$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa File: b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa (raw, json) Hash identifier: RyLSxjIJ14CFrxU+3Idsapr2hodh2nVFrd+UsO33V8M= Subject key identifier: 47:49:19:41:0E:0B:E2:0A:B9:BE:69:A3:33:51:22:0C:D2:E0:87:87 Certificate issuer: /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Certificate serial: 010D0C9F4328584BBE4031D1D0ADA8B51CF2A510 Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 142.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:31:d1:d0:ad:a8:b5:1c:f2:a5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=564c0ded-c0b3-4100-bc42-bc1e93186f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:c6:d7:9d:84:e7:05:cc:df:05:11:72:a8: 42:42:ce:68:26:68:62:dd:6c:d3:43:54:1d:64:eb: 6b:70:8d:40:6f:de:1e:ae:e2:c9:18:53:3d:fb:9e: 43:de:ac:a7:5f:b5:21:fa:a0:c3:82:38:96:b5:bc: 59:08:be:c7:70:1f:bc:71:4c:07:b0:03:94:4a:d5: 21:a7:3a:3b:e4:c7:23:1d:81:b8:81:46:46:1c:9f: 8f:ad:8f:4d:d4:73:7d:07:20:c1:1f:6f:69:34:94: 02:e4:4b:93:3c:5b:b0:b4:70:b8:66:8b:c4:ea:3b: cd:f2:ea:be:dc:ce:46:07:83:26:3f:40:2f:23:83: 18:08:e1:c7:0b:46:1d:bd:eb:29:58:a0:50:cf:20: 5f:b6:d6:33:75:cd:2a:b1:ed:27:e0:2d:8f:70:c4: e8:73:a4:f1:24:79:6c:66:68:0b:02:50:b5:21:69: 58:a4:89:2d:71:8d:4a:0c:a3:78:36:28:90:d5:3d: 03:4b:29:ed:c3:29:e1:d7:4c:93:07:46:e5:40:97: fe:74:de:a0:64:f8:fe:a5:5a:e3:4d:3e:c5:1b:02: c1:4a:75:8f:3c:6f:cf:f5:4c:2b:b0:72:4c:87:7d: af:cd:50:ff:6d:2a:57:2a:8e:5f:90:58:6d:79:8d: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:49:19:41:0E:0B:E2:0A:B9:BE:69:A3:33:51:22:0C:D2:E0:87:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl X509v3 Authority Key Identifier: keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer sbgp-ipAddrBlock: critical IPv4: 142.9.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f7:b8:26:a9:24:c7:25:bf:f3:50:ad:1a:11:15:c0:09:f7: cc:d6:8e:c2:23:2f:a9:08:70:04:71:b1:a0:46:cd:d3:69:d1: 78:93:f5:dd:d2:e9:a7:89:9d:6e:af:6a:30:34:0b:52:95:cd: d0:37:58:f7:55:94:eb:94:19:d2:66:81:a4:82:99:ee:97:12: 06:fd:bd:ac:90:15:14:61:43:96:08:d4:1a:56:d6:1a:b8:a9: d2:6f:c8:83:0c:b7:39:c4:03:f6:9c:8e:2f:af:79:45:13:d5: 59:0e:da:0e:04:bd:d1:9e:e9:7b:86:b7:88:87:e9:68:1e:db: 7d:aa:82:35:de:bf:73:9d:10:2c:a1:2b:da:d5:be:40:78:69: b3:1a:f7:3e:af:09:22:f4:a5:e1:e8:45:bb:de:e9:ab:b8:f6: 9d:f6:29:a1:48:1c:5c:55:0e:6d:36:04:fb:88:34:3f:dc:32: 49:98:1f:04:c5:92:9d:1b:c3:37:86:97:fe:82:6e:7f:e3:55: bd:b9:61:e8:65:a7:9d:45:cb:12:04:ac:8f:3b:54:9c:bb:35: 03:18:fb:bb:e2:a1:0d:92:a7:d7:6b:08:62:fd:0e:ee:e6:d7: d5:87:49:56:04:53:b8:9d:88:e5:1d:6d:00:d2:b7:3e:be:aa: cb:f2:a8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDHR0K2otRzypRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YzFhN2QtMWNkYi00ZTYzLWJhMzgtYWM1MGQxYTRk ZDQ2MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTY0YzBkZWQtYzBiMy00MTAwLWJjNDItYmMxZTkzMTg2ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTzG152E5wXM3wURcqhCQs5oJmhi3WzTQ1Qd ZOtrcI1Ab94eruLJGFM9+55D3qynX7Uh+qDDgjiWtbxZCL7HcB+8cUwHsAOUStUh pzo75McjHYG4gUZGHJ+PrY9N1HN9ByDBH29pNJQC5EuTPFuwtHC4ZovE6jvN8uq+ 3M5GB4MmP0AvI4MYCOHHC0YdvespWKBQzyBfttYzdc0qse0n4C2PcMToc6TxJHls ZmgLAlC1IWlYpIktcY1KDKN4NiiQ1T0DSyntwynh10yTB0blQJf+dN6gZPj+pVrj TT7FGwLBSnWPPG/P9UwrsHJMh32vzVD/bSpXKo5fkFhteY3TPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdJGUEOC+IKub5pozNRIgzS4IeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNzhj MWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUwZDFhNGRkNDYvYjE2OGE3ZDktZmVlNC0z ZjE3LTk4NmItNmJiN2JiZmM1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjc4YzFhN2QtMWNkYi00ZTYzLWJh MzgtYWM1MGQxYTRkZDQ2L2Y3OGMxYTdkLTFjZGItNGU2My1iYTM4LWFjNTBkMWE0 ZGQ0Ni5jcmwwHwYDVR0jBBgwFoAUDUS9q3wh+wtyI3xyVUVHp+nvQKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNzhjMWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUw ZDFhNGRkNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb3uCapJMclv/NQrRoRFcAJ98zWjsIjL6kIcARxsaBGzdNp0XiT9d3S 6aeJnW6vajA0C1KVzdA3WPdVlOuUGdJmgaSCme6XEgb9vayQFRRhQ5YI1BpW1hq4 qdJvyIMMtznEA/acji+veUUT1VkO2g4EvdGe6XuGt4iH6Wge232qgjXev3OdECyh K9rVvkB4abMa9z6vCSL0peHoRbve6au49p32KaFIHFxVDm02BPuIND/cMkmYHwTF kp0bwzeGl/6Cbn/jVb25Yehlp51FyxIErI87VJy7NQMY+7vioQ2Sp9drCGL9Du7m 19WHSVYEU7idiOUdbQDStz6+qsvyqB8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:45 2025 by rpki-client