$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa File: 01949cb6-dbef-38e7-b253-ca7fee6dea68.roa (raw, json) Hash identifier: rfSgVfvdcw6kB1cItbx2LxjZYw+vXsxaPHIX9dOIWEI= Subject key identifier: 9D:B5:05:08:ED:D1:0C:3C:7E:65:F4:CE:22:49:AB:0F:7E:E8:A9:10 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B44B1BB0496293124B3436E40 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 11233 IP address blocks: 162.255.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:bb:04:96:29:31:24:b3:43:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=3e03f806-8102-4805-91ab-bf33cfc4b37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:92:d1:d5:94:bc:d9:ee:25:56:11:fc:15: 78:97:67:77:8c:81:72:f3:88:b9:00:8f:4e:b1:0d: 36:94:74:48:26:9c:a4:fb:07:0b:2b:f5:95:b8:41: fc:49:64:cc:bb:fd:4a:89:a0:83:c8:97:2d:e3:37: 7d:70:4b:07:5e:dd:06:66:3d:4d:53:a5:77:76:b3: c1:9c:f5:7d:d4:8e:32:12:eb:20:69:e7:01:8d:90: f9:80:2d:b2:1d:53:2f:a3:d7:5b:eb:46:0f:99:dd: 74:2c:2d:e0:2c:66:ab:f8:90:82:6f:8e:1f:cc:86: 95:b2:dd:26:01:df:98:28:f4:75:16:70:36:8a:62: 2e:67:0c:ca:37:09:0b:33:26:18:57:23:a1:29:d5: 21:02:d1:47:be:07:2f:fd:29:0e:64:c7:06:b7:f3: 9d:a9:df:4a:15:22:3f:b6:7a:9d:58:75:60:72:fe: 69:a1:df:8b:6b:e3:ee:e3:4c:25:f7:f6:43:e5:53: 2d:1e:e1:61:a0:0d:34:99:7d:50:34:a7:11:f3:d9: 56:b1:e8:96:cf:e5:7f:dc:ec:3b:0a:e6:de:68:6e: a7:57:88:2d:fe:ce:37:ed:4d:d3:c3:10:2b:19:e2: 3a:3a:16:30:04:2c:85:9f:c2:d8:8b:ff:47:d2:8b: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:05:08:ED:D1:0C:3C:7E:65:F4:CE:22:49:AB:0F:7E:E8:A9:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 162.255.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e1:37:92:d2:33:21:44:d9:03:7f:6e:5e:1f:92:2c:ff:08: d5:3e:cd:c8:bb:5f:64:be:d8:c9:71:0c:25:89:39:a5:67:c6: f1:7f:38:41:32:e2:5b:c9:21:10:80:02:ed:e2:3c:19:62:3e: 37:c7:2d:ab:ff:99:32:ba:8c:c7:a9:7f:1f:7b:c1:ab:01:33: bd:13:37:0b:da:ab:4b:1d:41:59:44:09:6b:83:74:52:d9:fd: 06:e3:56:b1:2d:53:bc:7e:4b:f9:e4:06:1c:b5:ec:a1:54:3f: 65:69:f9:89:85:83:1c:53:7d:9d:08:98:27:80:12:a1:02:73: 39:56:da:5b:1f:3b:e0:cf:bd:f7:23:41:6d:93:7f:ab:a1:b5: f2:c1:37:d2:d4:63:21:a4:58:75:e0:44:97:6f:4f:40:91:53: 23:9e:11:df:4e:26:3a:f7:5f:e3:29:e1:2e:73:90:4d:5b:b0: 1d:b9:16:6c:f3:f5:62:0c:17:17:e7:1a:95:a5:27:26:dd:c2: ce:ba:02:fa:23:2b:33:0b:3c:2d:6c:b0:d7:dc:d7:bc:b0:e2: 06:19:19:bd:76:98:be:fc:8d:ab:83:d0:ba:15:2d:5e:4b:cc: 6b:bb:3a:a6:21:2f:a7:3d:89:b1:d0:1b:2d:ec:49:57:82:04: fb:6d:8c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbsElikxJLNDbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk M2UwM2Y4MDYtODEwMi00ODA1LTkxYWItYmYzM2NmYzRiMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSCS0dWUvNnuJVYR/BV4l2d3jIFy84i5AI9O sQ02lHRIJpyk+wcLK/WVuEH8SWTMu/1KiaCDyJct4zd9cEsHXt0GZj1NU6V3drPB nPV91I4yEusgaecBjZD5gC2yHVMvo9db60YPmd10LC3gLGar+JCCb44fzIaVst0m Ad+YKPR1FnA2imIuZwzKNwkLMyYYVyOhKdUhAtFHvgcv/SkOZMcGt/Odqd9KFSI/ tnqdWHVgcv5pod+La+Pu40wl9/ZD5VMtHuFhoA00mX1QNKcR89lWseiWz+V/3Ow7 CubeaG6nV4gt/s437U3TwxArGeI6OhYwBCyFn8LYi/9H0ot8CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ21BQjt0Qw8fmX0ziJJqw9+6KkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMDE5NDljYjYtZGJlZi0z OGU3LWIyNTMtY2E3ZmVlNmRlYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBov8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjhN5LSMyFE2QN/bl4fkiz/CNU+zci7X2S+2MlxDCWJOaVnxvF/OEEy 4lvJIRCAAu3iPBliPjfHLav/mTK6jMepfx97wasBM70TNwvaq0sdQVlECWuDdFLZ /QbjVrEtU7x+S/nkBhy17KFUP2Vp+YmFgxxTfZ0ImCeAEqECczlW2lsfO+DPvfcj QW2Tf6uhtfLBN9LUYyGkWHXgRJdvT0CRUyOeEd9OJjr3X+Mp4S5zkE1bsB25Fmzz 9WIMFxfnGpWlJybdws66AvojKzMLPC1ssNfc17yw4gYZGb12mL78jauD0LoVLV5L zGu7OqYhL6c9ibHQGy3sSVeCBPttjCw= -----END CERTIFICATE-----Generated at Wed Nov 5 21:29:01 2025 by rpki-client