$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa File: fd434724-7632-35bf-832e-50b74b1f77f7.roa (raw, json) Hash identifier: Dim+QH892dwZ0wX68vznSNECSnucaVI4wrAdgdoIKRk= Subject key identifier: C2:18:B6:22:93:E2:CD:05:90:6C:23:64:61:49:19:C5:0E:69:30:A3 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584BBA10591E13EC48BFE725C580 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 54535 IP address blocks: 156.53.200.0/24 maxlen: 24 156.53.201.0/24 maxlen: 24 156.53.232.0/23 maxlen: 23 156.53.240.0/24 maxlen: 24 156.53.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:59:1e:13:ec:48:bf:e7:25:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=c6b4d9ec-e024-4fe1-956e-b77ad0414a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:11:e8:e8:e6:61:62:a3:0e:1f:27:20:de: 5e:42:79:98:f4:2a:9a:7f:6e:8b:15:b5:28:ad:30: b3:6e:e3:53:1a:81:bc:b3:71:9f:aa:34:21:20:3a: 60:92:be:22:b6:e7:46:7e:8b:88:b5:e6:2b:d9:af: 43:d0:24:1a:5b:ac:d2:cf:ca:e8:fe:be:68:8e:1e: cd:80:4b:8c:15:eb:83:65:7b:d1:21:ab:06:66:c4: 06:94:f0:d6:25:53:fb:87:76:97:3f:53:b5:61:78: df:f1:6e:3f:e3:6d:4f:60:2a:b9:a2:3c:9e:15:23: 51:94:84:23:16:2f:ab:c3:0e:67:b4:ba:f0:e7:7d: cb:0d:15:c6:93:c8:66:c6:f7:cc:d0:f5:8b:bb:ea: c5:f8:4a:63:c9:d6:24:af:12:98:93:de:75:ef:a1: da:a0:8d:25:52:10:58:46:80:4f:c5:f3:b0:81:c2: 81:5d:09:d9:63:3d:9b:fa:95:14:da:7e:af:10:47: 5f:ec:f1:3b:fc:33:5f:37:3f:0a:7a:43:49:55:6b: 6c:f9:ab:ec:c9:d5:7e:85:af:a6:78:65:a5:00:90: f3:e3:14:72:fe:3f:4f:eb:c0:99:76:7d:f2:20:84: de:e7:f9:66:73:c7:7b:83:c8:e8:74:f7:08:98:5b: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:B6:22:93:E2:CD:05:90:6C:23:64:61:49:19:C5:0E:69:30:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.200.0/23 156.53.232.0/23 156.53.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c9:85:62:0f:c3:d4:38:29:0e:38:73:b5:25:bc:cd:d3:45: ca:1b:c6:27:cc:dc:19:4b:55:11:0b:9f:80:3f:29:da:f0:13: d8:07:c0:af:fb:9c:c1:77:21:76:a9:4a:3b:28:3e:80:f3:98: d4:46:3b:66:89:5a:2c:dd:dc:b8:e7:87:ab:d9:a9:39:4e:f4: 98:79:c3:48:13:9b:03:6d:06:68:ff:46:05:9c:3d:41:d1:47: db:66:df:5f:d3:62:95:cc:b1:87:97:7a:1d:25:e1:0d:e6:53: 93:c7:65:a6:69:8d:9b:39:39:fa:d3:e5:9e:76:99:10:f6:5c: 26:5b:ff:33:1e:25:04:0c:27:5c:94:20:2c:d6:be:fe:1f:0c: 9a:6b:12:08:4b:6e:36:93:17:5a:cf:17:6d:5b:95:fd:b8:9e: fc:00:3f:c1:0c:4a:82:26:78:3e:ca:f8:14:b3:0c:70:ff:d1: 95:99:3e:ac:1f:06:63:1d:84:b1:7f:d0:8f:fd:04:71:07:9d: e4:55:77:6e:53:fc:4b:ae:c3:59:7c:bc:c2:41:25:02:20:0e: d4:61:53:93:c5:e8:83:d6:63:9f:f5:8d:97:db:ba:2d:52:05: 3b:a7:80:a1:df:3a:3d:79:23:30:ae:11:7d:34:92:4e:55:a5: 81:08:57:a8 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu6EFkeE+xIv+clxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YzZiNGQ5ZWMtZTAyNC00ZmUxLTk1NmUtYjc3YWQwNDE0YTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcAR6OjmYWKjDh8nIN5eQnmY9Cqaf26LFbUo rTCzbuNTGoG8s3GfqjQhIDpgkr4itudGfouIteYr2a9D0CQaW6zSz8ro/r5ojh7N gEuMFeuDZXvRIasGZsQGlPDWJVP7h3aXP1O1YXjf8W4/421PYCq5ojyeFSNRlIQj Fi+rww5ntLrw533LDRXGk8hmxvfM0PWLu+rF+EpjydYkrxKYk95176HaoI0lUhBY RoBPxfOwgcKBXQnZYz2b+pUU2n6vEEdf7PE7/DNfNz8KekNJVWts+avsydV+ha+m eGWlAJDz4xRy/j9P68CZdn3yIITe5/lmc8d7g8jodPcImFu/5wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMIYtiKT4s0FkGwjZGFJGcUOaTCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvZmQ0MzQ3MjQtNzYzMi0z NWJmLTgzMmUtNTBiNzRiMWY3N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXIAwQB nDXoAwQBnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABzJhWIPw9Q4KQ44c7UlvM3TRcobxifM3BlLVREL n4A/KdrwE9gHwK/7nMF3IXapSjsoPoDzmNRGO2aJWizd3Ljnh6vZqTlO9Jh5w0gT mwNtBmj/RgWcPUHRR9tm31/TYpXMsYeXeh0l4Q3mU5PHZaZpjZs5OfrT5Z52mRD2 XCZb/zMeJQQMJ1yUICzWvv4fDJprEghLbjaTF1rPF21blf24nvwAP8EMSoImeD7K +BSzDHD/0ZWZPqwfBmMdhLF/0I/9BHEHneRVd25T/Euuw1l8vMJBJQIgDtRhU5PF 6IPWY5/1jZfbui1SBTungKHfOj15IzCuEX00kk5VpYEIV6g= -----END CERTIFICATE-----Generated at Wed Nov 5 17:41:39 2025 by rpki-client