$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa File: d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa (raw, json) Hash identifier: AVSUHxSx43T4cRB2gXjFFCZUwYOFJw8mE3/LZeobfqI= Subject key identifier: 0C:CB:99:B9:7F:93:DB:83:76:52:AB:B5:5E:A3:8F:D7:E7:EF:B2:0C Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78CCC4DA2364B524E2F40 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 172.110.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8c:cc:4d:a2:36:4b:52:4e:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7ac4906c-baa0-463e-b380-2f8e9391c145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:9e:da:44:c2:cf:79:fa:e5:3b:dc:38:f2: d1:ff:b6:19:22:c3:16:9a:9a:00:ec:a1:ed:2a:c4: 71:d6:80:d8:7a:13:1c:f6:e5:8c:92:f5:57:0c:f2: 44:f0:27:82:bd:9e:68:86:4d:6a:2f:3c:10:f4:e3: b4:e1:b9:87:e3:46:aa:e6:2f:71:54:58:d1:77:28: 70:ae:ba:a2:2c:50:3b:0c:9f:11:54:dc:d6:88:85: 9d:1f:af:6c:43:f3:27:21:da:06:e0:3d:d1:05:b4: 74:89:a0:bc:59:6d:43:9b:c7:a6:9b:ed:65:cc:63: 32:d2:ff:21:74:06:82:d2:fb:0c:59:d0:5e:da:d6: e7:13:4b:ba:86:18:6a:6c:60:da:49:90:13:25:5e: a1:e7:d5:40:b8:76:0c:01:91:09:53:e8:67:d8:a5: 0f:ae:cd:3b:7d:80:87:56:8b:8b:28:c7:18:4f:49: 65:9d:4d:11:b6:b5:e5:21:13:81:ee:ec:74:15:81: e9:39:ce:c7:97:08:02:9b:93:42:c3:e3:4d:b6:0b: 76:b0:8f:42:5f:ba:73:a5:62:06:26:ff:47:81:46: 04:c6:64:70:a3:a3:a8:ad:86:13:a9:ae:75:39:32: e3:96:0e:3c:42:ca:64:cb:04:1d:a2:d5:2f:89:fc: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CB:99:B9:7F:93:DB:83:76:52:AB:B5:5E:A3:8F:D7:E7:EF:B2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 172.110.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:18:eb:70:66:df:a3:e7:37:b0:f5:8c:8b:b0:6b:1f:8d:d2: 16:10:81:16:aa:df:48:33:a5:c8:e5:64:fd:7f:0b:5f:53:5b: b8:de:a8:ab:55:8c:67:29:88:40:43:b8:82:5f:a0:76:91:8c: bc:3a:5e:f6:25:98:69:59:83:30:5d:a8:d8:3e:11:e7:eb:f3: 81:64:07:43:e8:d1:62:72:92:df:40:9d:bf:ce:ae:2b:82:3b: 59:0e:de:76:77:cc:f0:ac:71:95:15:16:60:e0:f9:8f:76:dc: ee:fb:d5:2f:2d:f8:11:cd:0b:8b:9c:5c:8e:c1:e2:3f:29:b0: 54:25:b4:bb:b4:9b:dc:5a:2d:91:46:8e:48:40:cd:11:79:cc: 3c:a8:b3:77:05:71:de:e9:55:65:d3:d4:78:fc:f0:e0:8d:d5: 61:21:47:2b:b2:26:8f:e2:25:9b:35:6c:f4:3f:63:95:89:11: c6:0c:5d:e8:84:08:66:8d:bb:e8:41:c6:d8:f6:2c:c1:f8:1f: 99:57:1f:fe:39:04:a5:65:dd:2e:b3:d5:69:a2:68:24:68:ed: aa:12:11:13:93:8e:dc:91:c3:15:15:a4:7d:70:98:15:77:c7: ed:7c:2b:e1:65:a9:3f:94:5a:ba:fe:07:59:62:7b:a2:23:52: 85:b9:ee:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4zMTaI2S1JOL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2FjNDkwNmMtYmFhMC00NjNlLWIzODAtMmY4ZTkzOTFjMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsye2kTCz3n65TvcOPLR/7YZIsMWmpoA7KHt KsRx1oDYehMc9uWMkvVXDPJE8CeCvZ5ohk1qLzwQ9OO04bmH40aq5i9xVFjRdyhw rrqiLFA7DJ8RVNzWiIWdH69sQ/MnIdoG4D3RBbR0iaC8WW1Dm8emm+1lzGMy0v8h dAaC0vsMWdBe2tbnE0u6hhhqbGDaSZATJV6h59VAuHYMAZEJU+hn2KUPrs07fYCH VouLKMcYT0llnU0RtrXlIROB7ux0FYHpOc7HlwgCm5NCw+NNtgt2sI9CX7pzpWIG Jv9HgUYExmRwo6OorYYTqa51OTLjlg48QspkywQdotUvifw+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzLmbl/k9uDdlKrtV6jj9fn77IMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDUzNGNmMGYtNmY3Yy0z YjBmLWIyNzQtMGUxYmQ3MzZkNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYY63Bm36PnN7D1jIuwax+N0hYQgRaq30gzpcjlZP1/C19TW7jeqKtV jGcpiEBDuIJfoHaRjLw6XvYlmGlZgzBdqNg+Eefr84FkB0Po0WJykt9Anb/OriuC O1kO3nZ3zPCscZUVFmDg+Y923O771S8t+BHNC4ucXI7B4j8psFQltLu0m9xaLZFG jkhAzRF5zDyos3cFcd7pVWXT1Hj88OCN1WEhRyuyJo/iJZs1bPQ/Y5WJEcYMXeiE CGaNu+hBxtj2LMH4H5lXH/45BKVl3S6z1WmiaCRo7aoSEROTjtyRwxUVpH1wmBV3 x+18K+FlqT+UWrr+B1lie6IjUoW57g4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:46:17 2025 by rpki-client