$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa File: f18517cc-6da9-30ab-8184-12b511ccaa4c.roa (raw, json) Hash identifier: UvzwWYy26hTvr35D4j5zGj7JMKgacRvoqyS0eJy0hVw= Subject key identifier: DA:99:25:84:87:78:AF:FF:F6:B1:D1:8D:D9:6A:FF:C2:52:E6:1B:A2 Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F4328584BA0D24FB663FA14D50885C6A0 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30698 IP address blocks: 209.221.240.0/21 maxlen: 24 209.221.248.0/22 maxlen: 24 209.221.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4f:b6:63:fa:14:d5:08:85:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=231dbbba-fecd-4003-aac9-615bb70cd7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:26:c6:e0:43:50:75:2f:56:4f:73:74:7c: d3:ec:b4:3b:3b:62:f0:e4:61:00:a2:fb:93:8f:f8: ee:93:fc:a7:7a:59:ad:24:4f:39:f1:8a:92:53:b2: 29:5a:ae:c8:74:55:94:5e:17:39:e1:01:6d:e5:4a: 62:e3:90:bf:5e:0d:f7:ff:bb:78:a9:37:6d:7b:45: cb:e6:9c:de:b8:75:8a:05:31:d0:d7:f2:42:f6:ab: d9:8d:ce:42:5a:9a:f2:18:7f:1b:6e:60:1a:cd:df: e9:27:f8:e9:bd:e8:aa:b9:2d:b5:2f:bb:8a:c6:c2: 3e:a7:97:98:5c:6d:2b:74:d5:f8:ea:11:fc:b6:a9: 98:36:c0:fa:52:c6:96:3c:84:fc:47:b6:b2:a7:f5: d9:d2:4a:7e:e1:ff:f1:d7:12:2e:f5:1a:f6:00:2b: c6:6c:d2:4e:d4:a6:03:80:e9:7b:4f:dd:6c:ca:1a: d9:ab:2b:9d:ab:1d:aa:dd:f4:ba:78:79:19:0e:be: f4:80:3b:d0:ec:a5:b4:34:ae:f2:03:d0:48:63:0c: e7:3e:c8:31:02:47:2f:8a:cc:2b:0c:1b:de:ca:e0: de:71:68:35:86:ac:0d:4b:73:85:0b:78:26:31:7d: fb:92:5f:b9:fc:bb:b2:d8:2f:cd:56:37:34:48:b0: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:99:25:84:87:78:AF:FF:F6:B1:D1:8D:D9:6A:FF:C2:52:E6:1B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0-209.221.253.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:84:cf:18:6f:0f:f0:37:96:13:e2:81:eb:2e:7f:93:15: f3:4e:6a:91:f0:ab:eb:4f:9e:d4:7e:5e:47:3d:91:ba:50:5d: f4:94:72:d7:4e:a5:f2:d8:94:1d:87:1d:ee:d4:0c:e3:1a:bc: a9:af:4b:c3:df:65:b1:42:85:2c:04:68:09:84:33:17:f3:c2: b3:22:db:92:7e:40:2c:e2:31:33:3c:c9:25:9e:db:19:ba:2b: 8f:61:f3:26:02:0e:eb:06:56:b1:af:69:3b:28:e5:fd:da:bb: d9:a9:88:00:f1:72:43:0f:ff:d9:c7:58:12:cb:8b:18:eb:89: 7c:d7:83:95:a5:d7:3b:9e:7e:15:fa:4f:b5:c7:9b:5c:25:49: 80:fa:eb:19:63:ff:f5:75:da:96:6a:61:48:06:64:04:2d:f1: b9:c5:d2:7d:47:dc:e5:fe:08:d8:88:01:a8:cd:36:89:44:70: a1:4f:9b:5a:41:66:1f:75:2a:d8:8b:fa:40:2a:74:88:48:40: 14:0b:f3:0c:ec:b2:d5:fe:b3:8e:dc:a1:9d:df:8c:09:c5:80: 7f:f0:72:59:72:bf:35:44:a9:46:55:64:71:25:e3:5a:4f:a2: dd:e7:8c:b6:64:56:2c:39:ed:68:96:cf:ba:52:05:22:83:6c: 47:6a:3b:26 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEug0k+2Y/oU1QiFxqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MjMxZGJiYmEtZmVjZC00MDAzLWFhYzktNjE1YmI3MGNkN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliImxuBDUHUvVk9zdHzT7LQ7O2Lw5GEAovuT j/juk/ynelmtJE858YqSU7IpWq7IdFWUXhc54QFt5Upi45C/Xg33/7t4qTdte0XL 5pzeuHWKBTHQ1/JC9qvZjc5CWpryGH8bbmAazd/pJ/jpveiquS21L7uKxsI+p5eY XG0rdNX46hH8tqmYNsD6UsaWPIT8R7ayp/XZ0kp+4f/x1xIu9Rr2ACvGbNJO1KYD gOl7T91syhrZqyudqx2q3fS6eHkZDr70gDvQ7KW0NK7yA9BIYwznPsgxAkcviswr DBveyuDecWg1hqwNS3OFC3gmMX37kl+5/Luy2C/NVjc0SLCBnQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNqZJYSHeK//9rHRjdlq/8JS5huiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjE4NTE3Y2MtNmRhOS0z MGFiLTgxODQtMTJiNTExY2NhYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATR3fAD BAHR3fwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZSeEzxhvD/A3lhPigesuf5MV805qkfCr60+e1H5eRz2R ulBd9JRy106l8tiUHYcd7tQM4xq8qa9Lw99lsUKFLARoCYQzF/PCsyLbkn5ALOIx MzzJJZ7bGborj2HzJgIO6wZWsa9pOyjl/dq72amIAPFyQw//2cdYEsuLGOuJfNeD laXXO55+FfpPtcebXCVJgPrrGWP/9XXalmphSAZkBC3xucXSfUfc5f4I2IgBqM02 iURwoU+bWkFmH3Uq2Iv6QCp0iEhAFAvzDOyy1f6zjtyhnd+MCcWAf/ByWXK/NUSp RlVkcSXjWk+i3eeMtmRWLDntaJbPulIFIoNsR2o7Jg== -----END CERTIFICATE-----Generated at Fri Nov 7 11:25:20 2025 by rpki-client