$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfe4ca09-a73e-390f-a458-b3a1ab898099.roa File: cfe4ca09-a73e-390f-a458-b3a1ab898099.roa (raw, json) Hash identifier: K5MUtoe1vGf9ZUdTabkWW4udwsxIEB+5UqJdZvBoTc0= Subject key identifier: 4A:C0:01:58:6D:5D:BB:31:17:85:20:D0:00:93:22:E3:3D:E7:71:18 Certificate issuer: /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09 Certificate serial: 010D0C9F4328584B540C9B8AFFF7142730686080 Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfe4ca09-a73e-390f-a458-b3a1ab898099.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 11659 IP address blocks: 169.147.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:9b:8a:ff:f7:14:27:30:68:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=32dba3cb-1997-4731-bd1f-76ac11f56d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:eb:cf:05:26:bd:97:7a:70:5e:16:32:2a: 8b:7f:11:2c:cd:e0:0c:1d:e2:a5:04:a2:04:f2:32: 25:db:e5:b8:3b:c3:e8:4c:40:3a:d0:62:48:89:0a: b9:7e:e8:d1:3d:53:bc:1a:86:a6:64:0e:30:3e:91: 6a:4b:81:8e:60:01:08:9e:e1:b9:30:6d:91:8a:10: f8:ff:d4:5d:41:dd:6c:b5:45:3a:b2:ea:c1:c0:e9: b3:a2:eb:c9:67:ab:36:95:42:19:1b:5e:77:94:f1: 54:17:3a:fc:d6:10:9c:3c:32:e5:f5:10:5c:bc:97: 2f:81:df:0e:47:09:a8:fc:47:4c:51:b5:03:2d:fa: 59:6f:e6:f5:8f:3a:9f:93:0b:da:ee:d3:e9:83:25: be:bc:d0:b6:a7:8d:12:8e:fc:f0:eb:7f:4b:a4:b4: 09:77:51:5c:99:f5:30:3e:dc:7e:2f:a5:c6:39:14: 74:49:a2:e5:d2:46:d3:4a:a6:18:52:68:05:d6:fb: 68:88:ce:97:7e:f0:92:b5:79:58:1d:78:0d:df:9a: 2b:8c:48:e0:10:be:e8:87:3b:f4:a9:66:ff:32:8b: 65:37:2f:1e:32:6d:b3:4d:a1:88:cb:73:45:77:9b: 0f:05:a6:35:1e:f0:d0:05:ce:f1:a7:60:e7:5a:53: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C0:01:58:6D:5D:BB:31:17:85:20:D0:00:93:22:E3:3D:E7:71:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfe4ca09-a73e-390f-a458-b3a1ab898099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl X509v3 Authority Key Identifier: keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer sbgp-ipAddrBlock: critical IPv4: 169.147.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:78:db:31:0c:d3:22:4c:90:cf:ac:b5:0e:7e:0b:7e:c7:be: e6:c5:17:fb:78:ac:17:9b:b0:38:ef:ce:2f:69:a9:23:b6:64: b2:cb:0c:4d:c4:bd:e5:88:fe:9e:d5:6f:f7:98:79:b0:54:f8: 33:7a:26:f8:92:c7:62:aa:45:14:d5:4d:9f:72:81:ea:ff:63: 9c:20:1a:85:e3:9f:14:21:70:bf:ad:a0:20:0f:d3:56:b5:54: 29:7f:ac:22:bc:f1:f5:c2:e3:f6:67:a5:bb:f6:81:d2:57:bb: f0:56:2e:4b:d5:ef:14:85:7d:4d:4f:7b:ae:b4:e1:da:65:84: 8b:e6:d4:3a:bb:e9:ed:8b:ca:10:96:5c:d1:fb:e8:3d:00:ec: f3:b7:4e:fd:4e:ec:74:23:a2:87:a8:44:ae:cf:54:06:27:ec: 9a:bd:cb:6b:bf:f8:41:3e:91:39:f0:e7:84:03:c1:5b:17:c3: dc:87:ed:6c:2a:4b:52:16:35:31:01:b1:55:1d:05:84:d6:df: e5:43:ac:1d:93:9c:39:38:ea:c1:67:fa:86:f5:d5:ea:52:7b: c6:05:df:70:07:1e:69:5b:be:da:df:93:1a:6d:82:81:5c:50: 60:8e:f1:99:93:93:19:a7:44:0b:2d:6d:cb:1f:d9:05:40:10: d7:a9:dd:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJuK//cUJzBoYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBiZmUwNWUtNGNiOC00ZjczLThlY2UtNDhlYmM4MmQw ZDA5MB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzJkYmEzY2ItMTk5Ny00NzMxLWJkMWYtNzZhYzExZjU2ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsXrzwUmvZd6cF4WMiqLfxEszeAMHeKlBKIE 8jIl2+W4O8PoTEA60GJIiQq5fujRPVO8GoamZA4wPpFqS4GOYAEInuG5MG2RihD4 /9RdQd1stUU6surBwOmzouvJZ6s2lUIZG153lPFUFzr81hCcPDLl9RBcvJcvgd8O Rwmo/EdMUbUDLfpZb+b1jzqfkwva7tPpgyW+vNC2p40Sjvzw639LpLQJd1FcmfUw Ptx+L6XGORR0SaLl0kbTSqYYUmgF1vtoiM6XfvCStXlYHXgN35orjEjgEL7ohzv0 qWb/MotlNy8eMm2zTaGIy3NFd5sPBaY1HvDQBc7xp2DnWlMNTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErAAVhtXbsxF4Ug0ACTIuM953EYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMGJm ZTA1ZS00Y2I4LTRmNzMtOGVjZS00OGViYzgyZDBkMDkvY2ZlNGNhMDktYTczZS0z OTBmLWE0NTgtYjNhMWFiODk4MDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTBiZmUwNWUtNGNiOC00ZjczLThl Y2UtNDhlYmM4MmQwZDA5L2UwYmZlMDVlLTRjYjgtNGY3My04ZWNlLTQ4ZWJjODJk MGQwOS5jcmwwHwYDVR0jBBgwFoAUNIflqah71XuldrQdvyHgi0couREwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lMGJmZTA1ZS00Y2I4LTRmNzMtOGVjZS00OGVi YzgyZDBkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqZP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd42zEM0yJMkM+stQ5+C37HvubFF/t4rBebsDjvzi9pqSO2ZLLLDE3E veWI/p7Vb/eYebBU+DN6JviSx2KqRRTVTZ9yger/Y5wgGoXjnxQhcL+toCAP01a1 VCl/rCK88fXC4/Znpbv2gdJXu/BWLkvV7xSFfU1Pe6604dplhIvm1Dq76e2LyhCW XNH76D0A7PO3Tv1O7HQjooeoRK7PVAYn7Jq9y2u/+EE+kTnw54QDwVsXw9yH7Wwq S1IWNTEBsVUdBYTW3+VDrB2TnDk46sFn+ob11epSe8YF33AHHmlbvtrfkxptgoFc UGCO8ZmTkxmnRAstbcsf2QVAENep3b8= -----END CERTIFICATE-----Generated at Fri Oct 10 09:51:57 2025 by rpki-client