$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa File: 0c6f1e55-adb4-339c-a85f-5c7779443c43.roa (raw, json) Hash identifier: qVYF2SAX+TavfDNtz+nVPOr5Xf1K8hZlaDloOwWY/F4= Subject key identifier: FE:5C:95:9E:5F:C8:4D:D8:6E:67:46:2F:F0:97:D3:88:5A:40:13:4D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA39D2763A5C3780988E20380 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16696 IP address blocks: 174.34.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:27:63:a5:c3:78:09:88:e2:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=1b1dcd30-ed41-458d-83d9-35b7c5633053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1c:4a:a1:2d:2d:88:5c:e1:1b:a9:54:13:61: 36:c2:b7:ef:b1:77:53:47:9b:46:8e:66:9c:ca:cf: b6:2c:ed:07:09:51:27:f9:3f:20:0a:ba:a4:ba:ba: d1:6a:1c:39:0c:4a:63:95:1b:6b:cb:33:ff:95:e9: 14:6e:97:77:8b:bb:65:89:8a:2a:4b:ca:a6:01:82: d0:ff:30:6a:ea:51:55:f7:5c:5d:43:df:8c:81:e3: 85:db:8a:88:2e:54:c6:7a:9a:00:88:1b:20:26:4f: de:ba:e5:79:cd:25:cd:d5:eb:54:83:e6:68:cd:06: 6b:f7:35:35:62:ee:4a:21:0d:d8:0b:38:d5:b8:75: a4:cb:fb:31:db:52:9b:9f:b1:6a:0b:02:fe:ea:dc: 29:43:08:1e:e5:ed:0c:52:0a:b5:f2:5b:8f:d3:bc: 13:91:b6:5c:8b:ed:5b:5d:e8:88:8d:92:19:60:de: f3:47:11:21:87:cf:2e:7b:28:09:d3:80:e7:92:c9: 47:98:84:eb:a7:dd:b5:b9:ce:79:0f:26:dd:56:f4: f2:4b:da:ae:f6:34:ef:f4:52:5b:53:93:30:5c:ba: c2:b6:f0:a9:1d:93:77:b5:97:81:76:df:9c:b1:8c: 3d:67:10:49:c0:99:f7:4f:1c:a6:91:7e:df:18:ba: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5C:95:9E:5F:C8:4D:D8:6E:67:46:2F:F0:97:D3:88:5A:40:13:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 174.34.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5c:72:ca:c8:2a:16:05:bf:95:30:f3:4c:3a:03:55:2c:67: ba:5e:ff:3b:7a:fe:95:f2:ce:40:dd:e8:85:4d:f7:70:83:cb: e8:26:69:f1:db:6c:26:b1:f4:54:5a:70:29:b8:d2:62:71:92: 1e:4e:6e:5a:65:fa:72:ea:9a:ac:0a:a2:64:78:8a:53:46:cf: ce:9f:21:f7:a2:ad:be:96:bb:6f:06:43:a7:06:47:d6:85:a2: 5e:e5:92:b8:c8:52:f4:3e:1a:33:03:36:97:8e:41:46:c8:06: 85:bf:36:d7:03:a4:ea:49:b3:73:4a:a0:53:41:06:5a:ae:f3: 69:89:47:08:6a:1b:6a:8d:cb:53:4b:35:57:b4:6b:f9:e0:e9: 41:2f:61:b2:70:ac:ba:5f:f2:95:96:11:19:3c:62:22:6d:12: 58:11:23:24:92:c1:97:a2:e4:89:2e:10:55:14:9f:fe:9a:ec: 30:89:92:33:70:d9:94:89:e7:91:62:cd:39:19:e9:43:d1:bf: b5:95:9c:63:b3:70:c2:a3:03:35:fc:03:72:91:76:2b:bd:7b: b7:43:8a:e3:ff:20:e9:d1:de:cb:03:75:3d:88:3e:80:aa:42: 9d:e1:53:c6:86:45:20:fb:ec:08:b4:8b:37:d9:16:04:33:a9: 9f:1c:9d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSdjpcN4CYjiA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWIxZGNkMzAtZWQ0MS00NThkLTgzZDktMzViN2M1NjMzMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihxKoS0tiFzhG6lUE2E2wrfvsXdTR5tGjmac ys+2LO0HCVEn+T8gCrqkurrRahw5DEpjlRtryzP/lekUbpd3i7tliYoqS8qmAYLQ /zBq6lFV91xdQ9+MgeOF24qILlTGepoAiBsgJk/euuV5zSXN1etUg+ZozQZr9zU1 Yu5KIQ3YCzjVuHWky/sx21Kbn7FqCwL+6twpQwge5e0MUgq18luP07wTkbZci+1b XeiIjZIZYN7zRxEhh88ueygJ04DnkslHmITrp921uc55DybdVvTyS9qu9jTv9FJb U5MwXLrCtvCpHZN3tZeBdt+csYw9ZxBJwJn3TxymkX7fGLqZ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5clZ5fyE3YbmdGL/CX04haQBNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMGM2ZjFlNTUtYWRiNC0z MzljLWE4NWYtNWM3Nzc5NDQzYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhccsrIKhYFv5Uw80w6A1UsZ7pe/zt6/pXyzkDd6IVN93CDy+gmafHb bCax9FRacCm40mJxkh5Oblpl+nLqmqwKomR4ilNGz86fIfeirb6Wu28GQ6cGR9aF ol7lkrjIUvQ+GjMDNpeOQUbIBoW/NtcDpOpJs3NKoFNBBlqu82mJRwhqG2qNy1NL NVe0a/ng6UEvYbJwrLpf8pWWERk8YiJtElgRIySSwZei5IkuEFUUn/6a7DCJkjNw 2ZSJ55FizTkZ6UPRv7WVnGOzcMKjAzX8A3KRdiu9e7dDiuP/IOnR3ssDdT2IPoCq Qp3hU8aGRSD77Ai0izfZFgQzqZ8cnZo= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:50 2025 by rpki-client