$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa File: 4db02882-9972-309e-8162-dbdd8d5ea807.roa (raw, json) Hash identifier: Ijg9hRONUK1bY1nt6yuIJvd/V0L/W/bm4PM0H1aFtQ4= Subject key identifier: D9:E1:63:2F:0A:D7:D7:48:91:6F:A3:F8:88:53:C9:95:B8:34:73:25 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA667AD7797E4E441D9F4B380 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 216.120.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ad:77:97:e4:e4:41:d9:f4:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=496a4d76-53b3-4898-bbf5-63852de349b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:0d:b3:ac:c0:0e:52:0c:27:40:26:a9:9e: 14:5d:5a:fc:17:6f:0e:ff:2c:4e:4a:86:14:3f:1a: 10:cd:b1:a5:b9:09:ed:74:96:cb:43:88:d2:0f:6e: e2:cc:d9:4f:06:18:0c:c7:46:30:15:f2:6b:b5:79: da:97:9d:67:09:9c:e8:2f:a8:9a:74:f2:22:3b:da: 08:32:dd:5d:f3:b0:26:09:d9:2b:ef:ea:ae:e2:10: 8d:bd:7c:91:e3:17:06:40:35:59:8d:52:b6:a6:c2: 78:69:f7:88:0a:12:27:cb:88:3d:2c:08:04:6e:94: 82:16:d9:3f:27:0c:d0:d3:b4:99:29:b6:4b:3e:c9: 0f:40:30:84:37:77:af:c6:36:1d:a0:90:36:10:45: 1f:bd:ae:aa:09:b5:71:aa:9b:73:88:6e:40:77:20: 84:db:6c:13:86:2f:82:6a:37:6e:79:9b:8f:58:fe: b7:5e:92:11:74:bb:73:88:5f:a5:40:68:64:e6:6e: 7b:0f:95:92:76:de:5b:ed:66:26:dc:ec:ee:57:ad: c1:a6:b5:8a:3b:56:3a:c3:67:7e:39:fb:c6:36:20: 05:bf:04:39:6f:7b:84:9e:51:66:22:3b:bf:d4:bd: fe:b4:e0:36:ca:3c:99:17:43:b0:51:07:a0:3a:7f: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E1:63:2F:0A:D7:D7:48:91:6F:A3:F8:88:53:C9:95:B8:34:73:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.120.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:77:00:bc:ab:f9:79:1a:81:9d:21:af:28:86:9c:2c:f5:43: 41:89:9b:fe:b5:3a:fb:02:1b:a5:a4:10:c4:88:dd:12:00:b0: 56:51:1e:1d:da:04:7a:f7:58:72:78:44:5b:2c:95:4c:59:b9: 0e:84:22:66:e1:82:22:e3:51:38:1f:e6:57:09:5c:9a:e0:de: 3b:02:8b:65:46:95:ad:0e:f3:e0:f4:03:44:6d:7e:16:99:94: 0d:6c:e9:21:69:2c:98:a7:72:48:e3:1b:6f:21:87:64:62:ec: 62:84:0b:5b:4a:e4:62:c5:08:25:c5:b4:d9:2c:9f:1f:ec:d7: 47:b0:14:4d:eb:fe:52:2e:d9:1e:7b:eb:51:c4:ff:ce:72:32: e8:bc:e5:71:f2:d4:de:e8:36:9b:b1:78:5e:04:e1:8b:02:27: af:e1:69:cb:df:11:f5:02:cc:9d:e0:c8:2b:b3:87:3f:69:dd: 2e:bd:59:68:10:2f:fd:28:12:3b:c4:fb:59:37:7b:8e:8d:00: b1:b6:2f:cf:ef:81:d0:b8:ec:7f:75:9e:01:49:50:56:5a:8d: 0e:27:cc:37:4b:6c:19:7b:c7:73:2b:ba:9c:c7:53:d9:6f:b7: a6:e8:bb:90:26:0f:85:2b:c5:a1:f5:1e:e2:d2:f8:c9:6c:04: 5f:5c:ec:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ613l+TkQdn0s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NDk2YTRkNzYtNTNiMy00ODk4LWJiZjUtNjM4NTJkZTM0OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW8Ns6zADlIMJ0AmqZ4UXVr8F28O/yxOSoYU PxoQzbGluQntdJbLQ4jSD27izNlPBhgMx0YwFfJrtXnal51nCZzoL6iadPIiO9oI Mt1d87AmCdkr7+qu4hCNvXyR4xcGQDVZjVK2psJ4afeIChIny4g9LAgEbpSCFtk/ JwzQ07SZKbZLPskPQDCEN3evxjYdoJA2EEUfva6qCbVxqptziG5AdyCE22wThi+C ajdueZuPWP63XpIRdLtziF+lQGhk5m57D5WSdt5b7WYm3OzuV63BprWKO1Y6w2d+ OfvGNiAFvwQ5b3uEnlFmIju/1L3+tOA2yjyZF0OwUQegOn8yIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnhYy8K19dIkW+j+IhTyZW4NHMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNGRiMDI4ODItOTk3Mi0z MDllLTgxNjItZGJkZDhkNWVhODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt3ALyr+XkagZ0hryiGnCz1Q0GJm/61OvsCG6WkEMSI3RIAsFZRHh3a BHr3WHJ4RFsslUxZuQ6EImbhgiLjUTgf5lcJXJrg3jsCi2VGla0O8+D0A0RtfhaZ lA1s6SFpLJinckjjG28hh2Ri7GKEC1tK5GLFCCXFtNksnx/s10ewFE3r/lIu2R57 61HE/85yMui85XHy1N7oNpuxeF4E4YsCJ6/hacvfEfUCzJ3gyCuzhz9p3S69WWgQ L/0oEjvE+1k3e46NALG2L8/vgdC47H91ngFJUFZajQ4nzDdLbBl7x3MrupzHU9lv t6bou5AmD4UrxaH1HuLS+MlsBF9c7F8= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:07 2025 by rpki-client