$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa File: bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa (raw, json) Hash identifier: J4l7jFXCM/pdiJMxTy/ySaPrXd5Z7IWCkMfL7HTEeQY= Subject key identifier: 39:B9:9F:C2:85:44:80:83:84:BE:1D:52:4C:23:35:56:58:1A:B2:45 Certificate issuer: /CN=5d35eb8b-40d6-4e37-beae-ce9733027467 Certificate serial: 010D0C9F4328584B9CA22A3C3392A2A811F3A0C8 Authority key identifier: 6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 401244 IP address blocks: 198.160.238.0/23 maxlen: 23 198.160.240.0/23 maxlen: 23 2602:819:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2a:3c:33:92:a2:a8:11:f3:a0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d35eb8b-40d6-4e37-beae-ce9733027467 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=8c599ada-ac30-411a-bfb2-04040013555f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:ed:24:7a:f7:a5:c0:49:67:60:74:63:5c: c1:d8:c6:41:c9:cf:38:35:ea:f8:11:74:1a:4b:a9: d8:88:1d:80:72:f2:f7:c0:bc:02:e5:6a:3a:11:8e: b2:79:99:88:3d:eb:71:fb:3b:16:ba:6f:92:54:0a: b7:b1:0d:48:59:1a:d0:3f:ac:29:50:0f:7a:cf:2f: 97:78:b0:fe:93:25:f4:0f:79:76:c2:15:62:9a:f4: 2e:cf:fd:6c:fc:f3:5e:d5:8e:c4:82:da:28:0a:97: b2:16:bc:4d:f4:80:74:6b:83:a7:e7:7f:0d:16:ba: 1a:95:37:17:89:39:f5:76:99:42:0b:17:fe:f2:8e: a7:53:16:a8:41:b8:39:91:41:b1:16:22:6a:57:10: 60:aa:98:7e:10:73:6f:8d:47:44:b4:c6:f8:bc:f1: df:35:dd:68:2a:62:c6:e3:d6:0c:bd:7d:4e:c1:54: a4:99:bd:c1:1a:0b:12:69:73:7e:2f:7c:67:03:16: bd:33:91:dd:c3:04:69:95:01:69:b3:48:84:73:a7: e0:a3:18:4b:ab:9b:5f:2a:36:57:16:e7:2d:ab:5a: f0:e0:7a:88:4c:e2:0f:51:ef:f3:24:03:37:73:52: d2:1d:2c:63:aa:c7:8f:d9:3f:4e:f3:ba:72:7f:d8: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B9:9F:C2:85:44:80:83:84:BE:1D:52:4C:23:35:56:58:1A:B2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl X509v3 Authority Key Identifier: keyid:6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer sbgp-ipAddrBlock: critical IPv4: 198.160.238.0-198.160.241.255 IPv6: 2602:819:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6c:ce:3b:52:98:66:0a:4f:f2:ca:98:d2:6d:2c:26:de:24: ac:81:6b:53:da:23:b7:50:b5:28:18:96:51:3e:99:db:23:64: a0:3c:2e:93:e9:7a:f0:c4:d9:4e:c1:01:4e:53:87:fa:c8:b8: fc:53:12:74:b7:2f:56:f3:bd:3a:36:b3:43:4c:7e:39:7f:cd: ce:33:79:1f:40:4b:b8:ac:93:be:da:fa:77:06:62:f5:b7:41: 97:b4:19:00:6f:4e:78:65:22:c6:58:26:35:ee:82:48:24:53: ee:c6:2c:f8:44:7c:86:fb:29:1d:b5:51:46:f6:5d:a2:37:96: fe:ec:db:b1:46:84:9f:51:43:c9:12:61:b7:84:bb:8e:fe:87: 9b:66:64:0d:77:05:e6:3d:a0:0a:e4:46:b9:97:12:bf:cf:54: 53:e2:13:0e:ff:35:33:51:92:27:18:0b:19:94:f4:ac:48:7a: c2:24:dc:ce:66:cd:91:3b:2e:74:df:a2:18:3b:53:53:a9:8e: bf:22:09:df:2b:8f:e0:46:2c:c9:af:51:f6:b9:60:29:6f:c5: 5d:7f:81:18:c2:0e:34:07:53:d0:70:3f:d6:09:84:67:dd:96: 51:0e:6e:d4:0c:83:ad:fd:76:12:10:b7:5d:dc:47:a7:97:7d: bf:1a:bf:94 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEucoio8M5KiqBHzoMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQzNWViOGItNDBkNi00ZTM3LWJlYWUtY2U5NzMzMDI3 NDY3MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk OGM1OTlhZGEtYWMzMC00MTFhLWJmYjItMDQwNDAwMTM1NTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKLtJHr3pcBJZ2B0Y1zB2MZByc84Ner4EXQa S6nYiB2AcvL3wLwC5Wo6EY6yeZmIPetx+zsWum+SVAq3sQ1IWRrQP6wpUA96zy+X eLD+kyX0D3l2whVimvQuz/1s/PNe1Y7EgtooCpeyFrxN9IB0a4On538NFroalTcX iTn1dplCCxf+8o6nUxaoQbg5kUGxFiJqVxBgqph+EHNvjUdEtMb4vPHfNd1oKmLG 49YMvX1OwVSkmb3BGgsSaXN+L3xnAxa9M5HdwwRplQFps0iEc6fgoxhLq5tfKjZX Fuctq1rw4HqITOIPUe/zJAM3c1LSHSxjqseP2T9O87pyf9gtnwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFDm5n8KFRICDhL4dUkwjNVZYGrJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZDM1 ZWI4Yi00MGQ2LTRlMzctYmVhZS1jZTk3MzMwMjc0NjcvYmQ4MWI2NTktYmM3Ny0z YTljLWE4Y2ItZmNkNzJiMGY4ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWQzNWViOGItNDBkNi00ZTM3LWJl YWUtY2U5NzMzMDI3NDY3LzVkMzVlYjhiLTQwZDYtNGUzNy1iZWFlLWNlOTczMzAy NzQ2Ny5jcmwwHwYDVR0jBBgwFoAUb1lFEUOxEsWIe9LaWB70wU6QvTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZDM1ZWI4Yi00MGQ2LTRlMzctYmVhZS1jZTk3 MzMwMjc0NjcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAHGoO4D BAHGoPAwDgQCAAIwCAMGACYCCBnAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF1szjtSmGYKT/LKmNJtLCbe JKyBa1PaI7dQtSgYllE+mdsjZKA8LpPpevDE2U7BAU5Th/rIuPxTEnS3L1bzvTo2 s0NMfjl/zc4zeR9AS7isk77a+ncGYvW3QZe0GQBvTnhlIsZYJjXugkgkU+7GLPhE fIb7KR21UUb2XaI3lv7s27FGhJ9RQ8kSYbeEu47+h5tmZA13BeY9oArkRrmXEr/P VFPiEw7/NTNRkicYCxmU9KxIesIk3M5mzZE7LnTfohg7U1Opjr8iCd8rj+BGLMmv Ufa5YClvxV1/gRjCDjQHU9BwP9YJhGfdllEObtQMg639dhIQt13cR6eXfb8av5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:53 2025 by rpki-client