$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c15e8976-d111-3493-8cb3-1def47e633e8.roa File: c15e8976-d111-3493-8cb3-1def47e633e8.roa (raw, json) Hash identifier: G8oHWHfPYqa+eftRwuw4bxUg4eIiqdv2LK6wR+Q44E4= Subject key identifier: 8D:F7:68:9D:E8:B8:0B:84:AD:E9:32:F0:F6:E8:36:16:73:42:91:5C Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584BBCDAE491DF1FE96783856500 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c15e8976-d111-3493-8cb3-1def47e633e8.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 23316 IP address blocks: 216.193.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e4:91:df:1f:e9:67:83:85:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=7aa76d8b-f124-45f9-8aed-8d4d0c32dd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:d6:30:d2:a3:01:63:36:5f:e1:61:e4:b6: ec:95:97:5d:6e:41:db:e2:e0:33:8d:d3:96:7d:d4: ea:91:d6:52:01:44:44:73:63:80:93:bc:6c:14:c2: 10:81:32:31:c5:a0:c1:70:94:d3:0d:5d:49:32:6a: c1:59:fb:cf:7c:ac:50:d4:75:14:0e:89:2e:06:6d: 2b:a0:b8:a7:48:e9:ea:6f:51:da:8d:e2:69:ba:bc: 61:0d:1d:10:61:e8:81:80:f7:5c:75:7d:63:6b:6d: 0e:bd:87:9d:32:54:50:05:a8:24:30:3e:ed:a1:d8: 92:5a:0b:d1:5a:72:b4:4d:96:69:51:e4:0c:3c:c9: 79:c7:20:b8:b6:30:d6:0a:77:9f:3f:d9:74:ce:1c: 73:fb:27:29:29:ee:e0:74:59:d5:b4:22:db:0b:43: 4e:db:b5:74:84:cf:55:72:cf:60:d5:54:6b:e7:e8: 60:76:30:df:f9:e2:3f:a6:fc:e2:c2:45:39:b6:1e: f6:7a:9c:ee:ca:6e:da:6b:5e:9a:39:fc:0c:c0:93: b5:61:87:ea:c4:f0:23:bb:5d:92:44:d0:87:79:2e: 20:7e:1c:b2:99:88:0c:a5:56:fa:51:9e:a9:2c:27: 4b:c6:49:3f:29:8d:e0:89:fd:a6:18:6c:48:a6:26: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F7:68:9D:E8:B8:0B:84:AD:E9:32:F0:F6:E8:36:16:73:42:91:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c15e8976-d111-3493-8cb3-1def47e633e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 216.193.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cd:64:cd:88:2b:d8:a4:e6:38:e5:e8:d2:a4:4a:b9:fe:36: 8f:c7:a3:9c:54:e4:37:65:cd:b7:73:35:9d:bd:a3:26:0c:70: ed:f9:3b:af:03:55:85:69:45:8d:e5:92:76:49:c9:fa:64:34: a6:b3:01:6b:36:83:dc:85:f1:ca:e7:56:e5:d2:49:1f:94:c8: 70:1c:62:47:86:c7:83:f2:b3:ed:ad:9c:e0:14:36:d2:66:3b: 4b:e3:0c:ab:cf:33:c2:d5:c3:6b:cf:83:a8:ab:47:d7:7b:a0: 08:3c:7d:39:8c:c6:5a:b3:87:a8:2e:9d:f0:9e:a7:aa:2b:95: f2:f5:eb:5a:a3:e2:37:a5:87:4b:22:a1:c3:d2:34:18:82:7f: 42:1f:bc:67:57:ef:bb:eb:89:26:17:ba:2f:ca:32:88:11:7c: e8:2e:e9:0c:16:d7:9b:cd:6b:e3:f4:8d:9c:53:d0:2a:17:72: ad:ff:2f:6c:7a:2e:a2:c2:a0:bb:2d:f2:d7:74:94:73:4f:c0: 48:1a:fe:f8:05:f9:92:71:eb:9b:c4:36:b3:d9:90:9e:f3:16: 76:d1:81:81:2b:63:02:fc:77:73:a6:03:aa:93:74:8e:18:6b: 4f:e8:07:95:0c:05:2c:6e:a4:6c:23:b8:7e:a8:20:dc:1c:bf: d1:0a:48:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uSR3x/pZ4OFZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk N2FhNzZkOGItZjEyNC00NWY5LThhZWQtOGQ0ZDBjMzJkZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD/WMNKjAWM2X+Fh5LbslZddbkHb4uAzjdOW fdTqkdZSAUREc2OAk7xsFMIQgTIxxaDBcJTTDV1JMmrBWfvPfKxQ1HUUDokuBm0r oLinSOnqb1HajeJpurxhDR0QYeiBgPdcdX1ja20OvYedMlRQBagkMD7todiSWgvR WnK0TZZpUeQMPMl5xyC4tjDWCnefP9l0zhxz+ycpKe7gdFnVtCLbC0NO27V0hM9V cs9g1VRr5+hgdjDf+eI/pvziwkU5th72epzuym7aa16aOfwMwJO1YYfqxPAju12S RNCHeS4gfhyymYgMpVb6UZ6pLCdLxkk/KY3gif2mGGxIpibSVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI33aJ3ouAuEreky8PboNhZzQpFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYzE1ZTg5NzYtZDExMS0z NDkzLThjYjMtMWRlZjQ3ZTYzM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATNZM2IK9ik5jjl6NKkSrn+No/Ho5xU5DdlzbdzNZ29oyYMcO35O68D VYVpRY3lknZJyfpkNKazAWs2g9yF8crnVuXSSR+UyHAcYkeGx4Pys+2tnOAUNtJm O0vjDKvPM8LVw2vPg6irR9d7oAg8fTmMxlqzh6gunfCep6orlfL161qj4jelh0si ocPSNBiCf0IfvGdX77vriSYXui/KMogRfOgu6QwW15vNa+P0jZxT0CoXcq3/L2x6 LqLCoLst8td0lHNPwEga/vgF+ZJx65vENrPZkJ7zFnbRgYErYwL8d3OmA6qTdI4Y a0/oB5UMBSxupGwjuH6oINwcv9EKSEU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:25 2025 by rpki-client