$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa File: affcab7d-6094-3982-8b34-38221efc1254.roa (raw, json) Hash identifier: N6dHai+ZJqVI/M6E/84wVWsZzgj6A4XzsPThxF7rbcY= Subject key identifier: 71:04:8E:D2:11:CC:85:7A:FA:A7:2A:8B:81:E6:A0:ED:47:32:63:75 Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113 Certificate serial: 010D0C9F4328584BB2F7C5613B40AAB7B0BA2580 Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 8075 IP address blocks: 199.255.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c5:61:3b:40:aa:b7:b0:ba:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=267b297e-f59d-4bb5-af06-b73cd95676cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f7:ed:4b:65:71:ed:13:a8:c6:2b:2f:33:91: 95:41:6c:b3:50:fe:79:43:e2:47:6f:f6:9e:41:f1: cb:c4:42:8c:ab:76:3f:3d:d9:fd:9b:df:38:a2:aa: fe:87:21:42:22:30:f3:f0:e0:67:91:7a:29:02:e8: 88:3c:8d:0e:63:6c:20:a6:16:c0:b9:b4:49:d9:ff: 6f:f9:49:d5:9f:05:c6:53:30:a0:ee:35:fd:58:0f: b4:43:00:d9:a4:6a:a1:59:38:58:7e:2e:f6:b1:93: a3:03:42:ba:56:b2:bd:58:65:55:e0:08:13:7d:c6: 1a:35:a3:0a:59:98:8b:5c:7c:fa:6d:dd:60:74:06: 3a:79:52:bf:56:f4:e4:1c:55:e1:1a:69:c2:b4:4f: bf:4e:e0:08:d1:be:7a:28:f7:14:26:be:c7:e2:b5: 2c:c3:49:fa:fa:f7:ea:b4:69:64:49:38:2f:44:e3: c6:0a:26:05:48:87:b3:ba:f8:4b:66:ca:0c:44:4e: 72:54:52:9f:2a:a2:07:3a:e4:4a:6f:56:ba:2f:12: 46:a9:a9:b5:d0:b8:46:bd:a0:a9:8c:d0:99:0e:6a: 31:8f:fe:56:f0:f6:91:89:ee:74:12:19:3f:41:c6: 78:71:36:eb:8a:50:f1:a3:ea:73:d2:dd:29:94:0c: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:04:8E:D2:11:CC:85:7A:FA:A7:2A:8B:81:E6:A0:ED:47:32:63:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl X509v3 Authority Key Identifier: keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer sbgp-ipAddrBlock: critical IPv4: 199.255.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:17:f6:81:44:14:7c:c3:5f:5a:b5:fc:04:06:c1:1d:ae:5c: 0f:40:31:71:fe:ae:b2:d7:6b:fe:b1:2c:3b:1f:c8:73:d6:cf: 7a:99:19:66:ed:e7:32:01:e8:a0:13:8a:80:69:86:4d:50:d8: 2f:47:d8:c1:5d:58:8f:31:b0:13:f1:6a:d6:bb:f8:3d:ef:74: e6:05:28:46:ac:54:1b:08:69:52:f0:66:37:f5:31:d5:2f:80: c9:b9:46:20:d2:fb:d6:8c:db:a3:d3:5a:2e:8f:17:ab:62:50: cc:df:89:2e:2e:62:9e:ed:da:49:52:01:77:6d:a6:e0:a7:ad: 7d:16:f0:99:ce:9d:e1:2a:8a:22:4d:f9:91:ac:cd:7a:5a:3c: 92:83:93:fc:19:5e:66:6b:47:fb:ba:08:33:fe:5c:52:b6:a7: a7:c2:bc:5b:0f:15:05:1a:a5:6e:98:a0:d0:ca:a8:c1:6a:d0: 0b:12:f7:42:95:8c:54:e2:46:43:4d:43:49:9c:eb:56:1b:1c: 86:a0:d2:ff:69:c1:b5:52:30:a7:5b:b5:9d:2b:55:e6:f3:4f: 4d:33:3b:e3:ff:54:18:9e:5b:be:d4:45:33:66:06:24:b6:92: f4:69:2c:58:fd:17:52:fe:9a:ad:35:8e:3e:1d:1d:90:29:c3: 6c:3f:45:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98VhO0Cqt7C6JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj MTEzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjY3YjI5N2UtZjU5ZC00YmI1LWFmMDYtYjczY2Q5NTY3NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivftS2Vx7ROoxisvM5GVQWyzUP55Q+JHb/ae QfHLxEKMq3Y/Pdn9m984oqr+hyFCIjDz8OBnkXopAuiIPI0OY2wgphbAubRJ2f9v +UnVnwXGUzCg7jX9WA+0QwDZpGqhWThYfi72sZOjA0K6VrK9WGVV4AgTfcYaNaMK WZiLXHz6bd1gdAY6eVK/VvTkHFXhGmnCtE+/TuAI0b56KPcUJr7H4rUsw0n6+vfq tGlkSTgvROPGCiYFSIezuvhLZsoMRE5yVFKfKqIHOuRKb1a6LxJGqam10LhGvaCp jNCZDmoxj/5W8PaRie50Ehk/QcZ4cTbrilDxo+pz0t0plAzWgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEEjtIRzIV6+qcqi4HmoO1HMmN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0 NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvYWZmY2FiN2QtNjA5NC0z OTgyLThiMzQtMzgyMjFlZmMxMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1 YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0 YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEX9oFEFHzDX1q1/AQGwR2uXA9AMXH+rrLXa/6xLDsfyHPWz3qZGWbt 5zIB6KATioBphk1Q2C9H2MFdWI8xsBPxata7+D3vdOYFKEasVBsIaVLwZjf1MdUv gMm5RiDS+9aM26PTWi6PF6tiUMzfiS4uYp7t2klSAXdtpuCnrX0W8JnOneEqiiJN +ZGszXpaPJKDk/wZXmZrR/u6CDP+XFK2p6fCvFsPFQUapW6YoNDKqMFq0AsS90KV jFTiRkNNQ0mc61YbHIag0v9pwbVSMKdbtZ0rVebzT00zO+P/VBieW77URTNmBiS2 kvRpLFj9F1L+mq01jj4dHZApw2w/RS4= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:21 2025 by rpki-client