$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa File: 7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa (raw, json) Hash identifier: cKqL3adrSq05me19SSMROAerhRdG0K4scNlrPIdx2wc= Subject key identifier: 87:24:8A:98:E6:49:44:08:DC:9F:FA:35:83:BB:43:22:D2:90:17:71 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584BA7CCE8F60F1214B7EFFF8880 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 22709 IP address blocks: 216.237.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e8:f6:0f:12:14:b7:ef:ff:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=71a4104b-caf8-465e-988d-a1faa04afe5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:62:e1:7d:a0:ba:16:22:91:e0:8e:75:48: 56:4c:6d:29:ab:42:58:5f:bc:30:4e:9d:0e:67:98: 49:94:e5:9a:a2:8e:cc:18:76:e8:da:10:52:4c:dd: 11:78:a5:3f:a9:c1:73:b4:68:77:e6:3f:d4:62:97: ef:1a:38:a4:2b:4a:a0:fb:a6:62:71:e0:c8:c7:a1: ca:f1:7e:95:7d:31:81:a7:df:5e:f0:db:eb:be:a7: d3:da:b5:76:46:ea:16:b7:14:03:a7:02:b4:ba:a1: 01:e3:89:fa:53:10:db:a6:c1:55:75:74:30:2b:4f: 5a:8e:38:b0:23:82:62:2c:7a:55:b3:c0:d0:36:ae: de:26:56:04:d3:03:68:a2:aa:c5:1b:ae:8b:ba:0e: e8:d4:9c:11:23:b9:2a:5f:62:32:a5:b2:48:61:69: 64:ae:3b:59:2e:73:c0:33:e2:12:b0:c4:19:34:80: 53:64:73:da:73:c6:ac:6f:ab:05:e0:f7:b5:b2:1c: 3f:17:59:e0:32:87:44:5b:ac:f7:df:70:3c:df:14: 5b:0e:2f:2b:0a:e5:65:8b:76:d3:1b:f5:08:78:8f: 7d:e3:e2:b0:c4:82:8c:0d:11:74:ee:97:2a:f0:2f: 98:c1:b0:bd:e3:14:bc:68:97:3f:5d:f6:86:ae:24: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:24:8A:98:E6:49:44:08:DC:9F:FA:35:83:BB:43:22:D2:90:17:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 216.237.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cb:1f:03:9d:0a:73:26:1a:e4:77:81:04:3b:8a:74:5a:05: a6:d8:10:23:07:aa:ad:83:3d:c4:fb:28:22:06:50:4e:f2:61: e7:e7:0f:08:fa:b4:3f:04:16:06:1f:e2:b1:57:e2:57:77:b5: 1d:56:73:12:c3:f9:e9:da:ba:fd:62:4d:88:5c:f8:75:77:a5: da:7a:04:69:56:a4:27:1e:f8:37:c3:20:fa:2d:20:28:ec:c5: b5:04:c9:62:8b:b4:33:3e:2f:6c:46:9f:71:a6:a7:5d:f3:ba: 5f:78:6d:5c:00:8b:73:0a:ac:2d:03:b4:c8:e0:d2:d8:3d:cd: 41:14:2a:3f:f2:45:78:1b:ad:32:82:29:20:09:5f:89:0c:85: 35:c4:f4:cf:9f:c8:56:2a:32:c6:7b:89:39:f6:88:43:82:3b: 5f:0c:77:63:53:2b:cb:72:db:7a:d4:d9:fe:2e:ec:18:4a:28: 9b:e7:af:e8:c8:02:bf:4c:e4:61:32:6f:36:85:53:4d:69:2d: 96:4b:48:e7:29:2d:6f:df:83:78:89:60:50:4c:4c:60:c8:c1: 9e:f5:30:02:2f:ce:4b:17:85:3f:29:ad:b6:1f:01:3e:d4:b3: 42:24:14:6a:83:56:91:9e:92:b0:71:92:93:75:d6:93:50:6a: 23:09:af:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOj2DxIUt+//iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NzFhNDEwNGItY2FmOC00NjVlLTk4OGQtYTFmYWEwNGFmZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcBi4X2guhYikeCOdUhWTG0pq0JYX7wwTp0O Z5hJlOWaoo7MGHbo2hBSTN0ReKU/qcFztGh35j/UYpfvGjikK0qg+6ZiceDIx6HK 8X6VfTGBp99e8NvrvqfT2rV2RuoWtxQDpwK0uqEB44n6UxDbpsFVdXQwK09ajjiw I4JiLHpVs8DQNq7eJlYE0wNooqrFG66Lug7o1JwRI7kqX2IypbJIYWlkrjtZLnPA M+ISsMQZNIBTZHPac8asb6sF4Pe1shw/F1ngModEW6z333A83xRbDi8rCuVli3bT G/UIeI994+KwxIKMDRF07pcq8C+YwbC94xS8aJc/XfaGriRq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIckipjmSUQI3J/6NYO7QyLSkBdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvNzg0NmYwZjEtMWVhMC0z NjI5LWEyYTgtNWU3YWY2ZGRhYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvLHwOdCnMmGuR3gQQ7inRaBabYECMHqq2DPcT7KCIGUE7yYefnDwj6 tD8EFgYf4rFX4ld3tR1WcxLD+enauv1iTYhc+HV3pdp6BGlWpCce+DfDIPotICjs xbUEyWKLtDM+L2xGn3Gmp13zul94bVwAi3MKrC0DtMjg0tg9zUEUKj/yRXgbrTKC KSAJX4kMhTXE9M+fyFYqMsZ7iTn2iEOCO18Md2NTK8ty23rU2f4u7BhKKJvnr+jI Ar9M5GEybzaFU01pLZZLSOcpLW/fg3iJYFBMTGDIwZ71MAIvzksXhT8prbYfAT7U s0IkFGqDVpGekrBxkpN11pNQaiMJr+w= -----END CERTIFICATE-----Generated at Wed Nov 5 02:42:07 2025 by rpki-client