$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa File: e21f367a-40c1-3c90-b30a-ec98806099f3.roa (raw, json) Hash identifier: cxLimbLPsyru8a9QPBleYEucaHISZP7RJv4AN1xDnrQ= Subject key identifier: B1:FB:45:ED:1A:9F:C3:F1:F1:ED:88:59:EB:02:42:3B:47:36:3A:D6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA667AD981BCC66F3B93CF880 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 216.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ad:98:1b:cc:66:f3:b9:3c:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=efba7ae8-ef95-47a6-8e86-1d4d4bdb98ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:1d:e1:2b:40:bd:be:c1:22:ae:6b:ad:20: e2:66:81:27:9f:0a:b3:20:89:b8:2a:a1:22:52:bb: ae:c9:dc:52:90:6c:d4:78:59:4a:46:18:fa:a1:07: c7:61:29:67:5c:d2:a3:d4:1d:ec:a4:e0:2a:6e:24: 3b:ed:46:33:b2:e4:8e:7e:4e:d0:32:34:7b:d7:ed: 31:e9:a8:2e:f5:2b:a7:65:c7:f0:9b:7c:6e:d2:e4: c5:34:29:0d:0f:c8:2f:e3:77:6b:87:f0:2b:6e:c0: 26:3c:13:33:43:ee:37:b7:dc:5e:0d:b3:f4:40:c4: 26:14:0f:98:48:87:64:5a:7e:cc:a1:06:d2:91:4b: 68:6c:c7:29:5d:6e:69:25:9d:69:7d:86:32:12:06: 54:15:0c:56:c7:90:a1:d5:60:f5:56:95:a4:6c:4c: aa:04:67:e0:96:b4:7c:ac:a1:d5:80:45:15:d4:e2: a5:87:9c:85:4d:04:40:67:77:34:a1:ef:4f:62:9a: 52:d3:9a:71:b9:98:dd:a9:89:74:32:3b:65:85:56: 5a:71:f2:fd:1d:78:cd:e3:44:8c:ad:6b:a6:2a:37: 8c:f3:39:50:25:f1:83:00:f3:b5:f9:e3:1a:cb:b7: 26:43:39:b8:01:98:92:5b:84:7f:ab:10:83:e4:ee: 7e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FB:45:ED:1A:9F:C3:F1:F1:ED:88:59:EB:02:42:3B:47:36:3A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1c:ea:dd:f1:9b:f9:a6:b3:3c:23:63:7d:5d:1e:44:c9:02: 57:84:bc:34:64:91:d5:cb:5c:4a:c2:21:d0:a5:38:33:e3:74: 47:78:c5:20:24:ce:41:5f:b2:32:21:80:3d:fe:0b:f0:3f:e0: c1:fe:f0:49:85:5c:9d:23:81:21:21:00:bc:ef:29:cd:87:22: ea:bb:bf:c6:6b:5a:8a:a5:06:70:c3:30:8e:11:3b:6f:2f:21: 8e:55:ed:82:59:cc:d0:d9:4c:6d:01:d3:a1:57:79:bc:86:df: 6e:91:32:6d:0e:05:de:a1:f0:25:ab:5d:13:b5:8e:75:3b:37: ea:be:5a:07:0e:c0:e8:02:9c:53:68:45:06:ab:72:ce:c9:56: ca:10:85:74:72:12:8b:dc:c4:3b:65:6b:de:86:94:94:69:00: 22:9d:53:f0:79:4e:11:9c:1b:be:7d:81:58:38:46:73:d8:22: f4:2d:45:04:1e:42:8b:51:9c:39:35:9c:4d:f7:a2:f9:d9:7a: 5e:e8:72:30:e6:6e:3d:2a:77:c3:87:c7:fd:bd:b1:5f:9f:da: 44:28:46:76:91:55:af:86:fb:61:1d:42:c8:5d:30:60:62:59: eb:85:85:52:57:af:27:1d:66:43:ae:b7:29:1f:e8:9d:19:c0: 32:f2:c5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ62YG8xm87k8+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWZiYTdhZTgtZWY5NS00N2E2LThlODYtMWQ0ZDRiZGI5OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQgd4StAvb7BIq5rrSDiZoEnnwqzIIm4KqEi UruuydxSkGzUeFlKRhj6oQfHYSlnXNKj1B3spOAqbiQ77UYzsuSOfk7QMjR71+0x 6agu9SunZcfwm3xu0uTFNCkND8gv43drh/ArbsAmPBMzQ+43t9xeDbP0QMQmFA+Y SIdkWn7MoQbSkUtobMcpXW5pJZ1pfYYyEgZUFQxWx5Ch1WD1VpWkbEyqBGfglrR8 rKHVgEUV1OKlh5yFTQRAZ3c0oe9PYppS05pxuZjdqYl0MjtlhVZacfL9HXjN40SM rWumKjeM8zlQJfGDAPO1+eMay7cmQzm4AZiSW4R/qxCD5O5+pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH7Re0an8Px8e2IWesCQjtHNjrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTIxZjM2N2EtNDBjMS0z YzkwLWIzMGEtZWM5ODgwNjA5OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgc6t3xm/mmszwjY31dHkTJAleEvDRkkdXLXErCIdClODPjdEd4xSAk zkFfsjIhgD3+C/A/4MH+8EmFXJ0jgSEhALzvKc2HIuq7v8ZrWoqlBnDDMI4RO28v IY5V7YJZzNDZTG0B06FXebyG326RMm0OBd6h8CWrXRO1jnU7N+q+WgcOwOgCnFNo RQarcs7JVsoQhXRyEovcxDtla96GlJRpACKdU/B5ThGcG759gVg4RnPYIvQtRQQe QotRnDk1nE33ovnZel7ocjDmbj0qd8OHx/29sV+f2kQoRnaRVa+G+2EdQshdMGBi WeuFhVJXrycdZkOutykf6J0ZwDLyxQI= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:06 2025 by rpki-client