$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa File: 3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa (raw, json) Hash identifier: XkzQfSlMxVGsCXT8YFOiYkjwNHop2Lmi6z7Wg43A+1w= Subject key identifier: A4:C5:53:22:9E:3F:7A:E1:57:07:C6:61:F6:A2:73:DE:8E:FC:D9:8F Certificate issuer: /CN=109733f6-670d-4e02-a6e2-403ebf727263 Certificate serial: 010D0C9F4328584BA39D2423828465D7FE8EE512 Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 46741 IP address blocks: 216.228.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:24:23:82:84:65:d7:fe:8e:e5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=43ec3145-cbe9-4010-99a3-614190bde456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:cc:8f:0d:6c:05:7d:fd:c9:63:a3:a6:b7: cd:34:dd:f4:b8:87:5a:69:a8:b3:f9:37:78:e0:7a: 17:3d:3e:e3:0b:c4:4d:89:c2:4f:e1:f3:4f:87:e5: 39:7b:4e:1e:ec:0d:8c:89:55:52:18:75:d5:ac:9a: b7:20:65:60:3e:df:db:84:c0:80:29:b8:4e:cd:e1: ec:b6:c5:08:6f:0f:23:7a:f2:f3:b1:04:7a:9d:75: ab:4c:b5:45:c7:04:7d:ea:d0:9f:d6:12:6d:b9:f7: 4b:a2:44:bf:a5:bd:4e:b5:75:ae:1a:0f:0b:3c:46: 98:aa:ba:00:b6:78:41:ca:21:26:cb:23:5d:d0:6b: f2:6b:0c:00:92:54:cc:81:80:4e:94:a4:db:d1:b4: 8e:65:a7:3a:5f:83:62:47:cd:3a:dc:e8:3c:8f:45: 32:89:07:18:f0:f0:cb:04:64:94:65:4f:c3:01:78: 25:bd:2b:8b:9a:81:d9:a8:3c:02:37:87:17:17:a4: 5a:82:6c:b1:76:50:4e:f0:19:d2:40:45:20:ac:7e: 99:82:74:81:62:8e:f6:9e:1e:ba:f9:02:dc:0a:32: ba:32:84:cd:91:4f:6d:14:ef:c2:fd:bf:db:1d:d2: 0c:52:22:39:53:a7:e2:15:86:45:03:4b:87:9a:5a: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:53:22:9E:3F:7A:E1:57:07:C6:61:F6:A2:73:DE:8E:FC:D9:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl X509v3 Authority Key Identifier: keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer sbgp-ipAddrBlock: critical IPv4: 216.228.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a0:1e:d1:a3:9f:d0:3c:8f:35:09:2b:1d:64:8e:9d:1e:cb: 6d:c4:6f:42:5d:7b:67:40:aa:a1:80:ed:a4:68:6f:56:b6:db: 37:2a:75:9f:27:ac:53:f7:0b:24:44:f9:00:31:8d:a6:d7:ce: ac:a6:be:54:06:46:63:30:e8:50:d6:45:92:58:7e:de:15:49: 52:b4:c0:23:ba:02:60:61:06:64:41:af:20:00:8f:22:24:58: 27:b4:9f:8b:dd:e4:58:c4:dc:9d:bd:c1:8d:f9:39:0b:a1:05: 2a:48:b9:20:d1:35:9b:45:8f:64:ae:4b:16:25:a8:3c:8a:6e: 86:e2:79:1d:4a:91:29:44:41:ff:68:0a:6e:09:1d:ac:24:cd: 9f:69:55:7d:a7:8d:38:e4:e9:8a:17:17:e3:7a:37:ad:38:83: fa:bf:2e:02:d8:73:ba:e9:c1:12:90:26:72:25:45:b8:41:72: 24:df:7c:21:45:15:ce:c9:a9:cc:a5:4c:8f:4b:34:24:97:7e: f1:2b:64:82:9a:13:5a:cd:c2:20:24:a5:ca:f2:56:52:29:32: e7:7c:20:d6:4a:ea:0f:0f:26:d3:4e:d4:72:24:18:78:f0:33: 90:c1:52:10:32:cf:7d:16:c0:3e:de:6c:7e:13:2c:c9:cd:76: 35:b3:d2:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSQjgoRl1/6O5RIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5NzMzZjYtNjcwZC00ZTAyLWE2ZTItNDAzZWJmNzI3 MjYzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDNlYzMxNDUtY2JlOS00MDEwLTk5YTMtNjE0MTkwYmRlNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmbMjw1sBX39yWOjprfNNN30uIdaaaiz+Td4 4HoXPT7jC8RNicJP4fNPh+U5e04e7A2MiVVSGHXVrJq3IGVgPt/bhMCAKbhOzeHs tsUIbw8jevLzsQR6nXWrTLVFxwR96tCf1hJtufdLokS/pb1OtXWuGg8LPEaYqroA tnhByiEmyyNd0GvyawwAklTMgYBOlKTb0bSOZac6X4NiR8063Og8j0UyiQcY8PDL BGSUZU/DAXglvSuLmoHZqDwCN4cXF6RagmyxdlBO8BnSQEUgrH6ZgnSBYo72nh66 +QLcCjK6MoTNkU9tFO/C/b/bHdIMUiI5U6fiFYZFA0uHmlqTnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTFUyKeP3rhVwfGYfaic96O/NmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3 MzNmNi02NzBkLTRlMDItYTZlMi00MDNlYmY3MjcyNjMvM2NiYjFmY2YtOTkyNS0z MWM4LWIyYTctYzYzY2UwYjVjYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5NzMzZjYtNjcwZC00ZTAyLWE2 ZTItNDAzZWJmNzI3MjYzLzEwOTczM2Y2LTY3MGQtNGUwMi1hNmUyLTQwM2ViZjcy NzI2My5jcmwwHwYDVR0jBBgwFoAU6VzkBNOP6K017vlgU1aSnQ7BeSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3MzNmNi02NzBkLTRlMDItYTZlMi00MDNl YmY3MjcyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OTqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKgHtGjn9A8jzUJKx1kjp0ey23Eb0Jde2dAqqGA7aRob1a22zcqdZ8n rFP3CyRE+QAxjabXzqymvlQGRmMw6FDWRZJYft4VSVK0wCO6AmBhBmRBryAAjyIk WCe0n4vd5FjE3J29wY35OQuhBSpIuSDRNZtFj2SuSxYlqDyKbobieR1KkSlEQf9o Cm4JHawkzZ9pVX2njTjk6YoXF+N6N604g/q/LgLYc7rpwRKQJnIlRbhBciTffCFF Fc7JqcylTI9LNCSXfvErZIKaE1rNwiAkpcryVlIpMud8INZK6g8PJtNO1HIkGHjw M5DBUhAyz30WwD7ebH4TLMnNdjWz0j4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:39:20 2025 by rpki-client