$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/ea2f7e0d-00fb-3d3b-8a13-9ee197f6c8b5.roa File: ea2f7e0d-00fb-3d3b-8a13-9ee197f6c8b5.roa (raw, json) Hash identifier: BcR+URQcnSLzWFcY6hdaDr9J/nj8aQ6uqcQ5atMXp64= Subject key identifier: 34:DB:DB:67:59:53:97:58:05:9A:5B:AA:23:DD:BB:9D:F6:BB:DD:51 Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Certificate serial: 010D0C9F4328584BABFD0734674603C56B138EA0 Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/ea2f7e0d-00fb-3d3b-8a13-9ee197f6c8b5.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 36549 IP address blocks: 63.251.158.0/24 maxlen: 24 64.94.58.0/24 maxlen: 24 64.94.61.0/24 maxlen: 24 64.94.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:07:34:67:46:03:c5:6b:13:8e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=73759d29-3b22-4386-a9e1-d8d6cbe1e045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:1f:83:2d:81:71:16:bd:f7:f7:ae:37:a9: a5:d5:1d:fd:78:58:6e:7d:7e:b3:9c:13:5b:7c:5d: f0:3d:b4:e2:d1:3d:c0:ef:d8:5d:8d:2a:d9:9d:35: 73:87:29:7a:78:50:c5:f8:dd:7c:5a:e8:ee:61:45: 52:5d:b2:26:76:2d:44:55:68:43:20:6d:dd:90:74: 30:d8:4d:fb:ab:25:58:d0:86:29:c8:d7:87:3b:e8: 21:d6:c6:66:3d:b1:a6:a7:18:16:13:88:9f:ce:62: d0:42:d2:07:a7:6e:7c:2f:4c:1c:91:ce:c1:49:29: 64:33:dd:1e:af:a7:29:af:23:67:4c:01:d0:bb:04: 3a:53:10:a8:df:d0:0e:12:c3:82:2a:c9:61:73:be: fe:ad:59:97:c8:82:cd:36:77:f5:7a:6f:47:8a:5d: eb:6e:b3:e3:7e:49:c4:84:a8:36:76:1b:83:76:71: 07:4c:33:06:ba:c6:d3:e5:1a:76:f0:00:02:8a:8b: 76:d0:22:f5:a0:45:80:88:e5:a5:11:28:93:5b:5d: c1:7e:62:1e:c3:25:bb:81:48:8c:62:e3:ff:cc:09: 4c:b1:38:cd:22:39:99:65:76:f0:33:2a:25:ae:29: 93:ba:4d:8a:22:c9:06:c7:dc:fe:de:d1:6d:34:07: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DB:DB:67:59:53:97:58:05:9A:5B:AA:23:DD:BB:9D:F6:BB:DD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/ea2f7e0d-00fb-3d3b-8a13-9ee197f6c8b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl X509v3 Authority Key Identifier: keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer sbgp-ipAddrBlock: critical IPv4: 63.251.158.0/24 64.94.58.0/24 64.94.61.0/24 64.94.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:aa:b3:2c:9a:f2:fe:14:0a:90:c7:0a:0a:ac:10:07:dd:a2: 7d:e3:61:5a:7a:f0:72:c8:d8:fc:f2:97:ad:6a:64:48:b6:4f: 55:cf:92:76:f7:2e:36:9a:89:16:de:b6:4d:b7:0f:09:1f:e6: c0:6c:7e:2b:77:31:6d:27:ef:ee:e8:18:1b:eb:26:e8:50:47: 1f:df:a5:1e:ce:b9:3c:8b:7f:9f:cc:9a:ef:b6:be:eb:13:93: f6:78:3b:2f:1f:8e:7e:23:e1:ec:10:29:e0:d9:d6:ae:db:75: 4f:05:93:bf:27:a0:72:3d:4f:fb:e9:fa:00:dd:c8:12:ee:39: 0c:62:d6:31:78:eb:7b:7e:dc:67:6c:0e:9c:b4:b5:ab:93:71: 23:cf:a1:45:b3:72:a3:50:cb:30:56:56:34:4c:5e:88:5c:d1: ba:f3:2d:6f:71:40:82:a0:7c:9f:c2:98:8d:5e:4f:28:1c:e2: 20:ce:b3:d1:51:0e:84:a3:d2:a1:4a:db:3c:24:06:29:29:9a: b1:9d:35:18:97:63:ff:a9:e1:63:b1:35:87:fc:b5:07:9d:4c: 1a:05:a5:e4:69:b1:9e:45:96:57:db:d8:d2:11:5d:37:b4:02: 6c:6b:30:75:c4:9f:01:15:8a:81:0e:e2:66:4c:d4:89:ae:73: 29:74:34:e3 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEur/Qc0Z0YDxWsTjqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NWMzOWEtNzE1Yy00ZGMwLTg5MWEtYjM4ZjlkN2Ni M2U4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NzM3NTlkMjktM2IyMi00Mzg2LWE5ZTEtZDhkNmNiZTFlMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn8fgy2BcRa99/euN6ml1R39eFhufX6znBNb fF3wPbTi0T3A79hdjSrZnTVzhyl6eFDF+N18WujuYUVSXbImdi1EVWhDIG3dkHQw 2E37qyVY0IYpyNeHO+gh1sZmPbGmpxgWE4ifzmLQQtIHp258L0wckc7BSSlkM90e r6cpryNnTAHQuwQ6UxCo39AOEsOCKslhc77+rVmXyILNNnf1em9Hil3rbrPjfknE hKg2dhuDdnEHTDMGusbT5Rp28AACiot20CL1oEWAiOWlESiTW13BfmIewyW7gUiM YuP/zAlMsTjNIjmZZXbwMyolrimTuk2KIskGx9z+3tFtNAfBjwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFDTb22dZU5dYBZpbqiPdu532u91RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1 YzM5YS03MTVjLTRkYzAtODkxYS1iMzhmOWQ3Y2IzZTgvZWEyZjdlMGQtMDBmYi0z ZDNiLThhMTMtOWVlMTk3ZjZjOGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk3NWMzOWEtNzE1Yy00ZGMwLTg5 MWEtYjM4ZjlkN2NiM2U4LzM5NzVjMzlhLTcxNWMtNGRjMC04OTFhLWIzOGY5ZDdj YjNlOC5jcmwwHwYDVR0jBBgwFoAU6hj3sN+eSGqwsG9FbQ9XzJUOingwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1YzM5YS03MTVjLTRkYzAtODkxYS1iMzhm OWQ3Y2IzZTguY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAP/ueAwQA QF46AwQAQF49AwQAQF4/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABuqsyya8v4UCpDHCgqsEAfdon3jYVp6 8HLI2Pzyl61qZEi2T1XPknb3LjaaiRbetk23Dwkf5sBsfit3MW0n7+7oGBvrJuhQ Rx/fpR7OuTyLf5/Mmu+2vusTk/Z4Oy8fjn4j4ewQKeDZ1q7bdU8Fk78noHI9T/vp +gDdyBLuOQxi1jF463t+3GdsDpy0tauTcSPPoUWzcqNQyzBWVjRMXohc0brzLW9x QIKgfJ/CmI1eTygc4iDOs9FRDoSj0qFK2zwkBikpmrGdNRiXY/+p4WOxNYf8tQed TBoFpeRpsZ5Fllfb2NIRXTe0AmxrMHXEnwEVioEO4mZM1Imucyl0NOM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:53 2025 by rpki-client