$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/41bfb0a7-0e2a-3dcc-b33b-b735db12f7ab.roa File: 41bfb0a7-0e2a-3dcc-b33b-b735db12f7ab.roa (raw, json) Hash identifier: G3xnBe9RyAQAfhZwR1c4IGjutOPIu9b+m03kR2uuDqA= Subject key identifier: 7E:1A:88:5A:A3:EE:70:61:DB:9F:22:AC:7D:4A:4D:68:3C:57:36:63 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584B8B3D25C8FACF8C08537C3740 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/41bfb0a7-0e2a-3dcc-b33b-b735db12f7ab.roa Signing time: Thu 16 Oct 2025 19:28:16 +0000 ROA not before: Thu 16 Oct 2025 19:28:16 +0000 ROA not after: Wed 14 Jan 2026 20:28:16 +0000 asID: 16509 IP address blocks: 159.172.54.0/24 maxlen: 24 159.172.55.0/24 maxlen: 24 159.172.56.0/24 maxlen: 24 159.172.57.0/24 maxlen: 24 159.172.58.0/24 maxlen: 24 159.172.59.0/24 maxlen: 24 159.172.60.0/24 maxlen: 24 159.172.61.0/24 maxlen: 24 159.172.62.0/24 maxlen: 24 159.172.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:3d:25:c8:fa:cf:8c:08:53:7c:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Oct 16 19:28:16 2025 GMT Not After : Jan 14 20:28:16 2026 GMT Subject: CN=f07654ed-55bc-4d3e-8ab0-39be32d0f239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:68:20:8b:21:21:3d:04:d6:92:5f:16:65:09: ce:e5:4c:51:3f:ea:c8:31:85:32:37:1b:04:32:bb: 00:7e:e2:75:ee:d9:8d:37:d1:70:9f:1b:a2:d0:2a: ba:d2:cf:0d:2d:81:f4:e7:cc:5b:8f:db:d2:2f:85: cb:ab:44:12:34:ba:4d:96:90:1c:be:84:21:8e:bf: 6b:01:12:e9:84:f9:15:9f:f5:8f:b1:4b:08:b0:0c: 7e:52:54:0e:6d:7e:70:80:b1:7b:db:b6:bc:bc:3b: dc:39:08:38:ac:80:83:2f:93:65:f7:f2:84:17:06: 00:54:cb:a2:ae:99:aa:ac:1f:dd:db:c4:ea:a8:2e: 36:cb:ee:9b:f4:a6:d7:48:7f:2b:27:6b:c2:bf:86: 06:7e:a7:c9:5c:e8:ff:23:b6:8b:34:06:60:83:0b: 74:34:bf:0a:f4:ee:f0:35:ef:2e:e8:cd:5a:98:6c: cd:62:b1:ba:a6:10:01:77:6c:dc:16:5b:d0:da:a7: c3:a8:69:48:c6:ee:3e:b9:45:ba:77:15:78:22:5d: c8:c4:5e:80:4f:89:d5:a0:fd:72:77:2c:dc:7b:b7: 12:0b:10:46:fb:72:96:39:c6:67:5c:0b:71:d5:81: 8b:f3:bf:71:3d:99:a3:61:b0:37:1f:cd:e5:d1:23: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1A:88:5A:A3:EE:70:61:DB:9F:22:AC:7D:4A:4D:68:3C:57:36:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/41bfb0a7-0e2a-3dcc-b33b-b735db12f7ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.54.0-159.172.63.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5c:4b:9e:98:46:52:a1:96:cb:de:5b:e1:0b:d5:25:cd:f4: ad:7e:52:45:be:01:9f:9c:53:6b:70:68:73:29:3d:65:d9:bd: 3c:af:82:0a:1c:90:bb:0e:a0:b3:67:29:bd:84:4b:7f:dc:6a: 4f:48:60:e8:b5:eb:73:22:80:53:76:12:9c:97:3d:ab:32:4a: 84:73:c6:3f:04:3d:44:29:49:28:2f:be:d7:ee:40:8f:87:08: f7:aa:8e:2a:b2:37:26:15:e9:36:55:4c:39:04:d4:c6:31:7a: a6:1a:a5:f4:31:a4:0f:73:4b:df:34:38:39:01:87:8b:60:e3: dc:98:65:e7:c4:20:27:7e:ab:17:82:57:b1:f4:88:29:8f:fa: 28:d8:af:d4:1f:6d:9b:f9:1b:1c:49:48:ec:7d:9e:f8:82:d6: d3:37:50:5a:9c:fc:54:59:cd:c5:c4:5c:fa:5f:e4:d8:d0:3b: 59:23:55:55:67:13:80:8c:28:f7:cc:69:af:a7:e9:01:54:3a: 5a:86:cc:71:85:32:88:01:23:a1:79:10:fb:d0:1c:a9:4f:3d: 70:89:65:57:9f:39:43:20:b2:7d:f9:3c:d3:e4:1d:f6:8c:cf: cd:7b:88:e5:93:c8:22:52:e9:c9:5e:9d:a1:a0:b3:a9:ad:ad: db:73:58:dd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuLPSXI+s+MCFN8N0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MTAxNjE5MjgxNloXDTI2MDExNDIwMjgxNlowLzEtMCsGA1UEAxMk ZjA3NjU0ZWQtNTViYy00ZDNlLThhYjAtMzliZTMyZDBmMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ggiyEhPQTWkl8WZQnO5UxRP+rIMYUyNxsE MrsAfuJ17tmNN9Fwnxui0Cq60s8NLYH058xbj9vSL4XLq0QSNLpNlpAcvoQhjr9r ARLphPkVn/WPsUsIsAx+UlQObX5wgLF727a8vDvcOQg4rICDL5Nl9/KEFwYAVMui rpmqrB/d28TqqC42y+6b9KbXSH8rJ2vCv4YGfqfJXOj/I7aLNAZggwt0NL8K9O7w Ne8u6M1amGzNYrG6phABd2zcFlvQ2qfDqGlIxu4+uUW6dxV4Il3IxF6AT4nVoP1y dyzce7cSCxBG+3KWOcZnXAtx1YGL879xPZmjYbA3H83l0SN1QwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFH4aiFqj7nBh258irH1KTWg8VzZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvNDFiZmIwYTctMGUyYS0z ZGNjLWIzM2ItYjczNWRiMTJmN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGfrDYD BAafrAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAN1xLnphGUqGWy95b4QvVJc30rX5SRb4Bn5xTa3Bocyk9 Zdm9PK+CChyQuw6gs2cpvYRLf9xqT0hg6LXrcyKAU3YSnJc9qzJKhHPGPwQ9RClJ KC++1+5Aj4cI96qOKrI3JhXpNlVMOQTUxjF6phql9DGkD3NL3zQ4OQGHi2Dj3Jhl 58QgJ36rF4JXsfSIKY/6KNiv1B9tm/kbHElI7H2e+ILW0zdQWpz8VFnNxcRc+l/k 2NA7WSNVVWcTgIwo98xpr6fpAVQ6WobMcYUyiAEjoXkQ+9AcqU89cIllV585QyCy ffk80+Qd9ozPzXuI5ZPIIlLpyV6doaCzqa2t23NY3Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:44 2025 by rpki-client