$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa File: d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa (raw, json) Hash identifier: rBfqJEnp1tywMoMtTvggWA3gbAq1pVUOikUVLEfPSIU= Subject key identifier: 5A:B1:09:DF:9D:2A:5E:EA:63:22:45:CD:03:D8:A9:D2:C9:8A:70:8B Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Certificate serial: 010D0C9F4328584BB2F7C11F97607C6AFADAF800 Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 376 IP address blocks: 132.213.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c1:1f:97:60:7c:6a:fa:da:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=8fd8fecb-cb81-4f11-8519-b5abbf8f785d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:e3:0a:6c:a6:81:f1:b9:2d:a4:62:93:ed: 85:cd:ee:72:54:ef:73:7c:a9:2e:dc:29:51:1c:bb: bd:37:b3:4c:dc:5d:99:69:32:f4:c2:e7:8c:24:c5: 67:2e:2f:e1:64:b7:7e:e4:30:3b:ef:44:c2:b5:b4: 06:70:59:75:a4:3f:0c:3c:77:77:ef:86:b1:7b:ad: 3a:a8:83:de:e5:d0:b7:9a:5f:33:33:d5:7b:21:1d: 82:95:3a:a9:b8:ee:59:0e:52:21:f2:38:61:6e:4a: 41:d3:24:fa:8a:6b:78:00:81:ff:36:61:8b:63:4e: 3c:bf:41:0a:b3:9c:5b:0b:85:0e:9a:34:c7:0f:e9: 79:2d:56:d5:49:3e:0d:f8:7e:2f:2d:c2:f0:83:97: 6a:10:97:08:48:95:41:f9:6b:9a:fc:e6:8c:53:76: 9f:e8:18:a4:e8:87:d9:8b:aa:59:ad:71:9e:5a:81: b0:dd:43:d2:8d:95:5d:f9:17:d0:52:da:e9:19:88: 6a:ca:43:96:e5:07:97:73:be:70:4f:4f:ea:8c:7a: 66:8c:9c:8b:d9:1d:c7:29:b7:01:82:bf:fe:b5:46: b9:23:ce:50:3d:22:43:78:8c:19:2b:a3:46:57:ce: 02:de:6f:bf:29:f0:90:f4:f0:3e:15:b4:50:2a:22: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:09:DF:9D:2A:5E:EA:63:22:45:CD:03:D8:A9:D2:C9:8A:70:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl X509v3 Authority Key Identifier: keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer sbgp-ipAddrBlock: critical IPv4: 132.213.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:47:d6:0f:15:2b:24:6f:38:3f:29:a3:23:90:ae:90:c3:e6: 0a:47:2e:c7:fb:70:be:d3:3b:8d:c8:a9:d6:49:81:c2:cf:e4: 31:1b:48:b9:78:ce:be:22:59:ec:de:0b:9c:27:0b:d5:c0:87: 8b:1a:a4:a3:1a:b1:fd:bb:57:80:8d:aa:38:de:7e:2e:b9:23: 10:f9:18:e7:57:16:b5:d2:42:66:9e:b4:4f:c3:a2:de:50:d4: a9:98:2c:ab:3f:08:2e:c0:16:8c:d6:19:fa:ee:94:7e:d1:6c: d7:46:4c:ad:d7:d7:e4:68:69:5a:5d:22:7a:07:e0:1f:ea:07: 16:5e:0f:14:9a:77:5d:44:e8:0f:68:9a:ee:f6:a4:f5:48:0a: 5e:3e:ad:5d:a3:c6:0c:04:ee:9a:c7:48:24:3d:5c:94:ae:76: 81:ac:69:30:a4:d5:1e:2a:12:3e:55:ee:e7:70:60:f8:ff:66: 8b:c4:f6:92:55:24:b8:71:14:9d:40:f0:34:0f:21:34:68:46: 74:56:bb:35:80:ca:99:16:73:f7:34:2f:87:23:31:2e:5a:97: 02:40:07:94:19:31:58:74:d9:5e:9e:9b:fa:b1:c4:be:82:6d: 42:25:8a:11:9b:77:c9:39:97:81:ef:86:5f:ac:ce:92:85:f1: e4:d7:c5:4c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy98Efl2B8avra+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj ZDQyMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OGZkOGZlY2ItY2I4MS00ZjExLTg1MTktYjVhYmJmOGY3ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX3jCmymgfG5LaRik+2Fze5yVO9zfKku3ClR HLu9N7NM3F2ZaTL0wueMJMVnLi/hZLd+5DA770TCtbQGcFl1pD8MPHd374axe606 qIPe5dC3ml8zM9V7IR2ClTqpuO5ZDlIh8jhhbkpB0yT6imt4AIH/NmGLY048v0EK s5xbC4UOmjTHD+l5LVbVST4N+H4vLcLwg5dqEJcISJVB+Wua/OaMU3af6Bik6IfZ i6pZrXGeWoGw3UPSjZVd+RfQUtrpGYhqykOW5QeXc75wT0/qjHpmjJyL2R3HKbcB gr/+tUa5I85QPSJDeIwZK6NGV84C3m+/KfCQ9PA+FbRQKiJ7vwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFqxCd+dKl7qYyJFzQPYqdLJinCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvZDNiYmZiOGMtNGJiMy0z NTRjLThlMWItZmM4ZWVlNGZjM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj YTc2ZmNkNDIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeEfWDxUrJG84PymjI5CukMPmCkcux/twvtM7jcip1kmBws/kMRtIuXjO viJZ7N4LnCcL1cCHixqkoxqx/btXgI2qON5+LrkjEPkY51cWtdJCZp60T8Oi3lDU qZgsqz8ILsAWjNYZ+u6UftFs10ZMrdfX5GhpWl0iegfgH+oHFl4PFJp3XUToD2ia 7vak9UgKXj6tXaPGDATumsdIJD1clK52gaxpMKTVHioSPlXu53Bg+P9mi8T2klUk uHEUnUDwNA8hNGhGdFa7NYDKmRZz9zQvhyMxLlqXAkAHlBkxWHTZXp6b+rHEvoJt QiWKEZt3yTmXge+GX6zOkoXx5NfFTA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:57:25 2025 by rpki-client