$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0328d7d2-29d1-38a3-958b-4ca2d3e6c8f7.roa File: 0328d7d2-29d1-38a3-958b-4ca2d3e6c8f7.roa (raw, json) Hash identifier: sc5YMrgj481eFvV4O1btNCSp2yMEDBCsfYbUwr3PkV4= Subject key identifier: FB:68:2D:30:6C:CC:82:1E:CA:70:1F:4C:A8:3A:2D:21:C6:60:A3:FA Certificate issuer: /CN=0bab5692-2f22-42f2-9aef-ca4cbe4685b6 Certificate serial: 010D0C9F4328584BA39D1449ECB474EC638CEE00 Authority key identifier: C8:56:A0:CB:D0:9A:0B:3E:F3:25:67:F1:B2:B1:13:C6:88:B7:D5:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0328d7d2-29d1-38a3-958b-4ca2d3e6c8f7.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 29776 IP address blocks: 208.79.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:14:49:ec:b4:74:ec:63:8c:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bab5692-2f22-42f2-9aef-ca4cbe4685b6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=dbd1d2e5-4670-4ec0-9990-09e122dd6ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0f:d2:12:c2:8a:76:0e:8a:16:0c:47:3d:94: b7:ff:18:73:00:b0:e0:23:59:46:67:78:d7:6d:23: 10:7a:c5:e1:a2:3a:e2:84:8d:65:9e:47:26:9c:57: da:b7:c1:d7:1d:81:fa:65:0f:a7:b6:d7:7b:ff:51: cb:db:a4:74:01:67:60:9c:70:62:6a:bb:c0:29:07: f5:99:65:d7:af:c5:75:b2:0d:b5:3f:51:ce:64:81: 8b:23:ef:21:dc:1e:da:20:c5:b7:2b:10:b6:d5:1c: dc:07:be:02:7e:36:57:d3:73:26:11:a5:57:18:15: cc:21:f5:f9:1c:2e:0e:23:0b:e2:e3:37:02:dc:9a: 63:20:93:01:72:e7:83:16:4b:5e:63:f0:c4:bd:01: b7:71:37:c4:a9:68:cf:1a:09:53:2b:ff:c2:e9:f6: fc:8b:d3:4c:7b:8b:bb:42:9a:0a:44:2b:5f:0b:6a: 84:25:15:88:b3:7e:22:e1:89:11:7c:b4:d4:7d:cd: 1a:8c:f0:6c:cf:69:6f:a5:8b:9b:53:d4:62:60:c9: ea:45:5d:2e:29:95:9c:14:e0:22:ab:1d:81:b4:fc: b7:08:14:8d:d5:8d:75:a6:ef:73:00:8c:97:e7:f6: 30:20:87:03:0e:bb:d7:02:ca:cb:c5:e6:d2:0f:07: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:68:2D:30:6C:CC:82:1E:CA:70:1F:4C:A8:3A:2D:21:C6:60:A3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0328d7d2-29d1-38a3-958b-4ca2d3e6c8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.crl X509v3 Authority Key Identifier: keyid:C8:56:A0:CB:D0:9A:0B:3E:F3:25:67:F1:B2:B1:13:C6:88:B7:D5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bab5692-2f22-42f2-9aef-ca4cbe4685b6.cer sbgp-ipAddrBlock: critical IPv4: 208.79.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d7:13:05:25:4a:5e:bb:1d:1f:10:9b:53:d0:04:33:0f:3f: 36:50:0f:37:a1:fe:5b:c6:0e:19:25:af:33:ec:20:70:d7:81: 94:60:25:97:40:73:fa:f8:70:45:0a:08:96:4b:7d:ce:f3:b2: ea:f1:fe:57:48:e6:98:ce:45:97:1c:c3:44:28:24:4c:59:5e: 6f:93:05:ed:47:83:82:02:5e:42:5c:34:73:ad:5f:3a:d2:e1: 90:bc:f0:c1:c4:b3:e7:90:91:3f:42:bc:c4:f8:30:6d:d3:d8: 65:66:b7:88:70:37:2e:0f:46:a1:de:8d:da:b1:df:a2:55:99: fa:00:59:21:58:c0:59:1d:a2:c6:37:af:1f:2c:8a:f8:ce:ce: 2d:1f:cb:af:2d:df:a9:0d:fe:51:af:44:8b:67:6f:c9:d7:d9: f6:9f:92:18:1c:84:22:df:dd:7a:a2:ef:92:e2:95:20:6b:a4: 3b:db:21:fe:a7:70:ea:33:c6:0f:3b:e0:6c:fd:b9:ca:7b:69: d6:a4:c0:ec:e8:fe:12:c2:2b:cb:06:68:ad:b5:bc:13:7c:39: 59:6a:74:fb:3f:1d:f0:ca:b4:09:f6:ed:1f:c7:90:b2:3a:0f: d1:83:d4:74:0f:65:59:4a:8a:ab:c0:fc:0a:02:75:56:fd:9f: b3:a1:83:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRRJ7LR07GOM7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJhYjU2OTItMmYyMi00MmYyLTlhZWYtY2E0Y2JlNDY4 NWI2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGJkMWQyZTUtNDY3MC00ZWMwLTk5OTAtMDllMTIyZGQ2ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA/SEsKKdg6KFgxHPZS3/xhzALDgI1lGZ3jX bSMQesXhojrihI1lnkcmnFfat8HXHYH6ZQ+nttd7/1HL26R0AWdgnHBiarvAKQf1 mWXXr8V1sg21P1HOZIGLI+8h3B7aIMW3KxC21RzcB74CfjZX03MmEaVXGBXMIfX5 HC4OIwvi4zcC3JpjIJMBcueDFkteY/DEvQG3cTfEqWjPGglTK//C6fb8i9NMe4u7 QpoKRCtfC2qEJRWIs34i4YkRfLTUfc0ajPBsz2lvpYubU9RiYMnqRV0uKZWcFOAi qx2BtPy3CBSN1Y11pu9zAIyX5/YwIIcDDrvXAsrLxebSDwco3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtoLTBszIIeynAfTKg6LSHGYKP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYmFi NTY5Mi0yZjIyLTQyZjItOWFlZi1jYTRjYmU0Njg1YjYvMDMyOGQ3ZDItMjlkMS0z OGEzLTk1OGItNGNhMmQzZTZjOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGJhYjU2OTItMmYyMi00MmYyLTlh ZWYtY2E0Y2JlNDY4NWI2LzBiYWI1NjkyLTJmMjItNDJmMi05YWVmLWNhNGNiZTQ2 ODViNi5jcmwwHwYDVR0jBBgwFoAUyFagy9CaCz7zJWfxsrETxoi31f8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYmFiNTY5Mi0yZjIyLTQyZjItOWFlZi1jYTRj YmU0Njg1YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E+1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzXEwUlSl67HR8Qm1PQBDMPPzZQDzeh/lvGDhklrzPsIHDXgZRgJZdA c/r4cEUKCJZLfc7zsurx/ldI5pjORZccw0QoJExZXm+TBe1Hg4ICXkJcNHOtXzrS 4ZC88MHEs+eQkT9CvMT4MG3T2GVmt4hwNy4PRqHejdqx36JVmfoAWSFYwFkdosY3 rx8sivjOzi0fy68t36kN/lGvRItnb8nX2fafkhgchCLf3Xqi75LilSBrpDvbIf6n cOozxg874Gz9ucp7adakwOzo/hLCK8sGaK21vBN8OVlqdPs/HfDKtAn27R/HkLI6 D9GD1HQPZVlKiqvA/AoCdVb9n7Ohg5A= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:18 2025 by rpki-client