$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa File: fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa (raw, json) Hash identifier: +aJiCkXQf7mt0x9ag5GeUu7+AmkQspuP2HVGK7VEN44= Subject key identifier: 91:B1:29:9B:2A:93:56:6B:34:50:79:6A:75:26:0B:25:BF:3C:7D:A1 Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Certificate serial: 010D0C9F4328584B9F6CDEF6A280DB5AEC9D7780 Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 209 IP address blocks: 161.203.14.0/23 maxlen: 23 161.203.16.0/23 maxlen: 23 161.203.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:de:f6:a2:80:db:5a:ec:9d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=09db3d77-0531-4366-8750-4388db31f59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:ad:41:a1:d4:a2:31:f0:7f:5d:24:1d:9f: 1e:42:f9:b1:62:99:19:46:19:4c:67:a7:5a:42:5f: e9:5b:f8:62:3f:a9:fd:8f:36:cb:27:d2:0d:29:84: 2d:d5:a2:a3:ce:d0:3e:e6:ea:8b:3a:de:a8:20:6f: 68:03:2d:68:77:57:3b:8d:4c:96:7b:81:29:9d:3b: d8:23:41:52:81:33:c2:41:56:a6:11:75:39:80:28: 5a:0c:5e:35:c3:6d:fa:8f:91:73:1c:d2:3d:32:14: f6:2b:8b:9d:f1:09:01:59:60:f1:2a:e8:bf:40:5d: 13:fb:11:34:51:34:63:16:ee:39:b2:3f:a0:63:ef: 12:e9:be:05:ae:0d:ad:ea:3b:c0:d3:4c:ed:68:80: df:3d:2a:29:7d:b6:2d:d3:b2:cc:ce:0a:82:53:67: 0f:3a:ee:a2:46:dc:46:61:32:9c:d1:36:e8:5a:46: 59:63:cc:2e:22:14:e7:67:42:3e:c1:50:0d:79:76: 2c:2e:62:e6:71:19:48:1b:a7:42:f1:42:1f:17:15: a3:14:3f:30:fd:39:77:5d:08:c9:bb:45:21:de:a3: bf:81:d2:16:31:c7:7b:60:b4:9e:aa:bd:7e:e7:5c: 7b:01:01:32:90:e7:b2:f6:c1:52:cb:6b:58:82:76: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B1:29:9B:2A:93:56:6B:34:50:79:6A:75:26:0B:25:BF:3C:7D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl X509v3 Authority Key Identifier: keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer sbgp-ipAddrBlock: critical IPv4: 161.203.14.0-161.203.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:74:e4:26:9d:73:db:57:17:1a:e5:a6:2c:8a:0a:64:3d:32: 85:c0:19:fb:b0:6d:75:a2:bc:0e:0c:a1:0d:c2:8e:2c:cf:b7: 44:29:1a:33:6c:e8:8b:c8:20:b3:71:cd:2c:03:d2:b5:0a:12: c2:81:5f:be:c1:8e:38:1e:ac:20:1a:2b:87:a2:74:9d:e0:6c: 2d:13:55:14:aa:0b:1e:e1:8b:54:09:4e:49:ca:07:e1:a6:ce: 81:2b:cd:14:3c:de:e2:34:ee:9a:34:8c:95:02:20:56:39:bb: bd:2c:30:0e:a2:db:44:e0:e9:06:f8:6a:ef:34:ed:95:64:0b: 2e:0e:7e:0c:92:69:6d:e6:a7:51:0e:36:80:f1:90:61:39:15: 68:8f:5f:fd:dd:fe:6e:3e:e5:18:75:9b:4a:3c:ca:f6:9d:2a: 8b:72:9a:28:5d:43:17:d8:43:b9:a0:6e:55:2f:42:f8:9d:61: e8:43:06:ec:ba:d0:28:c4:50:17:cb:2a:00:e8:9e:26:d7:54: 31:b6:18:d3:53:c7:36:70:20:a7:12:29:74:8a:5b:aa:a9:33: 79:41:2d:47:4e:be:aa:4c:91:79:b4:0b:2e:62:06:30:1c:16: 6a:2b:58:08:99:7b:17:92:c1:ea:0b:93:5e:a8:32:a4:3a:95: 76:d7:1d:65 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEufbN72ooDbWuydd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5 YzgzMB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk MDlkYjNkNzctMDUzMS00MzY2LTg3NTAtNDM4OGRiMzFmNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdytQaHUojHwf10kHZ8eQvmxYpkZRhlMZ6da Ql/pW/hiP6n9jzbLJ9INKYQt1aKjztA+5uqLOt6oIG9oAy1od1c7jUyWe4EpnTvY I0FSgTPCQVamEXU5gChaDF41w236j5FzHNI9MhT2K4ud8QkBWWDxKui/QF0T+xE0 UTRjFu45sj+gY+8S6b4Frg2t6jvA00ztaIDfPSopfbYt07LMzgqCU2cPOu6iRtxG YTKc0TboWkZZY8wuIhTnZ0I+wVANeXYsLmLmcRlIG6dC8UIfFxWjFD8w/Tl3XQjJ u0Uh3qO/gdIWMcd7YLSeqr1+51x7AQEykOey9sFSy2tYgnbYVQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJGxKZsqk1ZrNFB5anUmCyW/PH2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5 YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvZmE2YTVlZTctZmYzZS0z YzlhLTk1ZGYtZjQ1ZmQ0MzYzZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2 N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0 YWIwZDljODMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGhyw4D BAKhyxAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANnTkJp1z21cXGuWmLIoKZD0yhcAZ+7BtdaK8DgyhDcKO LM+3RCkaM2zoi8ggs3HNLAPStQoSwoFfvsGOOB6sIBorh6J0neBsLRNVFKoLHuGL VAlOScoH4abOgSvNFDze4jTumjSMlQIgVjm7vSwwDqLbRODpBvhq7zTtlWQLLg5+ DJJpbeanUQ42gPGQYTkVaI9f/d3+bj7lGHWbSjzK9p0qi3KaKF1DF9hDuaBuVS9C +J1h6EMG7LrQKMRQF8sqAOieJtdUMbYY01PHNnAgpxIpdIpbqqkzeUEtR06+qkyR ebQLLmIGMBwWaitYCJl7F5LB6guTXqgypDqVdtcdZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 18:22:17 2025 by rpki-client