$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa File: fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa (raw, json) Hash identifier: dIsJOoDnHH4L8zEZnRqKx7rlOGj12TMUb55seLJtt4g= Subject key identifier: 37:77:AA:28:F9:C7:03:FD:75:92:42:EF:20:8B:0A:1E:93:AB:47:93 Certificate issuer: /CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97 Certificate serial: 010D0C9F4328584BBE403801560D12F7EFB6A800 Authority key identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 11052 IP address blocks: 159.212.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:38:01:56:0d:12:f7:ef:b6:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f47980c6-1072-42b6-acf6-b6d5f239143b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:78:4b:e8:a1:4e:c0:9a:11:a5:de:ba:a5: 56:27:e4:9a:b2:46:1e:b9:a0:92:41:d1:8d:a4:ad: a9:53:0e:24:e8:1b:f3:a7:e8:c3:14:f4:4c:b8:de: 22:bb:ed:ae:03:30:a4:ed:1d:63:62:ef:40:70:26: 67:68:a6:0e:6f:c2:21:b5:fa:3b:8f:c7:d5:b2:6d: 78:7d:fa:3b:53:8f:00:66:2d:2a:1f:27:38:a5:2f: ed:d6:81:a8:e5:57:c4:97:25:6d:f3:70:43:20:f7: af:b6:7e:0c:d3:64:5d:20:45:29:e5:13:07:33:c9: 8c:c5:b1:79:4a:c0:8d:69:5e:ad:78:32:e4:3a:5c: a1:42:6b:c2:88:97:8f:e9:a5:7d:5b:41:03:a8:c8: 52:85:77:3e:2e:18:43:0f:69:b9:75:a7:5c:70:ca: 0e:a6:d3:55:4a:ac:8a:48:02:c3:a0:1b:28:10:48: 87:b9:98:bf:3b:9d:23:b6:dc:8a:48:9c:6a:1f:45: 5d:f3:88:a0:97:ff:ab:dd:74:21:05:e4:5a:a6:c0: eb:ed:e9:54:00:b7:2f:fe:1b:14:38:b2:cf:77:d9: b7:ad:fc:76:50:4a:4d:b1:05:96:51:c6:72:6d:e0: 62:c8:e0:0a:7f:bb:9e:e4:e7:ba:8f:3b:f8:88:72: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:77:AA:28:F9:C7:03:FD:75:92:42:EF:20:8B:0A:1E:93:AB:47:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl X509v3 Authority Key Identifier: keyid:FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer sbgp-ipAddrBlock: critical IPv4: 159.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:30:9b:52:fd:6e:44:b3:06:33:fa:4f:ee:f7:81:db:92:ca: 14:88:78:4b:81:e4:c0:f1:03:76:8d:92:6f:22:e9:93:1a:7f: c6:ca:4a:99:1d:b4:52:ad:96:ad:38:12:c3:ff:52:b2:86:a9: f9:d3:6e:c5:cd:e7:59:c8:5f:dd:3e:21:3d:ef:89:50:c2:1c: 6f:fa:11:a8:8c:d1:b9:f8:e4:78:f4:92:59:2d:af:c2:fd:a8: 8f:65:ef:bd:64:58:87:21:d3:32:52:72:b4:b5:15:d5:33:21: a4:0d:08:4c:17:03:f7:fc:84:55:ba:a1:7a:07:21:73:f7:5a: 35:24:4e:47:a1:00:e1:4e:a3:7d:ba:d3:9e:50:28:8c:56:50: af:36:9c:ee:de:76:7c:3d:a8:d9:78:15:db:1b:b2:dc:0d:48: 03:7a:27:ac:64:50:5e:d7:3e:fa:9c:43:79:bf:69:28:c1:30: 17:68:41:05:47:40:5d:9d:68:c2:89:a7:ff:71:18:99:c8:aa: 33:3e:2d:39:a8:67:e3:08:b3:b9:50:3b:2d:8b:a6:42:4f:55: 09:7d:13:b4:1a:da:77:ad:56:48:51:69:12:0f:48:33:42:02: 3c:37:e7:2d:6a:9b:aa:7b:aa:50:b3:9b:5f:a4:42:ed:2b:08: e9:12:77:65 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEu+QDgBVg0S9++2qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhhYmM3ZWQtMGNmNC00NzM1LWI1OGYtZDZlODZmZGEw ZDk3MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjQ3OTgwYzYtMTA3Mi00MmI2LWFjZjYtYjZkNWYyMzkxNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BV4S+ihTsCaEaXeuqVWJ+SaskYeuaCSQdGN pK2pUw4k6Bvzp+jDFPRMuN4iu+2uAzCk7R1jYu9AcCZnaKYOb8Ihtfo7j8fVsm14 ffo7U48AZi0qHyc4pS/t1oGo5VfElyVt83BDIPevtn4M02RdIEUp5RMHM8mMxbF5 SsCNaV6teDLkOlyhQmvCiJeP6aV9W0EDqMhShXc+LhhDD2m5dadccMoOptNVSqyK SALDoBsoEEiHuZi/O50jttyKSJxqH0Vd84igl/+r3XQhBeRapsDr7elUALcv/hsU OLLPd9m3rfx2UEpNsQWWUcZybeBiyOAKf7ue5Oe6jzv4iHKS5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDd3qij5xwP9dZJC7yCLCh6Tq0eTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80OGFi YzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4NmZkYTBkOTcvZmVmODY4ZjAtYzhkZC0z MjAzLThjMGYtOTczOWI1N2VhMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDhhYmM3ZWQtMGNmNC00NzM1LWI1 OGYtZDZlODZmZGEwZDk3LzQ4YWJjN2VkLTBjZjQtNDczNS1iNThmLWQ2ZTg2ZmRh MGQ5Ny5jcmwwHwYDVR0jBBgwFoAU/D6E9h//jBvTcrXNsnH2Y3kttkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80OGFiYzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4 NmZkYTBkOTcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn9QwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOjCbUv1uRLMGM/pP7veB25LKFIh4S4HkwPEDdo2SbyLpkxp/xspKmR20 Uq2WrTgSw/9Ssoap+dNuxc3nWchf3T4hPe+JUMIcb/oRqIzRufjkePSSWS2vwv2o j2XvvWRYhyHTMlJytLUV1TMhpA0ITBcD9/yEVbqhegchc/daNSROR6EA4U6jfbrT nlAojFZQrzac7t52fD2o2XgV2xuy3A1IA3onrGRQXtc++pxDeb9pKMEwF2hBBUdA XZ1owomn/3EYmciqMz4tOahn4wizuVA7LYumQk9VCX0TtBrad61WSFFpEg9IM0IC PDfnLWqbqnuqULObX6RC7SsI6RJ3ZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:46 2025 by rpki-client