$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa File: 09c7645e-f4c3-3106-8958-9a9fc6429bef.roa (raw, json) Hash identifier: 2Qv4OS4VTLSVZEyCs+K0qfsNetEbvm16jAeDnjV1HJc= Subject key identifier: 56:A1:4E:E7:4D:D1:69:77:AF:7E:C0:85:CC:16:77:EA:95:CC:DA:5E Certificate issuer: /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Certificate serial: 010D0C9F4328584BAA97A8E90F63DF9EE7AEEA00 Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 8075 IP address blocks: 216.152.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a8:e9:0f:63:df:9e:e7:ae:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=cbf5342d-f8b0-4552-abb9-569972362403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:cb:0d:24:f6:be:39:88:e0:eb:cf:4f:d6: 77:d8:aa:b9:0b:fb:4f:85:68:9e:e5:bb:be:2c:3c: a3:d4:b2:9e:22:29:a3:09:38:aa:81:a1:24:d7:d0: ce:4c:b4:18:53:42:03:77:5e:f6:af:de:ee:ea:01: 23:76:d1:ac:23:7a:ed:0f:d2:47:0f:d4:8f:7e:e4: 99:5f:7c:d8:2e:32:18:a6:2b:e6:ef:2f:29:16:92: 4d:66:94:22:da:9d:9f:f0:15:bf:f7:85:90:06:a5: 7d:95:ff:88:fc:b2:04:85:f0:97:1a:3b:f0:f0:46: 5f:e7:53:72:f3:7e:75:db:1e:5a:d0:a4:41:7f:d9: f1:9e:ce:86:2e:3d:5d:e8:23:9a:a7:80:7b:d3:b4: 49:73:25:44:07:f0:a5:51:9e:65:8f:9a:7f:0f:5a: de:8b:4e:9d:ed:2b:c7:ef:de:ce:16:7f:f1:f1:ec: ed:38:dd:50:18:4a:ff:13:cc:6e:b0:35:f6:d5:e1: 70:77:32:32:e3:fd:0c:bf:7d:f9:95:1c:f1:33:97: 7e:2e:01:81:c2:cd:59:39:ca:17:5f:1e:3f:02:c2: 51:a9:90:fb:e7:28:b0:7e:63:f8:d5:27:98:5b:20: c9:a9:14:14:75:38:65:ce:b2:07:5d:e3:74:de:3c: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A1:4E:E7:4D:D1:69:77:AF:7E:C0:85:CC:16:77:EA:95:CC:DA:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl X509v3 Authority Key Identifier: keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer sbgp-ipAddrBlock: critical IPv4: 216.152.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b5:15:f7:93:eb:a4:7a:e7:11:5f:ae:b2:b5:81:c5:ac:64: e8:25:a6:bb:a5:5b:44:c9:52:c0:a1:38:9a:a7:83:a6:53:89: 9f:25:69:f5:fa:19:d3:47:6c:02:7d:df:85:8d:bd:52:11:59: 9d:0f:6d:47:98:ed:83:81:3f:1f:a2:cb:05:0f:c0:0b:ba:58: 4b:99:4e:e2:67:c4:f9:08:cb:9d:15:73:92:24:f9:78:5d:13: e6:9a:43:85:47:49:ed:5b:0c:cc:15:e0:ae:7b:df:33:20:43: 6d:5b:fb:8b:35:be:f5:42:5d:c0:cb:c6:14:11:75:3a:e5:33: 78:b8:89:f2:db:9d:29:30:f6:79:31:9f:59:60:12:0b:99:29: d5:aa:63:67:35:57:08:49:68:cb:12:a5:8b:37:2a:28:fc:59: 44:02:fb:3f:f1:cd:b8:37:02:2d:40:57:07:55:f7:5f:45:7e: 08:c3:55:1b:05:92:a0:36:0c:46:c4:31:66:88:6a:7f:a2:77: eb:82:7e:63:7c:49:61:22:1a:e8:45:98:72:d5:dd:98:31:5c: 0b:0d:03:51:e8:9d:17:7c:db:42:3a:cb:36:ec:52:53:1a:00: 96:ca:be:e3:25:ee:37:16:2e:db:14:44:e3:20:6f:a3:34:30: 84:66:74:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6jpD2Pfnueu6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1 YTNjMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Y2JmNTM0MmQtZjhiMC00NTUyLWFiYjktNTY5OTcyMzYyNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/LLDST2vjmI4OvPT9Z32Kq5C/tPhWie5bu+ LDyj1LKeIimjCTiqgaEk19DOTLQYU0IDd172r97u6gEjdtGsI3rtD9JHD9SPfuSZ X3zYLjIYpivm7y8pFpJNZpQi2p2f8BW/94WQBqV9lf+I/LIEhfCXGjvw8EZf51Ny 83512x5a0KRBf9nxns6GLj1d6COap4B707RJcyVEB/ClUZ5lj5p/D1rei06d7SvH 797OFn/x8eztON1QGEr/E8xusDX21eFwdzIy4/0Mv335lRzxM5d+LgGBws1ZOcoX Xx4/AsJRqZD75yiwfmP41SeYWyDJqRQUdThlzrIHXeN03jwbWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFahTudN0Wl3r37AhcwWd+qVzNpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1 ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvMDljNzY0NWUtZjRjMy0z MTA2LTg5NTgtOWE5ZmM2NDI5YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+1FfeT66R65xFfrrK1gcWsZOglprulW0TJUsChOJqng6ZTiZ8lafX6 GdNHbAJ934WNvVIRWZ0PbUeY7YOBPx+iywUPwAu6WEuZTuJnxPkIy50Vc5Ik+Xhd E+aaQ4VHSe1bDMwV4K573zMgQ21b+4s1vvVCXcDLxhQRdTrlM3i4ifLbnSkw9nkx n1lgEguZKdWqY2c1VwhJaMsSpYs3Kij8WUQC+z/xzbg3Ai1AVwdV919FfgjDVRsF kqA2DEbEMWaIan+id+uCfmN8SWEiGuhFmHLV3ZgxXAsNA1HonRd820I6yzbsUlMa AJbKvuMl7jcWLtsUROMgb6M0MIRmdLI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:23 2025 by rpki-client