4:62:50:90:88:f6:2b:7a:a7:23:ef:7b:4f:dd:fe:9d:5f:73: 2e:11:3d:6b:58:4c:ff:e4:d7:43:76:f8:79:c0:b3:e2:fa:73: 21:83:33:e2:12:01:d0:37:85:eb:e0:e5:56:34:c6:3f:17:b8: ac:d2:9a:8c:c8:1e:72:37:3d:65:cd:92:cc:5a:15:b9:07:28: a6:1a:2a:46:8a:21:16:75:66:27:0d:b0:97:3c:58:cb:bb:77: 64:07:00:96:e6:c6:3b:75:38:1b:c7:d7:f1:ec:93:f4:46:36: f6:b9:76:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFDL5bjqOsu3BuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZWJkNWYtZDcyZi00ZmZlLWFlY2QtYWQyZDJiMWE4 ZWZmMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk YWUzMzExZDgtYzk4MS00ZDY5LTk0YTItMTQ3ZWFiZmFhOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxtq9qaCOF6iFxqqQLyb63tDSahviIrxzC+R bWh3Kq6/OuSYvc850sWbzT03MxVvNKxh1o/4+I9qdWP1vD+2BqnU+lbcJf1Q25v7 lgSq9YF97tAS/tFpZCHYlNAT/Y+hXBUToUOVd+TW2U89EG+dQC/XDDiOluyJeuOw JRJ2swfenyyjmJTzDewvNlfLqI7Sk1BRmnbGNufPQN+J8nN28VpAFvDaH+3rpS/O 98Jef65b54Ejy7fUoiI4nAMfDEncF+gh4EDdYNognAAAo4DSaPOA3wPZmFyulbgX bgCvLhJ+R/i/cjoIs6GSmun5iKGqzVyvo0N5/ymGOEGXO7XLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHsiEsQ4SPtr4EBNarZcdMWLqjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMTRl YmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJkMmIxYThlZmYvMWFjMDMyYTUtOGNkNy0z ZTc3LWJlNmYtOWVmYmQ0ODY5YWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTE0ZWJkNWYtZDcyZi00ZmZlLWFl Y2QtYWQyZDJiMWE4ZWZmL2UxNGViZDVmLWQ3MmYtNGZmZS1hZWNkLWFkMmQyYjFh OGVmZi5jcmwwHwYDVR0jBBgwFoAUKJOWuiuwPLkmCsnjm3yOzLSIMbkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMTRlYmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJk MmIxYThlZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2HlXGD+3jCqvtC8YK947s5VvhJ4W49amt/3RjqXgIMajcBj7ZaL2ON fr7rOkZWlZyhcMxih5LOeQw27jfiFYT4baZSMZ7j7i3LwisR0JqsjfzM+/ZwVq6d 8Ly1n3LnlXon9UYeMynlBJr5g8oct/Z+0L7mAw/d90glKvcHrk8ZP8sbbkVDn84j MqbOIrW3F8RiUJCI9it6pyPve0/d/p1fcy4RPWtYTP/k10N2+HnAs+L6cyGDM+IS AdA3hevg5VY0xj8XuKzSmozIHnI3PWXNksxaFbkHKKYaKkaKIRZ1ZicNsJc8WMu7 d2QHAJbmxjt1OBvH1/Hsk/RGNva5di8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:26 2025 by rpki-client