$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/248ff026-035f-3746-88ef-4fb028393c6e.roa File: 248ff026-035f-3746-88ef-4fb028393c6e.roa (raw, json) Hash identifier: pDoMm/jclW3GheyWejB0fZ/8GlQU7V7Vifsn9lyh0iY= Subject key identifier: 54:68:A2:CD:BA:31:5A:59:FA:D8:D7:30:01:CE:D4:91:EC:3B:6C:F1 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA667AD26D645CA36B889A580 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/248ff026-035f-3746-88ef-4fb028393c6e.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 209.59.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ad:26:d6:45:ca:36:b8:89:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=2a74d023-01ce-46ee-a8d3-c05888691e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:f1:4d:59:cd:16:f1:ae:95:a8:a0:1b:ff: bb:69:27:72:0c:eb:eb:ff:ee:39:8a:84:42:21:0c: b0:f3:79:66:14:2e:23:3b:3b:1d:51:01:d5:7c:06: 41:b6:36:45:76:e9:f1:08:a6:0b:ca:9b:4e:55:9b: 6b:e2:e6:b0:f4:87:6f:b5:39:5a:5f:16:7e:a4:0c: 7e:07:86:31:a6:91:58:a8:3d:1d:8e:ab:24:d4:3c: 6f:00:15:69:3f:34:51:45:08:1c:a0:2e:a4:c0:fd: 88:5e:f4:3e:4e:2c:b1:31:14:4b:a9:2a:d9:b6:0f: 1c:70:7e:a8:87:c7:5a:a6:52:16:30:38:81:64:ab: af:9c:92:3c:28:d4:24:c5:c4:ab:64:d6:23:4f:3a: 19:83:cb:f1:95:29:4f:e4:0b:ba:b9:19:38:fa:ad: c0:c3:aa:de:d5:d3:ac:85:18:8d:01:51:4d:67:f4: 1f:13:e3:20:7f:7f:48:79:f6:64:e5:76:63:ef:a2: 38:b4:b5:29:b8:5a:a9:92:07:8d:23:b4:fb:db:92: 77:44:b4:fa:86:c6:1e:8c:f8:44:b5:0b:7e:87:87: 94:99:1e:54:d4:18:5c:38:47:74:b2:ff:d0:1c:e2: ca:f7:98:c1:31:14:9e:4b:26:ce:aa:f3:62:eb:57: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:68:A2:CD:BA:31:5A:59:FA:D8:D7:30:01:CE:D4:91:EC:3B:6C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/248ff026-035f-3746-88ef-4fb028393c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.59.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ab:23:3c:89:27:b0:e4:87:0e:20:7c:aa:e1:0d:65:cb:15: 12:83:92:2c:d4:ea:8d:5a:12:12:83:48:b0:98:97:54:d4:d5: c7:72:f7:11:5d:21:57:7a:ad:06:27:21:0f:34:05:8c:54:53: f8:ee:50:57:02:14:10:30:e8:3b:a2:7c:f1:e6:44:31:0e:96: e3:08:db:6f:d7:50:0c:9b:d1:bd:c2:16:7d:22:9e:05:bd:1d: b6:a2:1d:8c:8c:4a:cf:2b:5b:20:93:97:c3:c8:a2:73:0d:ca: 7b:b9:fd:dc:96:9b:8d:7f:ee:22:81:af:c9:97:03:8a:5f:4c: ba:38:8d:f6:ab:bf:71:46:b3:a0:a1:cf:8e:f9:7e:37:3c:86: 88:49:a4:e8:48:d8:f1:77:70:4b:f8:56:b4:67:a1:bb:42:90: a8:51:40:c3:36:27:3b:0e:90:b2:db:09:e7:e2:43:ad:d6:dc: 61:c9:dd:ed:86:13:72:0b:16:21:86:bc:52:35:ca:23:4c:f8: 44:c3:bd:6e:9d:94:b6:1d:8d:62:94:b4:f2:b5:3f:6d:3c:37: 18:69:e5:65:68:9b:af:49:ab:eb:c0:de:c1:0b:32:ea:96:bc: c0:08:95:69:12:87:22:d0:85:8c:c5:3a:2b:af:b2:91:b3:1b: f7:d9:ed:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ60m1kXKNriJpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MmE3NGQwMjMtMDFjZS00NmVlLWE4ZDMtYzA1ODg4NjkxZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC3xTVnNFvGulaigG/+7aSdyDOvr/+45ioRC IQyw83lmFC4jOzsdUQHVfAZBtjZFdunxCKYLyptOVZtr4uaw9IdvtTlaXxZ+pAx+ B4YxppFYqD0djqsk1DxvABVpPzRRRQgcoC6kwP2IXvQ+TiyxMRRLqSrZtg8ccH6o h8daplIWMDiBZKuvnJI8KNQkxcSrZNYjTzoZg8vxlSlP5Au6uRk4+q3Aw6re1dOs hRiNAVFNZ/QfE+Mgf39IefZk5XZj76I4tLUpuFqpkgeNI7T725J3RLT6hsYejPhE tQt+h4eUmR5U1BhcOEd0sv/QHOLK95jBMRSeSybOqvNi61cdCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRoos26MVpZ+tjXMAHO1JHsO2zxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjQ4ZmYwMjYtMDM1Zi0z NzQ2LTg4ZWYtNGZiMDI4MzkzYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Tv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2rIzyJJ7Dkhw4gfKrhDWXLFRKDkizU6o1aEhKDSLCYl1TU1cdy9xFd IVd6rQYnIQ80BYxUU/juUFcCFBAw6DuifPHmRDEOluMI22/XUAyb0b3CFn0ingW9 HbaiHYyMSs8rWyCTl8PIonMNynu5/dyWm41/7iKBr8mXA4pfTLo4jfarv3FGs6Ch z475fjc8hohJpOhI2PF3cEv4VrRnobtCkKhRQMM2JzsOkLLbCefiQ63W3GHJ3e2G E3ILFiGGvFI1yiNM+ETDvW6dlLYdjWKUtPK1P208Nxhp5WVom69Jq+vA3sELMuqW vMAIlWkShyLQhYzFOiuvspGzG/fZ7ao= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:06 2025 by rpki-client