$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/03963a28-3129-3646-b0bd-99b47e97a80e.roa File: 03963a28-3129-3646-b0bd-99b47e97a80e.roa (raw, json) Hash identifier: t9UaHLOUfwpJJyEXJf8/sdGpoNk4dYn8CdV2RXJweAw= Subject key identifier: 40:DE:9E:F9:2D:4A:5A:DA:A8:5C:A2:6F:54:9C:5F:05:58:54:1B:4D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA39D271CA61C0555C7FEB480 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/03963a28-3129-3646-b0bd-99b47e97a80e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16696 IP address blocks: 170.199.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:27:1c:a6:1c:05:55:c7:fe:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9633e903-2838-45e9-8152-0187707d0638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:ea:c2:cc:46:a4:f4:2c:73:8e:d3:1b:f2: 96:01:ea:c3:3f:f2:75:00:6e:09:58:8b:35:b1:2d: a2:bc:fd:66:3a:31:be:36:23:b0:f6:2f:eb:e1:4f: 65:68:43:a4:08:69:51:aa:46:ba:28:c8:fc:d6:0b: f4:c0:37:2c:4c:59:6d:f5:50:6c:f2:ee:9d:d9:61: 9c:7f:44:49:9e:ce:dd:ca:1b:97:16:af:0f:ca:9f: a2:42:2c:2c:2f:66:76:3f:fa:23:ba:ac:2a:05:5b: cc:83:59:5f:ec:fe:9e:6c:48:b7:1f:4a:85:7a:af: d4:65:84:f7:1d:7d:2f:6d:8a:f4:a1:41:b5:ee:77: 6a:1a:76:1e:a8:4e:c2:d9:cb:7c:ef:7f:b0:99:34: 88:9b:80:14:49:cf:71:b5:9c:65:1a:13:bf:2a:43: df:11:79:fc:ad:73:8b:97:af:14:10:7f:66:1d:fb: 58:c0:e5:ca:d1:2e:49:51:f5:d0:56:2a:73:0c:6d: e3:85:7e:a4:75:38:35:eb:a8:10:2a:d7:e1:40:2e: 88:36:c3:6c:42:ff:a7:9a:2c:95:55:8d:fc:d2:b3: 04:18:d3:b3:12:3a:9a:e8:2e:a2:ec:45:00:08:2d: 1e:a3:a0:65:3d:8c:98:87:5c:37:45:8e:2e:97:c5: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:9E:F9:2D:4A:5A:DA:A8:5C:A2:6F:54:9C:5F:05:58:54:1B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/03963a28-3129-3646-b0bd-99b47e97a80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 170.199.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e8:cc:42:b8:4b:6f:8d:33:99:98:00:97:eb:06:18:31:d4: 12:f1:13:73:c3:dc:6f:6a:63:58:91:aa:72:95:7c:e4:fd:9f: 6c:7e:7c:c7:5e:09:28:a1:2f:9f:2c:48:58:29:49:fe:b0:e8: ac:49:19:32:8b:c7:8a:65:5c:84:62:82:a6:06:ed:40:ff:67: 30:97:d7:a1:1f:6e:71:6a:81:c1:38:86:00:cb:a1:a7:e8:5b: 2f:10:9c:4a:70:46:f1:21:65:47:68:a3:60:5c:f7:40:96:3c: 08:57:45:5f:2c:80:1f:40:42:84:e6:ed:e3:18:40:23:d6:a2: 51:e4:ed:3b:a1:2c:ae:01:5a:dc:a4:f4:71:cd:69:df:9c:28: 40:a0:7e:36:e5:8a:83:71:60:e8:34:91:a8:7c:df:d7:c7:f5: c6:3c:9a:8c:da:b7:6d:ef:80:31:26:3f:13:a6:32:2a:fa:50: 60:88:5f:c5:be:b9:15:10:49:65:8d:18:4c:93:5b:82:cf:94: 7c:21:b5:1c:31:6b:c4:8b:d4:cc:2c:1a:83:7b:2e:65:08:65: aa:0f:c0:f0:f6:77:27:2f:a7:6c:e1:59:a7:f2:04:99:30:ab: e5:d7:4b:48:4c:8c:ac:2a:9d:8b:4b:76:1f:99:5d:4d:5b:00: 66:8c:fd:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSccphwFVcf+tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTYzM2U5MDMtMjgzOC00NWU5LTgxNTItMDE4NzcwN2QwNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS7qwsxGpPQsc47TG/KWAerDP/J1AG4JWIs1 sS2ivP1mOjG+NiOw9i/r4U9laEOkCGlRqka6KMj81gv0wDcsTFlt9VBs8u6d2WGc f0RJns7dyhuXFq8Pyp+iQiwsL2Z2P/ojuqwqBVvMg1lf7P6ebEi3H0qFeq/UZYT3 HX0vbYr0oUG17ndqGnYeqE7C2ct873+wmTSIm4AUSc9xtZxlGhO/KkPfEXn8rXOL l68UEH9mHftYwOXK0S5JUfXQVipzDG3jhX6kdTg166gQKtfhQC6INsNsQv+nmiyV VY380rMEGNOzEjqa6C6i7EUACC0eo6BlPYyYh1w3RY4ul8XDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDenvktSlraqFyib1ScXwVYVBtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDM5NjNhMjgtMzEyOS0z NjQ2LWIwYmQtOTliNDdlOTdhODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsftMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDozEK4S2+NM5mYAJfrBhgx1BLxE3PD3G9qY1iRqnKVfOT9n2x+fMde CSihL58sSFgpSf6w6KxJGTKLx4plXIRigqYG7UD/ZzCX16EfbnFqgcE4hgDLoafo Wy8QnEpwRvEhZUdoo2Bc90CWPAhXRV8sgB9AQoTm7eMYQCPWolHk7TuhLK4BWtyk 9HHNad+cKECgfjblioNxYOg0kah839fH9cY8mozat23vgDEmPxOmMir6UGCIX8W+ uRUQSWWNGEyTW4LPlHwhtRwxa8SL1MwsGoN7LmUIZaoPwPD2dycvp2zhWafyBJkw q+XXS0hMjKwqnYtLdh+ZXU1bAGaM/Vw= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:05 2025 by rpki-client