$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa File: c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa (raw, json) Hash identifier: kx2qFB6eVRHBxQBabIGLRpvdJOlUaKVx1CxDY+JCXLo= Subject key identifier: 4B:41:8E:4A:39:3D:85:5B:A7:05:A6:0D:74:DD:27:25:9B:C3:FD:6A Certificate issuer: /CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0 Certificate serial: 010D0C9F4328584B9E0796D3D1EBFAA4F9162980 Authority key identifier: E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 205.166.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:96:d3:d1:eb:fa:a4:f9:16:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=7447e709-e471-47f7-a8b2-84492c3eb44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:41:e5:e7:a6:fd:c7:e1:5f:6f:20:36:48: 82:77:fb:99:7d:07:67:3e:09:9f:99:3e:00:34:8c: 14:a6:f9:af:5f:c2:7d:f1:1b:c2:0a:fd:73:92:f0: 7f:2c:97:bb:e9:99:f9:2a:eb:e6:b6:dc:80:d8:7e: 7a:2d:5e:c7:4e:7c:80:5d:0d:62:a8:d7:da:aa:f0: cf:d0:82:f7:a9:88:47:06:70:2b:bd:d1:ee:a8:3f: 97:54:23:fc:02:79:ea:e7:6f:bc:f1:8e:ac:53:d2: 5b:ee:3b:ad:4e:11:d9:48:d5:3f:2a:6c:a8:27:7e: 93:af:42:69:3a:22:c1:24:6c:64:86:46:f1:86:9f: 74:7d:2f:08:ea:6a:67:4d:19:5a:0f:ad:40:3a:5e: 61:51:35:2d:aa:f5:13:35:7e:6d:a4:bc:6d:f0:bd: 24:2c:7b:ca:18:12:5b:76:e4:65:c3:e6:49:b9:ed: ad:3a:6a:0b:d6:5e:79:96:d0:95:93:eb:b0:10:12: dc:16:f8:1c:53:9a:0e:c2:fb:4f:e0:a0:32:a9:71: 29:ed:31:63:f6:04:cf:f8:2e:75:92:ec:d6:91:f3: 30:1e:a2:43:c1:a2:c5:69:6d:c7:9c:ff:ae:1a:f0: aa:2d:e8:b8:41:72:b4:ea:02:44:86:4a:a7:0d:30: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:8E:4A:39:3D:85:5B:A7:05:A6:0D:74:DD:27:25:9B:C3:FD:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl X509v3 Authority Key Identifier: keyid:E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer sbgp-ipAddrBlock: critical IPv4: 205.166.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ed:bb:01:40:54:72:e7:de:f0:1e:e4:7b:36:29:fb:9d:1e: af:6a:bb:86:55:2b:92:aa:c3:83:e3:3b:56:4a:9b:87:6b:2c: e3:91:17:ac:42:ce:d0:02:d3:44:d5:7c:74:df:d6:34:4b:d1: 7f:bd:9b:a1:92:ea:82:e4:10:0a:f8:ec:32:6b:b2:3d:70:8d: 7c:4a:6e:ed:9e:2a:fe:98:54:0a:35:10:ed:19:81:6e:f8:93: af:e8:04:a7:2f:11:57:e8:45:4e:77:30:14:f3:96:06:7b:f4: 93:cd:8d:a1:df:bc:e6:41:2a:ff:4f:d5:b0:c2:98:a4:a9:ce: 5c:a6:45:b3:59:77:fe:b9:84:51:10:16:38:4b:c1:fa:2b:5b: ec:a0:f0:da:eb:31:1e:c1:42:f7:e7:20:9b:10:4e:56:13:f6: 51:a3:95:25:e1:fa:69:dd:68:de:14:1c:3b:81:ff:7f:a9:cc: 72:ff:a3:c5:74:6a:56:d2:ae:45:6e:14:fe:d4:72:f4:f3:69: 56:45:62:6a:fc:69:7b:58:92:51:d7:75:72:06:55:ce:28:42: 64:0b:d6:73:29:db:71:ed:c5:c0:f4:a5:0a:41:30:90:9f:0b: 6b:b4:f6:f9:38:90:f9:81:bb:34:b5:ca:78:80:da:72:7a:69: ec:41:b1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5bT0ev6pPkWKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlOTRiMDktNzE0My00NjNkLWEyMTctZjdlNjJmNGE3 ZGMwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzQ0N2U3MDktZTQ3MS00N2Y3LWE4YjItODQ0OTJjM2ViNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyONB5eem/cfhX28gNkiCd/uZfQdnPgmfmT4A NIwUpvmvX8J98RvCCv1zkvB/LJe76Zn5KuvmttyA2H56LV7HTnyAXQ1iqNfaqvDP 0IL3qYhHBnArvdHuqD+XVCP8Annq52+88Y6sU9Jb7jutThHZSNU/KmyoJ36Tr0Jp OiLBJGxkhkbxhp90fS8I6mpnTRlaD61AOl5hUTUtqvUTNX5tpLxt8L0kLHvKGBJb duRlw+ZJue2tOmoL1l55ltCVk+uwEBLcFvgcU5oOwvtP4KAyqXEp7TFj9gTP+C51 kuzWkfMwHqJDwaLFaW3HnP+uGvCqLei4QXK06gJEhkqnDTAsmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtBjko5PYVbpwWmDXTdJyWbw/1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWU5 NGIwOS03MTQzLTQ2M2QtYTIxNy1mN2U2MmY0YTdkYzAvYzg4ZmRjODYtZWM3MS0z NGIzLThlMDYtODFjMmM0YjU1NWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlOTRiMDktNzE0My00NjNkLWEy MTctZjdlNjJmNGE3ZGMwLzRhZTk0YjA5LTcxNDMtNDYzZC1hMjE3LWY3ZTYyZjRh N2RjMC5jcmwwHwYDVR0jBBgwFoAU5hGsODMK1ac7gA1FC3XEmn0AydAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YWU5NGIwOS03MTQzLTQ2M2QtYTIxNy1mN2U2 MmY0YTdkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzabDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7tuwFAVHLn3vAe5Hs2KfudHq9qu4ZVK5Kqw4PjO1ZKm4drLOORF6xC ztAC00TVfHTf1jRL0X+9m6GS6oLkEAr47DJrsj1wjXxKbu2eKv6YVAo1EO0ZgW74 k6/oBKcvEVfoRU53MBTzlgZ79JPNjaHfvOZBKv9P1bDCmKSpzlymRbNZd/65hFEQ FjhLwforW+yg8NrrMR7BQvfnIJsQTlYT9lGjlSXh+mndaN4UHDuB/3+pzHL/o8V0 albSrkVuFP7UcvTzaVZFYmr8aXtYklHXdXIGVc4oQmQL1nMp23HtxcD0pQpBMJCf C2u09vk4kPmBuzS1yniA2nJ6aexBsaM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:13 2025 by rpki-client