$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa File: d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa (raw, json) Hash identifier: xRaC32O/fnNwgukS5v5OugmfwL/rf5xMDq0Ye5OD1Tg= Subject key identifier: A1:97:D5:57:41:71:04:D5:85:77:74:D2:D8:A7:3E:7A:45:BA:23:09 Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584B891764CC54B3E30DF0B04300 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 208.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:64:cc:54:b3:e3:0d:f0:b0:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=320c5701-fbe2-412a-8d18-7b9cba05020a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:ac:10:f7:be:50:ae:10:cc:25:e4:e5:56: 61:50:c0:fb:7f:0d:72:be:44:35:9d:6f:28:39:d4: 19:e9:0c:24:d2:42:55:f5:81:82:a0:8d:c3:27:91: 31:d3:96:83:50:39:37:2e:ee:26:24:32:4b:28:1f: 75:f3:4b:12:b6:71:1d:81:7c:2a:e3:b6:63:e0:78: 9b:95:c3:e9:51:28:17:15:5a:cd:2f:ea:73:c3:b6: 81:65:22:ec:15:15:8a:87:c3:e6:95:e3:da:eb:77: 90:81:bc:56:47:4f:02:27:bc:b5:d6:8c:3e:f4:b1: 49:0f:da:66:40:b9:2b:46:eb:51:64:01:ef:22:57: 5a:e4:62:2d:26:01:0e:b3:c2:7f:18:ff:b7:61:ed: 09:04:3b:95:27:4a:bb:08:cd:cc:e8:c7:fe:fc:8b: 7c:ba:8a:bb:09:be:ec:4e:01:8f:b3:ca:db:28:01: 7a:44:97:2e:4f:d7:cd:a0:68:d2:e4:37:90:d0:3c: b3:23:35:a8:36:46:dc:08:0f:a8:0a:be:5d:64:6e: 2a:c1:0a:14:28:b5:41:6d:c1:e2:26:3e:94:dc:cd: 1f:b7:85:54:5c:60:69:34:d5:18:b0:d6:8a:31:a4: f4:67:50:0a:01:b5:65:d1:0a:9f:86:22:57:40:36: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:97:D5:57:41:71:04:D5:85:77:74:D2:D8:A7:3E:7A:45:BA:23:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d5:bb:4e:4b:d4:4e:0f:78:76:b9:04:26:b0:49:8c:8b:3b: dd:ef:c4:e1:6a:70:e3:71:8c:57:47:4a:08:5e:6e:c7:16:b6: bb:a0:29:71:e0:64:d8:91:77:59:b2:14:81:2c:74:0d:36:c5: 6f:69:f9:fa:05:41:15:23:c5:18:2b:d4:3b:4b:67:e5:9e:24: 7d:54:1c:22:6e:f8:7c:cb:8b:ac:bb:8c:86:e4:7b:3d:0a:e5: d5:ec:31:a6:bd:be:12:07:7e:f8:03:46:13:4f:0e:ea:1b:77: 8c:a8:61:57:8b:c2:49:0a:86:4f:60:50:3a:bf:2c:83:25:12: b6:99:9c:20:c7:a4:54:ea:c8:fc:12:ab:42:0b:76:f1:0b:70: 7b:80:d3:a3:25:a0:31:5a:8f:3a:0e:18:da:d7:5a:58:56:f2: 8c:f6:9c:27:52:dc:d9:16:e2:1b:b7:b0:1f:93:c8:53:37:87: 58:83:d6:7e:42:75:13:ff:38:35:1c:cb:26:9c:65:70:35:8c: 7a:a7:ad:43:0e:24:ad:ec:1a:f9:99:6a:c1:cf:84:a7:14:16: 02:18:6c:e1:30:21:aa:66:1a:94:b7:1a:4d:dc:b8:73:b8:a6: 66:b6:5a:0b:dd:f9:17:80:94:0c:ab:ee:a9:00:56:aa:00:7a: dc:23:4b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2TMVLPjDfCwQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MzIwYzU3MDEtZmJlMi00MTJhLThkMTgtN2I5Y2JhMDUwMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNysEPe+UK4QzCXk5VZhUMD7fw1yvkQ1nW8o OdQZ6Qwk0kJV9YGCoI3DJ5Ex05aDUDk3Lu4mJDJLKB9180sStnEdgXwq47Zj4Hib lcPpUSgXFVrNL+pzw7aBZSLsFRWKh8PmlePa63eQgbxWR08CJ7y11ow+9LFJD9pm QLkrRutRZAHvIlda5GItJgEOs8J/GP+3Ye0JBDuVJ0q7CM3M6Mf+/It8uoq7Cb7s TgGPs8rbKAF6RJcuT9fNoGjS5DeQ0DyzIzWoNkbcCA+oCr5dZG4qwQoUKLVBbcHi Jj6U3M0ft4VUXGBpNNUYsNaKMaT0Z1AKAbVl0QqfhiJXQDZexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGX1VdBcQTVhXd00tinPnpFuiMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvZDA1YmNiYWUtOWI2NC0z MGVlLWI2YjUtOTM0NmEzZTJmZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALVu05L1E4PeHa5BCawSYyLO93vxOFqcONxjFdHSghebscWtrugKXHg ZNiRd1myFIEsdA02xW9p+foFQRUjxRgr1DtLZ+WeJH1UHCJu+HzLi6y7jIbkez0K 5dXsMaa9vhIHfvgDRhNPDuobd4yoYVeLwkkKhk9gUDq/LIMlEraZnCDHpFTqyPwS q0ILdvELcHuA06MloDFajzoOGNrXWlhW8oz2nCdS3NkW4hu3sB+TyFM3h1iD1n5C dRP/ODUcyyacZXA1jHqnrUMOJK3sGvmZasHPhKcUFgIYbOEwIapmGpS3Gk3cuHO4 pma2Wgvd+ReAlAyr7qkAVqoAetwjS8s= -----END CERTIFICATE-----Generated at Wed Nov 5 16:14:33 2025 by rpki-client