$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa File: ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa (raw, json) Hash identifier: SvfOJDE4oihz4s7l4gUAWt/Bqy6PSs8SrxvyToFnZGU= Subject key identifier: B9:39:9A:D8:34:58:17:3F:39:04:4E:6A:84:1C:37:A4:D2:84:D1:7A Certificate issuer: /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Certificate serial: 010D0C9F4328584BAA97B6F44E58D01C040BCF00 Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 62642 IP address blocks: 172.82.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b6:f4:4e:58:d0:1c:04:0b:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=a3b854bf-dd4d-4860-96b4-3ae5c0a95fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:94:8c:25:72:d3:7f:cf:55:bb:da:7a:b8: 14:49:72:c7:f9:c2:e3:f9:bd:89:1c:37:5a:64:35: f8:9a:c1:97:66:0e:50:2b:d9:f1:e3:9d:1c:8e:f9: 95:33:46:63:00:6f:46:6f:be:7a:d5:ac:3d:2c:a7: 01:7b:be:ee:1a:94:09:2b:62:fc:d2:47:86:54:b8: 43:95:e5:8d:3d:e8:f6:15:45:69:89:25:a1:86:03: 95:af:03:b5:4b:4a:cd:7f:9a:e4:51:29:03:40:29: fe:04:d8:e4:e4:5f:33:0e:57:8f:6e:78:50:0a:10: ba:c2:99:01:2e:aa:a3:ae:7f:64:2c:fe:86:e9:f1: b9:c5:63:6d:e6:65:62:82:2c:f7:70:b8:75:36:6b: 7b:26:fd:3c:6a:f1:4d:8a:0c:28:ea:9b:81:6f:a2: e5:47:99:30:16:6b:35:15:9e:94:fc:1c:31:ff:f6: 06:b0:b6:75:f6:95:1e:30:3a:0d:4c:aa:da:84:dd: 8d:32:f7:c6:aa:91:b5:e6:b5:4f:87:10:50:a5:e2: 31:1c:2a:05:6b:42:5d:d8:e6:05:d6:6a:56:c8:da: da:a0:fb:d9:cf:cc:75:a4:96:f2:49:45:b0:82:de: 39:c0:35:7a:c3:d3:86:88:f7:72:ec:57:ec:2f:f4: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:39:9A:D8:34:58:17:3F:39:04:4E:6A:84:1C:37:A4:D2:84:D1:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl X509v3 Authority Key Identifier: keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer sbgp-ipAddrBlock: critical IPv4: 172.82.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:22:19:1e:0c:66:6d:1d:b4:41:c3:aa:79:68:08:82:36:95: 4a:39:59:99:46:32:45:7f:87:55:76:10:56:e4:ab:13:6e:2d: d6:a7:b9:8a:5e:6d:bc:79:6f:ff:c7:fc:af:af:b4:f2:58:c9: 55:7e:25:1c:73:78:35:68:37:5e:86:a2:7d:0a:0d:b2:33:0c: 42:b6:b5:b2:65:8f:51:f0:38:20:4b:c3:03:58:51:6a:69:c1: 7a:c6:3e:64:c9:61:40:14:c9:6b:be:76:42:fe:25:81:b0:85: cf:10:0d:73:c4:3a:24:ea:e4:6f:73:30:42:fa:fb:b5:0f:2e: 28:64:75:34:f1:7f:e6:70:5f:9a:50:83:58:ee:f6:a8:ee:39: 75:78:03:00:3c:ba:e9:00:5b:2e:71:f8:c6:a3:e5:96:b7:8a: 19:0a:c1:cf:52:38:70:8c:bc:fd:33:c0:55:fc:12:15:63:b7: 56:d3:3d:ee:09:0a:e8:4b:93:1d:81:30:a3:fe:e5:2f:58:9b: f7:e6:25:2d:7b:2c:65:8c:1d:bc:84:0d:d2:01:81:36:0b:d4: c0:a3:09:71:22:d7:a3:cb:76:3a:71:5d:37:6e:a5:66:70:11: e7:b8:c0:bc:b7:bd:b4:17:c8:05:40:49:36:89:d0:3b:01:75: bf:28:86:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7b0TljQHAQLzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0 MGVmMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YTNiODU0YmYtZGQ0ZC00ODYwLTk2YjQtM2FlNWMwYTk1ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9WUjCVy03/PVbvaergUSXLH+cLj+b2JHDda ZDX4msGXZg5QK9nx450cjvmVM0ZjAG9Gb7561aw9LKcBe77uGpQJK2L80keGVLhD leWNPej2FUVpiSWhhgOVrwO1S0rNf5rkUSkDQCn+BNjk5F8zDlePbnhQChC6wpkB Lqqjrn9kLP6G6fG5xWNt5mVigiz3cLh1Nmt7Jv08avFNigwo6puBb6LlR5kwFms1 FZ6U/Bwx//YGsLZ19pUeMDoNTKrahN2NMvfGqpG15rVPhxBQpeIxHCoFa0Jd2OYF 1mpWyNraoPvZz8x1pJbySUWwgt45wDV6w9OGiPdy7FfsL/TmHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk5mtg0WBc/OQROaoQcN6TShNF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4 ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvY2UxODllYTEtMDM2MS0z Y2UxLTlkYWUtNWRhODY0Y2ZjZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY0OGZhZTctOTQ3ZC00YWIwLTlk MjYtYzFkYTM4ZTQ0MGVmL2Q2NDhmYWU3LTk0N2QtNGFiMC05ZDI2LWMxZGEzOGU0 NDBlZi5jcmwwHwYDVR0jBBgwFoAUgPOgyp2g4vup2o8BO87c43/AxuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRh MzhlNDQwZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsiGR4MZm0dtEHDqnloCII2lUo5WZlGMkV/h1V2EFbkqxNuLdanuYpe bbx5b//H/K+vtPJYyVV+JRxzeDVoN16Gon0KDbIzDEK2tbJlj1HwOCBLwwNYUWpp wXrGPmTJYUAUyWu+dkL+JYGwhc8QDXPEOiTq5G9zMEL6+7UPLihkdTTxf+ZwX5pQ g1ju9qjuOXV4AwA8uukAWy5x+Maj5Za3ihkKwc9SOHCMvP0zwFX8EhVjt1bTPe4J CuhLkx2BMKP+5S9Ym/fmJS17LGWMHbyEDdIBgTYL1MCjCXEi16PLdjpxXTdupWZw Eee4wLy3vbQXyAVASTaJ0DsBdb8ohhc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:27 2025 by rpki-client