$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa File: 0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa (raw, json) Hash identifier: XO+9vkGZBpqDhfNQwvStD+BGqQSfQm0wk4jtzZN7Ruo= Subject key identifier: 3F:72:27:6E:C1:59:45:D5:EC:79:FA:1B:EF:FC:D9:1D:F9:EC:B8:FF Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B99D7A569C18991E701ED4940 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 25899 IP address blocks: 209.237.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a5:69:c1:89:91:e7:01:ed:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=21aacb5d-2455-436b-af75-2afdf9f91914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:07:11:0b:71:9b:c0:69:1a:47:ff:b8:48:87: a0:10:30:f1:45:64:00:10:21:15:8c:dc:66:1b:75: a0:d9:c5:78:07:b2:e0:b4:4d:b2:61:40:bf:b0:29: df:7b:29:47:53:9f:31:4c:92:88:80:6f:d8:2f:d2: 6b:4a:d6:a6:68:bf:af:8b:b6:05:2c:8a:89:6b:e7: 85:f4:95:51:95:20:df:4c:67:48:7d:d6:a1:6c:2c: 68:20:30:6a:6e:4f:87:74:d5:0b:bd:8d:51:41:ac: 14:7d:6d:66:73:49:4c:77:fc:d4:32:2b:4a:3c:43: a3:ff:83:a9:fb:1d:ac:ae:eb:97:e6:df:eb:5a:27: 1b:9b:30:65:8a:e9:3c:0a:5d:04:0e:dd:54:e1:4c: 79:76:39:58:36:a2:1f:e1:cb:7c:95:b2:a7:6a:72: 6b:86:98:1d:91:30:b4:b7:15:d0:ec:ae:2e:20:06: 6c:c8:c2:a6:38:06:78:a0:e1:28:3a:67:fc:f2:4c: 40:50:19:2c:0b:0e:0e:cf:d9:6a:81:92:92:da:4b: b2:f6:22:e8:c6:6d:1a:bc:33:a8:6a:aa:3d:28:29: c3:0f:03:20:c4:4e:98:62:b2:ff:fb:06:8b:22:3b: 18:42:4b:72:14:8e:bf:4c:07:f0:c0:a2:a9:71:cf: ce:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:72:27:6E:C1:59:45:D5:EC:79:FA:1B:EF:FC:D9:1D:F9:EC:B8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0a:89:94:5c:fc:8b:8b:3f:b0:e2:34:5e:55:8d:af:7e:67: b9:22:8c:95:da:ee:1a:50:1d:39:e8:36:57:55:64:48:1b:a7: f5:bc:ed:80:8f:8a:1d:14:42:c5:d0:da:10:16:17:85:65:cb: de:4e:05:ab:96:a9:35:53:56:35:17:8b:69:0b:a6:06:64:c4: c0:93:a6:8e:79:cb:8a:10:6d:3d:68:58:40:b5:ee:b3:f0:21: b7:3a:ad:ee:f3:05:5f:67:59:8a:16:80:ca:9b:8b:68:31:e2: 2d:8e:bf:06:51:6a:4a:1f:f9:3b:4a:ba:68:3e:1b:c6:1c:3f: fd:8c:8d:48:96:59:b3:61:50:9b:61:58:56:01:dd:7a:61:dc: 84:4b:ec:ca:4d:a4:e6:d7:a3:3d:a6:69:0e:66:23:bf:d6:aa: 85:ee:f8:ce:a1:52:d7:9e:b9:3b:e1:c9:15:a0:ca:fd:65:c3: f3:bd:7e:8e:6e:6c:b8:09:2a:84:21:37:15:ce:09:c3:36:d6: 1b:3b:36:76:fd:1e:fe:26:8a:6c:2a:d3:98:64:5e:82:d0:b9: f0:52:d4:ee:cb:82:9e:ec:34:41:8c:1b:93:ed:6c:0b:84:48: a5:a9:8b:12:d7:41:67:d3:81:51:f0:92:75:d3:3c:ec:6d:5c: d2:f4:c8:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16VpwYmR5wHtSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjFhYWNiNWQtMjQ1NS00MzZiLWFmNzUtMmFmZGY5ZjkxOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwcRC3GbwGkaR/+4SIegEDDxRWQAECEVjNxm G3Wg2cV4B7LgtE2yYUC/sCnfeylHU58xTJKIgG/YL9JrStamaL+vi7YFLIqJa+eF 9JVRlSDfTGdIfdahbCxoIDBqbk+HdNULvY1RQawUfW1mc0lMd/zUMitKPEOj/4Op +x2sruuX5t/rWicbmzBliuk8Cl0EDt1U4Ux5djlYNqIf4ct8lbKnanJrhpgdkTC0 txXQ7K4uIAZsyMKmOAZ4oOEoOmf88kxAUBksCw4Oz9lqgZKS2kuy9iLoxm0avDOo aqo9KCnDDwMgxE6YYrL/+waLIjsYQktyFI6/TAfwwKKpcc/OhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9yJ27BWUXV7Hn6G+/82R357Lj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGFiYWQzNTktMmQ2OS0z NGJkLTlkOGMtYWM4MTAwZDVjZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4KiZRc/IuLP7DiNF5Vja9+Z7kijJXa7hpQHTnoNldVZEgbp/W87YCP ih0UQsXQ2hAWF4Vly95OBauWqTVTVjUXi2kLpgZkxMCTpo55y4oQbT1oWEC17rPw Ibc6re7zBV9nWYoWgMqbi2gx4i2OvwZRakof+TtKumg+G8YcP/2MjUiWWbNhUJth WFYB3Xph3IRL7MpNpObXoz2maQ5mI7/WqoXu+M6hUteeuTvhyRWgyv1lw/O9fo5u bLgJKoQhNxXOCcM21hs7Nnb9Hv4mimwq05hkXoLQufBS1O7Lgp7sNEGMG5PtbAuE SKWpixLXQWfTgVHwknXTPOxtXNL0yOo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:05 2025 by rpki-client