$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa File: a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa (raw, json) Hash identifier: fn16bsTu94aLYCIt8iV5hhTZ0EdKmwmwU2RwkTXN0fY= Subject key identifier: 84:88:66:FE:9C:F2:2A:86:D0:AC:7A:7E:1F:90:5D:37:6C:3E:93:54 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B6201ED663DA295ACCDE9F5C0 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 40948 IP address blocks: 208.95.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:ed:66:3d:a2:95:ac:cd:e9:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=45eac48d-5dd5-497a-9dca-1472dd9d2530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:56:1e:5f:88:d0:38:de:b9:b7:12:14:3c: 7f:65:ca:2e:3e:58:c1:55:4e:ff:69:1c:3d:6c:e4: 4c:5e:5c:4a:87:be:f0:9a:ee:60:e9:08:61:73:3e: 44:76:cf:7d:9a:a6:dd:ea:30:a5:ab:71:b0:9f:62: 72:7d:e1:9b:f9:f6:48:4f:a1:0e:03:6c:bf:dc:85: 60:39:a7:1f:58:b7:1f:63:d4:62:3b:42:4f:bd:9f: d7:b2:30:b0:9b:b1:c0:a6:03:f1:c3:a7:3a:43:c7: 5a:78:66:bc:8f:83:55:66:66:c5:26:cf:c4:0a:28: 4c:3c:37:ab:87:d7:17:d0:77:cc:01:70:5d:ff:c5: 45:bf:b2:6f:db:e1:bc:a5:b1:19:40:6a:1e:b8:a5: e7:8e:a7:dc:ac:c1:66:d0:76:d2:e1:a9:01:da:47: 47:fe:63:7e:42:6d:fb:98:d0:ff:7d:3c:67:61:aa: f7:af:25:1d:b9:35:88:6a:2c:00:0f:66:3f:a7:f5: 10:c6:90:57:a9:28:4d:e8:0c:ea:4e:ff:64:9b:29: da:03:0b:0e:41:3c:f4:2c:3d:d9:9f:05:bf:a0:6d: b8:ce:01:67:47:81:ae:90:ba:7b:94:ce:ff:15:1f: d6:ab:65:12:d1:7c:1a:15:b1:24:17:3c:ce:63:43: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:88:66:FE:9C:F2:2A:86:D0:AC:7A:7E:1F:90:5D:37:6C:3E:93:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 208.95.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3b:59:69:c3:b4:37:cb:f9:09:05:b7:ca:88:8c:d4:20:9f: b2:84:79:c5:69:2b:43:cf:a7:97:f1:ca:60:a2:a4:77:51:0b: a0:62:70:29:3d:38:0a:14:5a:d4:d2:16:c4:29:79:ba:8e:b3: 85:ec:a9:a0:ed:48:74:16:73:74:e2:0c:70:6e:33:2a:37:3d: 12:43:26:1d:5c:2d:ef:1d:35:5f:ff:a7:c1:18:8c:51:c4:ae: 3e:4d:39:9e:49:92:93:30:9e:a5:fd:d7:f8:23:39:ba:c6:4e: 55:a1:21:05:f2:aa:0b:cd:e0:5a:89:7a:2d:59:89:ea:0e:33: 94:93:6a:b3:53:6d:b7:2f:24:fa:88:32:f5:dc:13:0f:44:97: b4:e8:a0:6d:03:fb:81:0d:c7:6c:86:bd:47:60:b6:f0:e2:fa: 65:f2:8c:b8:50:0a:d8:a7:d1:3c:c5:26:8d:84:bc:4b:a6:33: 66:c8:5d:bf:55:95:f8:ea:d4:06:02:98:8b:87:93:8d:b2:bd: 39:8d:f4:f7:6c:05:a8:23:f6:ab:25:76:0b:77:81:fb:64:1f: 38:f2:eb:a0:a3:f8:64:03:c3:4a:be:ee:93:95:20:1b:86:a1: 68:d7:87:94:8b:81:7b:c3:ec:af:95:9a:b1:8e:84:87:95:4d: 15:bc:63:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAe1mPaKVrM3p9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDVlYWM0OGQtNWRkNS00OTdhLTlkY2EtMTQ3MmRkOWQyNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyFWHl+I0DjeubcSFDx/ZcouPljBVU7/aRw9 bORMXlxKh77wmu5g6Qhhcz5Eds99mqbd6jClq3Gwn2JyfeGb+fZIT6EOA2y/3IVg OacfWLcfY9RiO0JPvZ/XsjCwm7HApgPxw6c6Q8daeGa8j4NVZmbFJs/ECihMPDer h9cX0HfMAXBd/8VFv7Jv2+G8pbEZQGoeuKXnjqfcrMFm0HbS4akB2kdH/mN+Qm37 mND/fTxnYar3ryUduTWIaiwAD2Y/p/UQxpBXqShN6AzqTv9kmynaAwsOQTz0LD3Z nwW/oG24zgFnR4GukLp7lM7/FR/Wq2US0XwaFbEkFzzOY0NKjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISIZv6c8iqG0Kx6fh+QXTdsPpNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvYTUxZjUwZTQtZDdjNy0z OWUwLTg2ODEtMDA5N2ZkMmM4NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo7WWnDtDfL+QkFt8qIjNQgn7KEecVpK0PPp5fxymCipHdRC6BicCk9 OAoUWtTSFsQpebqOs4XsqaDtSHQWc3TiDHBuMyo3PRJDJh1cLe8dNV//p8EYjFHE rj5NOZ5JkpMwnqX91/gjObrGTlWhIQXyqgvN4FqJei1ZieoOM5STarNTbbcvJPqI MvXcEw9El7TooG0D+4ENx2yGvUdgtvDi+mXyjLhQCtin0TzFJo2EvEumM2bIXb9V lfjq1AYCmIuHk42yvTmN9PdsBagj9qsldgt3gftkHzjy66Cj+GQDw0q+7pOVIBuG oWjXh5SLgXvD7K+VmrGOhIeVTRW8Y5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 23:02:49 2025 by rpki-client