$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa File: a0ab8981-9b66-3f41-baf6-bf4026116466.roa (raw, json) Hash identifier: jae+SL9uVo01ferNslsAblETvjyNJCzdGBJjl67AYqs= Subject key identifier: 55:EC:B0:53:A7:F2:1F:AF:E3:A5:35:BB:56:55:A0:09:1B:47:0F:88 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584B9B3CE2C9108240C87EECEC80 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 157.239.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e2:c9:10:82:40:c8:7e:ec:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3bd2e76a-6c22-43b2-93f5-eea41fb124f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:27:cd:b5:26:0d:6b:a8:f1:31:ab:ec:e1: 24:97:d7:ad:70:fd:2f:eb:7b:74:87:06:6a:09:b6: d8:67:03:f7:a7:4f:5c:b8:15:68:04:73:5d:54:8f: 0b:bf:cf:bb:c1:3c:83:b1:d2:32:7a:19:91:c1:73: 71:6f:d9:49:ff:51:21:e0:24:ee:9d:37:ea:a0:f2: 37:9a:fb:d5:b7:51:77:82:c7:8f:13:8c:52:db:da: a7:2b:cd:44:aa:87:df:b7:1b:e6:cc:27:0f:aa:c7: 97:b6:30:e2:3f:db:7d:59:96:a1:42:ff:32:70:56: 49:32:94:a2:8e:96:b3:94:d0:33:ba:09:cb:95:63: 66:ad:e2:32:49:34:6b:da:6c:73:5b:e5:53:cc:71: c7:8a:6e:49:c9:4d:95:33:97:17:16:99:b5:2e:43: 3b:72:9f:96:3b:90:fc:0d:31:02:97:07:4b:a6:ab: d7:27:0a:bc:16:b4:1b:32:5c:e6:cb:73:84:5e:01: fe:e2:7d:1f:4c:e3:43:90:b9:bd:f9:ed:f9:8c:a4: 1d:19:c5:10:48:96:02:51:c7:68:b6:62:d5:af:7d: 23:d8:33:b2:bf:f4:02:96:c0:03:0a:46:96:2c:3d: d1:a4:81:bf:17:25:d2:ef:10:20:9a:bd:b0:1d:7d: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EC:B0:53:A7:F2:1F:AF:E3:A5:35:BB:56:55:A0:09:1B:47:0F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:89:0f:2f:5e:7c:88:8e:16:c3:8b:eb:6e:99:b8:33:55:7e: 09:ca:1f:0b:5d:6b:3f:51:f2:fe:99:48:f5:32:15:d8:cd:af: 46:6c:37:46:99:dc:56:e3:bb:96:33:02:9b:4b:2b:e3:b3:0c: 55:a8:5f:0c:15:04:12:a5:c2:c3:be:eb:2a:40:49:55:e1:3d: 49:08:23:2a:67:69:3c:06:dd:15:41:00:41:54:90:8d:7a:16: c6:ca:82:7f:02:96:c9:b7:5b:5e:38:05:be:ec:f1:5d:43:cf: 83:4d:91:ed:5a:64:65:b4:1e:db:33:d4:29:53:de:91:50:74: 63:78:7c:88:93:30:90:f2:e8:01:07:c3:fb:21:4c:c6:c7:01: 0b:1a:cc:b2:0d:d0:13:43:39:43:54:0c:75:3b:d1:19:10:47: d6:7e:92:d5:f8:1a:0b:24:a8:d7:93:b6:64:af:bd:df:62:b5: b9:e5:89:cb:80:2c:05:7a:c1:cc:a5:c9:94:fa:2c:5a:df:74: 12:0d:f4:0e:c5:0e:ce:dc:e2:ff:30:d2:32:24:f5:77:7b:6d: 6b:60:4f:38:22:8a:4e:26:d6:8a:13:09:0e:bf:20:ca:9a:d4: 15:15:2d:dd:73:03:ac:66:4f:9f:4b:75:17:58:e1:75:6b:0d: 37:37:ad:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOLJEIJAyH7s7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2JkMmU3NmEtNmMyMi00M2IyLTkzZjUtZWVhNDFmYjEyNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg64nzbUmDWuo8TGr7OEkl9etcP0v63t0hwZq CbbYZwP3p09cuBVoBHNdVI8Lv8+7wTyDsdIyehmRwXNxb9lJ/1Eh4CTunTfqoPI3 mvvVt1F3gsePE4xS29qnK81EqofftxvmzCcPqseXtjDiP9t9WZahQv8ycFZJMpSi jpazlNAzugnLlWNmreIySTRr2mxzW+VTzHHHim5JyU2VM5cXFpm1LkM7cp+WO5D8 DTEClwdLpqvXJwq8FrQbMlzmy3OEXgH+4n0fTONDkLm9+e35jKQdGcUQSJYCUcdo tmLVr30j2DOyv/QClsADCkaWLD3RpIG/FyXS7xAgmr2wHX1OgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXssFOn8h+v46U1u1ZVoAkbRw+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvYTBhYjg5ODEtOWI2Ni0z ZjQxLWJhZjYtYmY0MDI2MTE2NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSJDy9efIiOFsOL626ZuDNVfgnKHwtdaz9R8v6ZSPUyFdjNr0ZsN0aZ 3Fbju5YzAptLK+OzDFWoXwwVBBKlwsO+6ypASVXhPUkIIypnaTwG3RVBAEFUkI16 FsbKgn8Clsm3W144Bb7s8V1Dz4NNke1aZGW0Htsz1ClT3pFQdGN4fIiTMJDy6AEH w/shTMbHAQsazLIN0BNDOUNUDHU70RkQR9Z+ktX4GgskqNeTtmSvvd9itbnlicuA LAV6wcylyZT6LFrfdBIN9A7FDs7c4v8w0jIk9Xd7bWtgTzgiik4m1ooTCQ6/IMqa 1BUVLd1zA6xmT59LdRdY4XVrDTc3rd0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:48 2025 by rpki-client