$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa File: d5cf8319-403b-387c-a79b-84a59277e3f3.roa (raw, json) Hash identifier: 21TdTNb3gd4IOOQAh4RZy3OscWlxE3XDHzBHWEI86Xc= Subject key identifier: 83:3C:23:7B:FA:D4:EE:64:FD:09:F9:7D:F9:A0:34:0E:E3:A9:CE:F8 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584BBA1058E49D46B9AA21CF4380 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 54535 IP address blocks: 156.37.196.0/24 maxlen: 24 156.37.197.0/24 maxlen: 24 156.37.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:58:e4:9d:46:b9:aa:21:cf:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=98b7bd27-b1c8-48f3-81ea-f745a97df87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:7e:e8:bf:ea:88:b4:7d:ad:39:1b:de:45: 68:36:ef:54:75:39:91:c3:b7:26:92:a7:f1:ab:6c: b2:48:95:8d:2d:37:84:dc:bf:8b:35:58:c7:35:1d: 6d:a2:8f:c5:8f:43:1e:4a:24:33:67:41:56:c6:3c: 5e:ae:bb:87:2f:a8:7c:ec:92:71:85:4a:76:2e:26: 04:a2:04:df:7c:5e:aa:a4:a2:34:68:41:d5:7f:ea: d8:7a:54:a3:bb:e7:45:3d:e1:a9:66:72:cb:24:68: 5d:a3:64:24:b5:ee:97:6e:db:c8:ea:f5:9a:94:13: 34:5d:94:ca:87:f8:bc:d5:e6:7e:d8:b1:1e:20:c1: e7:45:7d:cc:0a:3d:d8:76:5e:54:4e:9d:88:44:96: db:5e:e5:04:77:07:79:8b:af:01:20:63:86:24:ce: 19:b7:f3:ed:d2:8d:bf:e8:83:96:d7:06:f2:90:dc: 7a:48:00:de:f8:fa:84:1d:8a:a1:4d:7f:3a:dd:30: fa:02:d0:7c:6e:27:dd:91:0a:32:c6:2e:7d:7e:aa: 45:99:3f:da:28:6a:90:ee:69:b4:e4:59:fd:35:5b: ce:65:72:d0:55:6e:10:15:5a:04:25:7f:7e:19:9a: 59:f1:d2:03:90:12:1e:08:89:97:c0:45:87:75:c4: d6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3C:23:7B:FA:D4:EE:64:FD:09:F9:7D:F9:A0:34:0E:E3:A9:CE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.196.0-156.37.198.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ae:ea:41:87:31:ac:08:87:dc:b5:54:4a:15:f7:41:0d:0f: e2:c1:95:e1:82:7c:98:98:71:41:23:e1:63:aa:f4:9d:63:9f: 0c:3c:ac:ac:78:02:81:7c:c0:8c:7e:40:5a:c7:ce:15:98:08: 0a:8c:24:25:66:87:00:3b:d9:c6:1a:4e:5d:36:20:77:22:e0: 40:39:b3:76:81:13:a8:b0:a3:4a:02:7c:fa:e2:dd:d7:9b:93: d3:3e:50:0b:f9:1c:99:f5:5c:b1:5b:1f:05:49:3e:f2:47:1b: 99:cb:1e:08:e3:aa:0b:fe:62:9e:e7:82:ed:f0:eb:73:32:a1: a6:99:80:35:1c:b3:f6:8d:27:63:43:0d:5d:db:a7:b7:33:ee: ba:aa:e7:98:86:e1:2f:50:bc:6c:dc:93:df:ad:01:e1:1c:13: b6:6a:54:58:cb:c0:98:4d:9b:a1:65:de:40:b7:e5:99:f4:42: 44:c0:bf:7b:ed:77:fe:47:ea:1d:bf:08:a1:d5:a2:b4:21:5d: 2c:23:3f:43:bc:e0:35:0a:da:0b:76:aa:87:0c:22:f8:0a:44: 23:89:94:42:0d:5e:75:5c:8e:e4:4c:ae:0a:ba:54:9c:be:0c: d6:1e:f1:ab:b2:2c:a6:54:a5:95:bd:2a:34:a5:9d:22:54:bf: 67:b3:e7:2e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEu6EFjknUa5qiHPQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OThiN2JkMjctYjFjOC00OGYzLTgxZWEtZjc0NWE5N2RmODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkZ+6L/qiLR9rTkb3kVoNu9UdTmRw7cmkqfx q2yySJWNLTeE3L+LNVjHNR1too/Fj0MeSiQzZ0FWxjxerruHL6h87JJxhUp2LiYE ogTffF6qpKI0aEHVf+rYelSju+dFPeGpZnLLJGhdo2Qkte6XbtvI6vWalBM0XZTK h/i81eZ+2LEeIMHnRX3MCj3Ydl5UTp2IRJbbXuUEdwd5i68BIGOGJM4Zt/Pt0o2/ 6IOW1wbykNx6SADe+PqEHYqhTX863TD6AtB8bifdkQoyxi59fqpFmT/aKGqQ7mm0 5Fn9NVvOZXLQVW4QFVoEJX9+GZpZ8dIDkBIeCImXwEWHdcTW6QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIM8I3v61O5k/Qn5ffmgNA7jqc74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvZDVjZjgzMTktNDAzYi0z ODdjLWE3OWItODRhNTkyNzdlM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKcJcQD BACcJcYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANq7qQYcxrAiH3LVUShX3QQ0P4sGV4YJ8mJhxQSPhY6r0 nWOfDDysrHgCgXzAjH5AWsfOFZgICowkJWaHADvZxhpOXTYgdyLgQDmzdoETqLCj SgJ8+uLd15uT0z5QC/kcmfVcsVsfBUk+8kcbmcseCOOqC/5inueC7fDrczKhppmA NRyz9o0nY0MNXduntzPuuqrnmIbhL1C8bNyT360B4RwTtmpUWMvAmE2boWXeQLfl mfRCRMC/e+13/kfqHb8IodWitCFdLCM/Q7zgNQraC3aqhwwi+ApEI4mUQg1edVyO 5EyuCrpUnL4M1h7xq7IsplSllb0qNKWdIlS/Z7PnLg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:14:17 2025 by rpki-client