$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa File: d78030db-8b0b-346d-bbfe-bc1ab103241e.roa (raw, json) Hash identifier: l5xs4MaCjJgfV2nN2c2LP18qrpfebN9BuemvQOrBDmI= Subject key identifier: 12:6D:FC:7B:2C:B4:04:EB:63:21:9A:8C:58:61:0B:9B:5D:C1:44:B8 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584B1AD187E6120AA0EC1281DF40 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 24.156.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:87:e6:12:0a:a0:ec:12:81:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=605567f5-92d8-4648-a0bd-cd27618a10dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:12:11:bd:3c:26:88:94:95:f0:d1:49:86:b3: 33:07:4d:46:36:9f:7a:a9:92:f8:d8:d6:a1:7d:0f: c7:47:53:5e:ac:1f:c2:20:3b:45:d6:bd:3b:f0:62: f3:cd:d4:c0:a3:03:4a:49:60:12:2c:9e:21:ff:86: 8e:7a:24:ac:1b:2c:d9:a8:23:fc:83:2b:6f:fb:40: cf:f4:37:51:4e:d5:b6:26:89:5c:4e:c5:51:0b:78: 5f:79:71:87:b8:81:4d:d9:e3:0e:c6:60:d1:eb:77: 0e:0a:66:5c:21:6b:f0:73:41:96:4c:e3:d7:b8:4a: e8:f8:45:35:20:28:ef:13:2b:34:11:24:9e:00:09: 4b:28:57:91:c4:94:60:66:5b:36:6a:12:2b:ce:68: 8a:dd:4a:f7:65:4e:5a:4e:c8:e8:c1:00:a5:45:2b: 36:73:6c:51:8d:74:0c:47:07:65:4f:7d:50:94:a0: 8e:ac:fd:aa:32:00:55:61:b3:42:b2:be:3b:69:fa: 3b:b0:70:b8:45:a6:0e:0a:33:61:c3:00:d1:49:a7: f0:70:18:26:fc:fe:8d:28:4a:4d:95:5b:83:88:78: a2:55:3c:d7:23:a1:4f:61:02:d2:ee:6c:f7:b4:a3: ae:d5:bb:62:a6:98:a2:97:3e:40:9b:81:39:cc:5d: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6D:FC:7B:2C:B4:04:EB:63:21:9A:8C:58:61:0B:9B:5D:C1:44:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 24.156.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d0:5d:39:a3:05:fb:f2:37:88:a6:07:c6:2a:7a:4c:0b:66: 4b:c3:be:2d:a8:f5:99:1d:de:44:3f:7d:3b:b8:f0:1c:13:75: fa:62:e8:db:f9:b3:f6:c4:8b:d7:53:54:57:68:41:25:de:41: 4d:a4:80:dd:a8:39:e6:4d:e9:54:5a:da:76:75:00:95:96:fc: 71:a7:4a:6d:24:b1:78:3d:03:58:c0:0f:00:f3:10:b7:12:88: 21:4f:7c:db:09:b5:c3:1d:cb:72:f6:78:6c:78:c0:26:8e:ff: bb:f9:63:f4:f5:34:98:58:69:42:29:11:49:22:c1:ea:66:25: 2f:56:e0:14:1b:9c:33:f8:71:74:8e:9f:af:4c:ea:6e:a3:9c: 70:48:4b:82:53:b8:9f:54:12:46:fb:0f:09:00:b6:64:eb:c1: 5e:59:da:17:0e:3b:02:3a:40:af:91:9f:9d:95:a2:3e:50:e3: 8c:2b:cd:f0:ab:bd:3d:76:87:d6:de:1b:9b:7b:f2:6d:20:34: ff:2b:f3:c7:65:7c:46:de:31:66:46:00:8e:10:3f:79:31:8c: 1c:71:5c:9e:70:7b:66:24:e2:c4:f2:1c:9d:81:95:bc:5a:8d: da:4f:45:fa:ac:7b:ce:19:1b:94:4d:44:4d:13:db:e9:8f:3a: ed:f9:0e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YfmEgqg7BKB30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NjA1NTY3ZjUtOTJkOC00NjQ4LWEwYmQtY2QyNzYxOGExMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBIRvTwmiJSV8NFJhrMzB01GNp96qZL42Nah fQ/HR1NerB/CIDtF1r078GLzzdTAowNKSWASLJ4h/4aOeiSsGyzZqCP8gytv+0DP 9DdRTtW2JolcTsVRC3hfeXGHuIFN2eMOxmDR63cOCmZcIWvwc0GWTOPXuEro+EU1 ICjvEys0ESSeAAlLKFeRxJRgZls2ahIrzmiK3Ur3ZU5aTsjowQClRSs2c2xRjXQM RwdlT31QlKCOrP2qMgBVYbNCsr47afo7sHC4RaYOCjNhwwDRSafwcBgm/P6NKEpN lVuDiHiiVTzXI6FPYQLS7mz3tKOu1btippiilz5Am4E5zF1FwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJt/HsstATrYyGajFhhC5tdwUS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvZDc4MDMwZGItOGIwYi0z NDZkLWJiZmUtYmMxYWIxMDMyNDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbQXTmjBfvyN4imB8YqekwLZkvDvi2o9Zkd3kQ/fTu48BwTdfpi6Nv5 s/bEi9dTVFdoQSXeQU2kgN2oOeZN6VRa2nZ1AJWW/HGnSm0ksXg9A1jADwDzELcS iCFPfNsJtcMdy3L2eGx4wCaO/7v5Y/T1NJhYaUIpEUkiwepmJS9W4BQbnDP4cXSO n69M6m6jnHBIS4JTuJ9UEkb7DwkAtmTrwV5Z2hcOOwI6QK+Rn52Voj5Q44wrzfCr vT12h9beG5t78m0gNP8r88dlfEbeMWZGAI4QP3kxjBxxXJ5we2Yk4sTyHJ2Blbxa jdpPRfqse84ZG5RNRE0T2+mPOu35Dkc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:35 2025 by rpki-client