$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa File: 5b65963c-d23f-31a3-b848-4132887683b8.roa (raw, json) Hash identifier: tOUaE5zao6KerzLVQCCQ1YAv710LXztKQaywctJLZq4= Subject key identifier: F3:1E:9C:21:61:3A:51:35:20:79:7C:A0:34:B8:9D:1C:EF:BA:C2:05 Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584BA667A5B43B230624D289D3F0 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 395400 IP address blocks: 168.123.0.0/16 maxlen: 17 192.149.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a5:b4:3b:23:06:24:d2:89:d3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=d97fa8cf-6e0c-43ef-8dee-fec2b13a43a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:76:5e:9e:b8:c6:14:b9:30:c4:46:e3:7f: ec:5b:b8:32:85:d9:5e:62:b9:6d:94:7f:5f:34:52: 30:8a:c6:2a:6b:96:a3:4b:f7:44:c1:f7:42:d8:51: 05:c3:b9:59:67:73:aa:e0:7b:8c:90:0b:9c:dc:53: dd:eb:1f:cb:79:87:02:30:37:30:f9:5d:c3:d3:18: ef:c4:1c:6b:79:9c:9c:00:b4:0a:66:2f:4c:e1:da: bc:a5:7e:86:0f:a1:0a:5c:ae:c3:a0:6e:8c:40:9e: 31:7a:27:44:ec:76:30:78:0f:66:71:44:69:71:8f: 6e:0f:49:1c:1b:53:a5:d0:98:cd:76:9d:1b:35:d6: 4f:ae:e5:83:17:a2:22:5e:f2:e9:60:23:7e:21:a4: d0:b9:83:4d:31:85:99:31:b0:d0:4b:99:bb:41:25: 13:fb:e2:ed:64:44:28:5d:72:9d:8e:bf:79:8a:c7: 20:1d:ae:c8:37:9f:e8:b7:a9:e3:c0:c1:b6:c5:2d: 28:53:8d:fa:16:fd:1b:83:89:37:fa:56:39:3b:2f: 16:e6:f8:de:0e:bf:ae:e6:c2:62:3f:a9:51:23:bc: 62:e0:fe:bd:3e:22:ac:aa:d1:ba:23:e7:6b:c6:44: c0:63:97:48:f4:7f:4c:98:8c:73:5e:c4:ca:3b:7e: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1E:9C:21:61:3A:51:35:20:79:7C:A0:34:B8:9D:1C:EF:BA:C2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.0.0/16 192.149.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8b:8e:1d:51:cd:95:65:6e:6f:0b:64:66:23:09:3e:37:b0: 90:01:3b:74:96:dd:4d:88:50:f3:6b:7c:71:ed:1b:2e:86:34: 76:49:c1:91:b6:61:22:0b:e7:4b:68:87:3d:46:7e:97:53:03: 0c:aa:f8:9e:2a:5c:0d:83:bd:3c:0b:a6:44:10:21:d6:f4:9f: fb:ac:61:d0:0b:4d:9f:c1:27:05:6d:db:1d:42:10:e7:14:0d: f1:16:29:ac:e1:09:f9:7d:0c:4a:be:b9:1f:13:5c:b1:ce:83: 93:43:37:94:3a:27:d7:be:f6:e6:13:cd:a2:10:b6:63:72:6b: 93:eb:4c:83:fd:f4:b1:18:2d:27:6e:e4:b6:45:93:b8:e6:11: 7e:4e:72:a6:f2:b1:ac:8d:63:7f:4a:3f:ac:05:3a:44:fe:5d: 4b:58:27:e9:e8:15:72:cc:90:6b:27:1c:8a:b0:ab:ab:7f:bb: ee:fd:ed:77:b4:cc:b6:81:18:4f:72:bb:d0:73:66:c2:93:bb: 82:c7:70:fd:c9:b2:2c:19:97:9e:cb:f7:3f:6d:74:cc:a4:98: 9e:a1:50:49:ac:d3:52:42:7b:15:db:a2:6e:62:a9:37:43:15: 8f:1e:fe:50:dc:0b:ab:d3:c8:33:2c:dc:88:f4:02:00:e5:3d: 24:c2:94:3f -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEumZ6W0OyMGJNKJ0/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDk3ZmE4Y2YtNmUwYy00M2VmLThkZWUtZmVjMmIxM2E0M2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms12Xp64xhS5MMRG43/sW7gyhdleYrltlH9f NFIwisYqa5ajS/dEwfdC2FEFw7lZZ3Oq4HuMkAuc3FPd6x/LeYcCMDcw+V3D0xjv xBxreZycALQKZi9M4dq8pX6GD6EKXK7DoG6MQJ4xeidE7HYweA9mcURpcY9uD0kc G1Ol0JjNdp0bNdZPruWDF6IiXvLpYCN+IaTQuYNNMYWZMbDQS5m7QSUT++LtZEQo XXKdjr95iscgHa7IN5/ot6njwMG2xS0oU436Fv0bg4k3+lY5Oy8W5vjeDr+u5sJi P6lRI7xi4P69PiKsqtG6I+drxkTAY5dI9H9MmIxzXsTKO34UgQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPMenCFhOlE1IHl8oDS4nRzvusIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvNWI2NTk2M2MtZDIzZi0z MWEzLWI4NDgtNDEzMjg4NzY4M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAqHsDBADA lcowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAeouOHVHNlWVubwtkZiMJPjewkAE7dJbdTYhQ82t8ce0bLoY0 dknBkbZhIgvnS2iHPUZ+l1MDDKr4nipcDYO9PAumRBAh1vSf+6xh0AtNn8EnBW3b HUIQ5xQN8RYprOEJ+X0MSr65HxNcsc6Dk0M3lDon17725hPNohC2Y3Jrk+tMg/30 sRgtJ27ktkWTuOYRfk5ypvKxrI1jf0o/rAU6RP5dS1gn6egVcsyQayccirCrq3+7 7v3td7TMtoEYT3K70HNmwpO7gsdw/cmyLBmXnsv3P210zKSYnqFQSazTUkJ7Fdui bmKpN0MVjx7+UNwLq9PIMyzciPQCAOU9JMKUPw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:27 2025 by rpki-client