$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/59a3b772-ae82-3d52-acc1-7e88a26e602f.roa File: 59a3b772-ae82-3d52-acc1-7e88a26e602f.roa (raw, json) Hash identifier: nicRAV5hMIb+fcoEmShR7iiGkTsLrbs3YSzDsbCt3wg= Subject key identifier: AD:6A:E7:0D:0D:27:44:92:67:D2:65:A6:39:51:D6:40:36:1D:A0:3E Certificate issuer: /CN=2e6abdd9-4ebf-401b-b031-b7fe672633df Certificate serial: 010D0C9F4328584BA932942EDFE8DD6473A98D00 Authority key identifier: EE:58:09:12:A4:23:D2:EE:D6:51:C8:90:79:A8:93:60:C8:67:E8:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/59a3b772-ae82-3d52-acc1-7e88a26e602f.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13876 IP address blocks: 216.117.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:94:2e:df:e8:dd:64:73:a9:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6abdd9-4ebf-401b-b031-b7fe672633df Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=3ad2c37c-8dc0-43a7-9365-02a95ebe0f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:c0:47:58:9a:b2:00:93:aa:b9:05:f5:43: 01:c1:06:a8:1e:f1:ec:a7:4a:f8:09:ee:ad:b9:b7: 13:bd:ba:24:01:de:d1:d5:b8:48:7d:2d:ef:ed:78: 00:f4:19:55:c6:9f:1a:16:3e:87:6e:34:8d:82:c1: 01:96:53:62:36:a2:70:b9:15:5e:1d:67:e8:0e:70: c5:57:8a:28:52:b8:49:46:63:ad:be:56:8d:03:c2: 58:f5:c7:b5:cc:39:01:94:96:72:c6:7c:a6:57:82: 41:e1:1f:7c:21:8a:ee:4f:93:1a:44:2f:06:b0:47: 57:fe:29:5b:cc:34:8b:59:2f:f5:e8:de:59:33:9e: 93:81:c6:29:b7:16:54:83:e8:6f:94:6a:2e:3d:9e: 76:a8:95:5d:20:19:d1:82:14:f7:36:56:c1:cc:c7: b1:0c:8a:ca:81:7a:d9:72:69:2a:22:73:1f:57:7a: 02:9b:0a:89:f4:e7:3c:a4:34:11:03:98:8d:97:ad: f2:ca:00:8a:17:e2:6d:4a:79:e0:f9:58:e2:ae:af: 6f:68:dd:3b:04:8e:b9:17:ef:bb:86:c7:6b:0a:e3: 13:b2:ec:64:02:3a:c9:08:64:cb:5e:4d:d3:c3:0b: 54:30:6e:ce:c5:1e:a8:9b:fe:9c:52:a4:c4:8d:0f: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6A:E7:0D:0D:27:44:92:67:D2:65:A6:39:51:D6:40:36:1D:A0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/59a3b772-ae82-3d52-acc1-7e88a26e602f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.crl X509v3 Authority Key Identifier: keyid:EE:58:09:12:A4:23:D2:EE:D6:51:C8:90:79:A8:93:60:C8:67:E8:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer sbgp-ipAddrBlock: critical IPv4: 216.117.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f4:e5:b9:8c:41:ac:73:17:ed:b0:6c:24:83:f3:1c:d2:94: 87:2e:0c:2a:4e:cc:42:52:f1:88:c2:89:a7:56:b6:60:53:5c: 80:83:2c:5a:6f:c0:63:76:cd:97:61:2a:94:12:d6:a5:a4:f2: 30:ee:82:6e:cf:de:43:d6:57:ce:56:36:09:44:2b:e2:30:59: 9b:cf:7f:9e:f7:38:01:5c:18:e3:b2:0f:56:06:dc:8d:62:06: 17:db:6c:66:b4:ad:72:5d:58:e9:5d:38:27:aa:c7:43:f2:18: 32:34:22:b9:15:86:2a:f7:df:bb:2f:39:7f:a9:de:d3:46:67: d5:e5:96:fb:13:53:5e:e2:e2:89:24:8e:e7:e1:cc:79:ad:50: 19:dc:3e:74:af:7a:cb:13:d4:5f:02:f8:2e:12:93:d6:4e:09: 0a:1a:4d:49:74:ec:60:cc:30:89:e4:b2:99:35:1e:97:bc:81: 2d:bc:16:ca:29:77:bc:79:67:38:bd:a1:64:3e:31:44:88:a7: 4f:89:e5:56:5a:40:50:32:10:8b:2c:52:0f:15:5a:ed:9a:45: 9b:5b:71:19:e2:37:99:3b:49:97:77:57:23:fa:3d:17:d1:cc: f2:4d:ae:5a:67:98:4a:1a:b0:ea:f2:e9:b2:f2:d7:ae:29:a0: 84:cc:1e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpQu3+jdZHOpjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2YWJkZDktNGViZi00MDFiLWIwMzEtYjdmZTY3MjYz M2RmMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk M2FkMmMzN2MtOGRjMC00M2E3LTkzNjUtMDJhOTVlYmUwZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcbAR1iasgCTqrkF9UMBwQaoHvHsp0r4Ce6t ubcTvbokAd7R1bhIfS3v7XgA9BlVxp8aFj6HbjSNgsEBllNiNqJwuRVeHWfoDnDF V4ooUrhJRmOtvlaNA8JY9ce1zDkBlJZyxnymV4JB4R98IYruT5MaRC8GsEdX/ilb zDSLWS/16N5ZM56TgcYptxZUg+hvlGouPZ52qJVdIBnRghT3NlbBzMexDIrKgXrZ cmkqInMfV3oCmwqJ9Oc8pDQRA5iNl63yygCKF+JtSnng+Vjirq9vaN07BI65F++7 hsdrCuMTsuxkAjrJCGTLXk3TwwtUMG7OxR6om/6cUqTEjQ+FbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1q5w0NJ0SSZ9JlpjlR1kA2HaA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZTZh YmRkOS00ZWJmLTQwMWItYjAzMS1iN2ZlNjcyNjMzZGYvNTlhM2I3NzItYWU4Mi0z ZDUyLWFjYzEtN2U4OGEyNmU2MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmU2YWJkZDktNGViZi00MDFiLWIw MzEtYjdmZTY3MjYzM2RmLzJlNmFiZGQ5LTRlYmYtNDAxYi1iMDMxLWI3ZmU2NzI2 MzNkZi5jcmwwHwYDVR0jBBgwFoAU7lgJEqQj0u7WUciQeaiTYMhn6EAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZTZhYmRkOS00ZWJmLTQwMWItYjAzMS1iN2Zl NjcyNjMzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH05bmMQaxzF+2wbCSD8xzSlIcuDCpOzEJS8YjCiadWtmBTXICDLFpv wGN2zZdhKpQS1qWk8jDugm7P3kPWV85WNglEK+IwWZvPf573OAFcGOOyD1YG3I1i BhfbbGa0rXJdWOldOCeqx0PyGDI0IrkVhir337svOX+p3tNGZ9XllvsTU17i4okk jufhzHmtUBncPnSvessT1F8C+C4Sk9ZOCQoaTUl07GDMMInkspk1Hpe8gS28Fsop d7x5Zzi9oWQ+MUSIp0+J5VZaQFAyEIssUg8VWu2aRZtbcRniN5k7SZd3VyP6PRfR zPJNrlpnmEoasOry6bLy164poITMHrA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:17:20 2025 by rpki-client