$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa File: 0ab997a0-9032-3aab-a0c8-de89d4870675.roa (raw, json) Hash identifier: YbaFGYvmWuXBoEI08kQ1GUZQrtRSTt3bfb8OsUejrX0= Subject key identifier: D3:37:CE:35:13:74:E9:2B:B4:22:CC:7E:DC:27:15:51:75:B5:F7:9E Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584B9E0798D39487114FC8818880 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 18726 IP address blocks: 206.55.100.0/22 maxlen: 24 208.89.40.0/21 maxlen: 24 2620:133:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:98:d3:94:87:11:4f:c8:81:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=c38de4d8-d3a4-4aa8-b011-8b954cb3fddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:c0:da:48:7a:cc:ff:18:a6:e4:b9:bd:ec: 9b:3d:8a:9e:09:f6:d9:fe:3c:8f:0f:1d:80:bb:fb: 16:89:7c:9b:ef:65:25:21:71:60:e3:2e:25:21:bb: 6f:6b:2e:44:4b:12:e4:37:62:97:93:d9:d0:ba:d7: 5e:e7:34:17:aa:3d:84:90:57:04:f3:76:00:09:f4: 62:97:9c:5b:2e:8d:d9:23:e3:e8:fb:42:ad:ce:c0: d5:cc:04:06:0f:1c:39:55:a9:11:20:af:fc:93:fa: 83:53:ec:90:14:71:bd:06:a1:ed:86:f2:62:74:43: a6:27:b0:b2:83:8e:6c:eb:14:bc:7c:64:7d:b3:ac: 59:9d:0d:4f:82:5f:00:f5:81:5d:3e:3e:42:61:b8: 5f:81:de:1c:dd:87:0b:e3:ae:e0:e6:ca:c1:d5:8f: 5b:b5:f8:7c:8f:7b:89:bb:2a:40:52:40:89:ea:0a: b3:4f:d4:e7:2d:4d:4e:11:6a:66:0e:9e:5b:3c:86: 85:23:0d:19:3a:fc:fe:bd:6f:57:5b:01:6d:f8:8e: a7:e1:29:1d:82:1d:92:94:a7:78:14:4b:8b:38:4f: 21:1c:9b:96:d8:c1:8b:9d:20:5e:dc:e5:9a:7f:ae: ea:04:d0:6a:31:ff:b0:29:7a:d8:c9:f6:ba:4b:31: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:CE:35:13:74:E9:2B:B4:22:CC:7E:DC:27:15:51:75:B5:F7:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 206.55.100.0/22 208.89.40.0/21 IPv6: 2620:133:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:11:8f:e8:8a:4a:74:68:c9:a4:9b:46:33:24:e8:58:7b:68: f4:a6:03:3b:6f:c0:ec:3c:37:0f:2f:32:b1:74:60:34:e1:97: 0d:2a:4f:04:bd:07:0d:db:4e:fd:34:93:71:0f:f0:3e:41:99: 1e:fa:7f:22:80:2c:f7:49:e0:f0:fe:a1:51:a7:4a:ed:04:cf: d8:c6:fd:8d:a5:d2:02:df:08:a4:12:00:ba:a3:f0:5e:6e:89: 00:24:70:ce:ad:b0:5e:98:15:ae:90:56:1e:00:c7:14:ca:2a: 69:99:87:9c:eb:da:bc:d3:12:55:e9:35:a3:25:4d:12:a4:c9: d5:dd:ca:1e:56:60:25:f0:d0:70:02:df:85:87:51:b6:ec:96: 95:7b:50:d8:2e:89:eb:9b:4d:f5:ee:f3:fa:ca:92:31:ae:f0: 59:0d:53:6a:d5:ab:e7:5d:c6:34:70:3a:98:e1:9b:fe:0f:89: 1b:29:b6:33:a9:96:4d:74:28:aa:bb:24:8e:4e:a1:dc:20:b9: c6:be:a1:b4:f3:d0:8c:fd:1e:9a:d4:ec:06:81:8c:5d:69:13: d8:f3:7c:ad:8b:a1:ad:71:c9:2c:3e:f6:41:67:ed:55:6f:a1: 1b:21:1f:f3:7a:d7:48:95:8f:28:88:6c:0c:0e:54:dd:a7:e0: de:de:e7:1c -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEueB5jTlIcRT8iBiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YzM4ZGU0ZDgtZDNhNC00YWE4LWIwMTEtOGI5NTRjYjNmZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkavA2kh6zP8YpuS5veybPYqeCfbZ/jyPDx2A u/sWiXyb72UlIXFg4y4lIbtvay5ESxLkN2KXk9nQutde5zQXqj2EkFcE83YACfRi l5xbLo3ZI+Po+0KtzsDVzAQGDxw5VakRIK/8k/qDU+yQFHG9BqHthvJidEOmJ7Cy g45s6xS8fGR9s6xZnQ1Pgl8A9YFdPj5CYbhfgd4c3YcL467g5srB1Y9btfh8j3uJ uypAUkCJ6gqzT9TnLU1OEWpmDp5bPIaFIw0ZOvz+vW9XWwFt+I6n4Skdgh2SlKd4 FEuLOE8hHJuW2MGLnSBe3OWaf67qBNBqMf+wKXrYyfa6SzFkPwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFNM3zjUTdOkrtCLMftwnFVF1tfeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGFiOTk3YTAtOTAzMi0z YWFiLWEwYzgtZGU4OWQ0ODcwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCzjdkAwQD 0FkoMA8EAgACMAkDBwQmIAEzwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARBGP6IpKdGjJpJtGMyToWHto 9KYDO2/A7Dw3Dy8ysXRgNOGXDSpPBL0HDdtO/TSTcQ/wPkGZHvp/IoAs90ng8P6h UadK7QTP2Mb9jaXSAt8IpBIAuqPwXm6JACRwzq2wXpgVrpBWHgDHFMoqaZmHnOva vNMSVek1oyVNEqTJ1d3KHlZgJfDQcALfhYdRtuyWlXtQ2C6J65tN9e7z+sqSMa7w WQ1TatWr513GNHA6mOGb/g+JGym2M6mWTXQoqrskjk6h3CC5xr6htPPQjP0emtTs BoGMXWkT2PN8rYuhrXHJLD72QWftVW+hGyEf83rXSJWPKIhsDA5U3afg3t7nHA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:47 2025 by rpki-client