$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa File: 257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa (raw, json) Hash identifier: NHMnOZToCQh1IzzsUaGs8OUky0GOurqRIgqlYH/yXBA= Subject key identifier: 57:E8:1C:DD:35:9F:A8:7C:49:DB:DA:BC:DB:10:21:8D:DA:47:70:4C Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584BAA979D2387C3A8EE9D0834C0 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 136473 IP address blocks: 168.245.216.0/21 maxlen: 24 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9d:23:87:c3:a8:ee:9d:08:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=b10907d4-2232-4d37-83e9-87d26393dc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:7c:d1:44:80:f6:08:40:68:08:c9:bc:8c: 70:91:36:a4:71:63:cf:a1:c9:76:f8:07:b8:31:a7: ec:54:99:05:d7:af:6e:9c:16:d1:3b:03:30:05:39: 84:3e:ff:e1:a6:e7:8b:3b:1f:66:a4:4f:76:8c:03: 70:df:35:a4:ec:16:c5:1e:ee:ad:a1:5c:9e:57:b5: c2:8f:b6:e9:54:bf:39:bd:5b:b8:c1:ef:91:58:7a: e9:36:49:37:02:af:2d:5b:ff:46:ca:34:85:ed:1d: 4d:3b:ca:d5:f8:81:35:0a:c5:85:f5:79:a8:c7:c6: 04:01:82:49:90:4d:54:5e:07:40:0a:f4:16:a3:bb: 14:fb:97:9a:3a:99:41:e2:68:78:04:52:ff:6d:cb: 8f:79:db:01:c6:11:fe:f6:4e:9d:5e:5b:6d:3a:80: 2c:50:d2:ec:52:66:5c:e3:02:5f:25:5e:f3:ad:b3: ac:1d:c8:26:ac:d6:c5:80:82:31:be:f2:66:81:24: fb:f5:17:f1:cd:a6:0c:ab:14:a8:30:a1:89:7d:b4: 01:a1:d1:d7:ec:99:34:29:be:1b:ce:ee:c0:35:2e: e9:ab:e9:04:99:be:8c:c4:0e:25:49:3c:df:13:e5: b0:10:84:9f:05:d8:c2:83:86:a7:e5:83:0c:8f:db: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E8:1C:DD:35:9F:A8:7C:49:DB:DA:BC:DB:10:21:8D:DA:47:70:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 168.245.216.0/21 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f3:95:58:58:3c:f5:98:13:a0:eb:93:46:44:b8:5b:19:1f: 42:f1:69:42:68:bb:e6:20:f9:ba:df:86:8b:b8:b3:83:ee:e2: dc:bd:90:65:c6:7d:a3:80:a0:88:cf:91:b9:13:1e:91:cb:cc: 23:a0:25:01:9c:e3:24:62:6a:22:99:d3:5c:01:21:8b:52:6f: 23:87:be:8d:33:7a:00:a9:ce:ee:30:bd:ff:6a:fb:2f:a6:e5: 83:13:94:3d:f2:67:ea:fd:29:97:8e:a2:e4:9c:a4:1a:30:20: e4:e8:8f:b6:f8:c2:86:bb:a4:4f:7a:02:80:b9:4b:ad:e5:1d: 92:85:d9:d4:d7:8d:30:ab:b1:8c:67:a5:9f:1f:64:a4:54:f8: 0f:9f:2a:41:22:1f:c5:1c:4a:d3:b0:12:5c:d6:90:0b:41:15: 74:22:59:e9:ba:10:96:0d:d9:50:6d:4a:6b:74:00:c5:52:c3: 9d:f4:6c:3c:d0:0d:84:40:88:7e:6e:92:ed:3e:43:1c:57:5a: 15:14:e2:11:2a:a3:53:28:8b:4d:5b:28:b4:28:4e:0a:00:8b: 52:d7:9b:af:1e:0c:d7:ed:33:70:60:7d:ed:4f:6c:65:e5:27: 88:5d:91:92:a5:d4:e9:d7:49:2b:ec:41:b0:23:65:98:94:70: 5b:fd:c2:71 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuql50jh8Oo7p0INMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YjEwOTA3ZDQtMjIzMi00ZDM3LTgzZTktODdkMjYzOTNkYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6F80USA9ghAaAjJvIxwkTakcWPPocl2+Ae4 MafsVJkF169unBbROwMwBTmEPv/hpueLOx9mpE92jANw3zWk7BbFHu6toVyeV7XC j7bpVL85vVu4we+RWHrpNkk3Aq8tW/9GyjSF7R1NO8rV+IE1CsWF9Xmox8YEAYJJ kE1UXgdACvQWo7sU+5eaOplB4mh4BFL/bcuPedsBxhH+9k6dXlttOoAsUNLsUmZc 4wJfJV7zrbOsHcgmrNbFgIIxvvJmgST79RfxzaYMqxSoMKGJfbQBodHX7Jk0Kb4b zu7ANS7pq+kEmb6MxA4lSTzfE+WwEISfBdjCg4an5YMMj9u1KQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFfoHN01n6h8SdvavNsQIY3aR3BMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMjU3ZTlhNDItNGVjMC0z YTg1LTg5YTktYTIwNWI4ZjllM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG 0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADHzlVhYPPWYE6Drk0ZEuFsZH0LxaUJou+Yg+brfhou4s4Pu 4ty9kGXGfaOAoIjPkbkTHpHLzCOgJQGc4yRiaiKZ01wBIYtSbyOHvo0zegCpzu4w vf9q+y+m5YMTlD3yZ+r9KZeOouScpBowIOToj7b4woa7pE96AoC5S63lHZKF2dTX jTCrsYxnpZ8fZKRU+A+fKkEiH8UcStOwElzWkAtBFXQiWem6EJYN2VBtSmt0AMVS w530bDzQDYRAiH5uku0+QxxXWhUU4hEqo1Moi01bKLQoTgoAi1LXm68eDNftM3Bg fe1PbGXlJ4hdkZKl1OnXSSvsQbAjZZiUcFv9wnE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:47 2025 by rpki-client