$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa File: eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa (raw, json) Hash identifier: d8bBm/L/SpqsCjzjmbkQYg39rBONZylH8sVfLsJYoeQ= Subject key identifier: 1C:67:A8:E4:60:9D:0C:B1:3C:30:21:98:CE:45:0C:69:17:C1:BD:E6 Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F4328584BB45D19745FFB642962FE3520 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 53507 IP address blocks: 162.0.156.0/22 maxlen: 24 173.243.16.0/20 maxlen: 24 199.96.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:19:74:5f:fb:64:29:62:fe:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=cbb71190-c947-437c-a077-e012d927561c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:23:a6:d8:e9:e1:ea:29:5b:75:06:49:b4: 61:6d:99:f1:76:73:30:c1:95:c4:2a:14:60:48:6f: 77:f9:b8:24:2e:04:88:ea:42:e4:6a:0d:ce:99:08: 21:1a:4c:b3:aa:c2:59:b0:dc:0c:e4:38:74:c5:ba: 6e:6c:22:60:0a:4c:85:2f:bb:cc:43:9d:7c:37:a3: 9e:65:a6:d5:03:8a:35:29:7c:4f:75:e9:0d:8b:7f: e7:7c:33:04:fe:83:74:64:62:a6:f5:4f:30:ee:3e: 6b:1e:13:71:99:5d:58:7a:eb:22:15:83:65:dd:2f: 3d:72:a4:e9:ac:4b:3e:3d:b5:34:89:c4:55:ef:0f: 9f:5f:08:9f:dd:f4:94:4d:5e:da:7f:02:ea:99:b6: 8d:cf:c6:fc:cc:38:8b:22:2a:d2:b6:5d:db:b8:ac: b1:92:9c:09:63:36:6c:bc:0f:95:e4:02:da:bd:0a: 75:be:66:56:2c:df:8e:44:2f:69:56:9a:bb:3f:48: 95:a2:55:b6:bb:80:6a:20:c9:1a:2f:29:46:70:c9: 4f:02:b5:f0:1e:a6:7a:76:07:b9:8f:7e:f4:2f:3f: 6a:e0:a1:cc:d4:c7:bf:39:4c:6f:35:47:49:bf:6c: ff:00:11:a3:bd:ee:9b:d6:35:1a:7f:c4:6c:8c:67: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:67:A8:E4:60:9D:0C:B1:3C:30:21:98:CE:45:0C:69:17:C1:BD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv4: 162.0.156.0/22 173.243.16.0/20 199.96.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c1:06:a3:1e:e2:11:a2:25:e9:e3:ed:2b:f1:18:0f:6c:02: 96:1c:07:a8:69:5e:ae:2d:0b:40:5e:0c:38:43:0b:dd:27:ce: 3e:ee:92:35:18:27:89:da:9a:a1:96:7f:fa:11:1f:08:4d:b4: f8:03:8d:b6:ff:bb:43:4e:57:12:26:be:03:77:67:4b:fd:b1: b9:95:c0:02:f6:dd:1a:ed:88:79:1a:84:52:8d:68:22:0d:e7: 5a:fc:75:93:57:b9:83:a8:d3:23:08:d7:bc:dc:5c:16:aa:bd: 75:4e:b0:fc:35:84:67:0a:81:17:ff:25:e2:8d:e7:be:97:40: 9f:8d:8f:3f:9b:48:ba:c0:97:68:92:3e:3b:36:ce:33:99:ea: 3a:5e:9b:62:64:80:8b:7d:66:c1:17:95:f7:36:6a:87:80:8b: b7:da:2b:18:21:d4:9f:ce:97:ed:f7:33:c4:d4:24:f3:db:36: aa:2b:42:d7:c1:0c:b1:35:5d:a6:91:4f:5d:8a:90:c1:73:4e: 9e:6d:1e:cd:dc:22:f4:e5:11:a6:78:2b:61:40:e0:5e:4a:ac: fe:ab:6f:ae:58:1a:f8:b5:e7:ca:6c:de:91:99:b7:06:8d:70: 13:d5:a5:d8:16:62:58:d6:5a:c4:e3:61:60:bf:39:20:4c:c6: f7:ce:66:cb -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu0XRl0X/tkKWL+NSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Y2JiNzExOTAtYzk0Ny00MzdjLWEwNzctZTAxMmQ5Mjc1NjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiusjptjp4eopW3UGSbRhbZnxdnMwwZXEKhRg SG93+bgkLgSI6kLkag3OmQghGkyzqsJZsNwM5Dh0xbpubCJgCkyFL7vMQ518N6Oe ZabVA4o1KXxPdekNi3/nfDME/oN0ZGKm9U8w7j5rHhNxmV1YeusiFYNl3S89cqTp rEs+PbU0icRV7w+fXwif3fSUTV7afwLqmbaNz8b8zDiLIirStl3buKyxkpwJYzZs vA+V5ALavQp1vmZWLN+ORC9pVpq7P0iVolW2u4BqIMkaLylGcMlPArXwHqZ6dge5 j370Lz9q4KHM1Me/OUxvNUdJv2z/ABGjve6b1jUaf8RsjGekewIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBxnqORgnQyxPDAhmM5FDGkXwb3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvZWI0NDUwNTgtMmM0My0z ZDUwLTlkNTUtN2M1YTY5ODVlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCogCcAwQE rfMQAwQCx2A0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALHBBqMe4hGiJenj7SvxGA9sApYcB6hpXq4tC0Be DDhDC90nzj7ukjUYJ4namqGWf/oRHwhNtPgDjbb/u0NOVxImvgN3Z0v9sbmVwAL2 3RrtiHkahFKNaCIN51r8dZNXuYOo0yMI17zcXBaqvXVOsPw1hGcKgRf/JeKN576X QJ+Njz+bSLrAl2iSPjs2zjOZ6jpem2JkgIt9ZsEXlfc2aoeAi7faKxgh1J/Ol+33 M8TUJPPbNqorQtfBDLE1XaaRT12KkMFzTp5tHs3cIvTlEaZ4K2FA4F5KrP6rb65Y Gvi158ps3pGZtwaNcBPVpdgWYljWWsTjYWC/OSBMxvfOZss= -----END CERTIFICATE-----Generated at Wed Nov 5 23:07:02 2025 by rpki-client