$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa File: ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa (raw, json) Hash identifier: twJMewRKXVlkXrJZHp2vsJCwXQVHaFH2OVwf+bSM5RQ= Subject key identifier: C9:DC:9C:A6:B3:CD:2F:A4:A4:D3:CF:57:40:FB:2F:52:8B:E1:2A:30 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA667ACB7202B94435F011090 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 207.53.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ac:b7:20:2b:94:43:5f:01:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=df72b2c5-72da-43db-bfee-c9833bf483cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:46:11:55:45:d4:4e:61:73:19:9d:fc:ec: 98:f5:9f:8a:aa:6a:5f:d4:11:88:ee:e4:1e:0d:a4: 09:73:e4:dc:30:1c:04:fc:ad:f4:72:68:38:c4:18: e4:be:bf:6d:ab:95:01:7e:8f:c1:9f:94:78:77:b1: a4:cb:e9:9e:a2:3a:f1:52:a8:45:fa:36:14:78:ee: 30:72:ef:20:0e:dd:1c:7c:96:77:98:a4:08:8f:36: bf:e8:0c:de:29:14:3f:93:02:a1:42:02:2d:fa:f4: 3d:16:df:2a:eb:07:c1:39:fa:6e:5b:65:ed:f6:55: 07:2b:eb:b1:c5:25:83:2c:29:2e:53:ce:a1:b4:97: 75:5e:07:c4:98:21:15:a0:d6:37:65:8d:db:3b:eb: 52:10:c6:3e:fc:ec:6e:4b:a8:b2:32:73:37:00:9f: fb:6d:05:9d:63:81:4d:07:02:cb:aa:60:89:f9:e5: e4:d9:bf:c5:e3:d2:ab:2e:b9:99:ae:2f:27:76:93: c8:4d:25:6c:c0:d0:76:40:ce:e7:cf:6d:b2:03:93: 33:f5:b0:19:0e:a1:06:2f:03:c4:85:42:4a:d0:96: 9b:68:b0:77:3c:6c:51:70:b1:fa:15:6d:0e:f1:86: 2d:58:16:b3:8b:aa:cd:6b:c0:97:0f:55:72:fa:9d: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:9C:A6:B3:CD:2F:A4:A4:D3:CF:57:40:FB:2F:52:8B:E1:2A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef536fa4-9ed3-345e-ad0e-e6cc3e4bcfc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 207.53.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8d:dd:24:11:af:d4:5c:67:ae:db:c8:7a:41:9d:dd:61:6d: 64:aa:61:ee:76:d5:15:dd:d9:f1:69:5c:e0:3c:55:11:09:ba: 57:3b:2a:f2:66:a5:a0:32:1e:88:30:ff:fa:4e:d9:4e:20:64: 2d:bb:af:97:98:48:43:34:16:06:62:70:38:ea:c2:24:b7:c3: d2:d6:0c:61:bf:15:b4:a6:df:71:e9:fe:09:0d:54:86:18:64: 54:84:dd:26:3a:a2:f5:de:a0:bd:06:81:3c:63:16:34:61:f7: 4d:75:ab:1d:e2:9b:0f:b0:25:8e:b0:ca:e9:28:0b:0e:bf:d4: ce:f1:71:a0:7a:c7:23:96:cc:cb:f5:38:e9:91:04:ed:0b:26: be:a9:c6:43:91:a8:ca:90:d2:20:6e:e3:ed:19:d8:ec:d6:58: ea:bc:ef:b5:3b:a7:1a:ee:75:10:bb:85:f8:69:39:62:38:f9: 5e:7a:b0:b3:bb:cc:33:b6:90:ca:6e:9c:a4:89:03:99:d7:ea: 36:b5:fc:d1:8a:c9:7b:c5:c3:4b:d2:f1:46:67:d9:7b:a0:83: 0c:e4:7d:a4:05:3b:2d:6e:d3:b5:2f:c5:37:44:03:1a:db:60: 79:bb:03:d6:ce:c8:42:fb:47:e1:91:32:96:67:48:5e:1c:9c: c3:f0:fe:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6y3ICuUQ18BEJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZGY3MmIyYzUtNzJkYS00M2RiLWJmZWUtYzk4MzNiZjQ4M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOlGEVVF1E5hcxmd/OyY9Z+Kqmpf1BGI7uQe DaQJc+TcMBwE/K30cmg4xBjkvr9tq5UBfo/Bn5R4d7Gky+meojrxUqhF+jYUeO4w cu8gDt0cfJZ3mKQIjza/6AzeKRQ/kwKhQgIt+vQ9Ft8q6wfBOfpuW2Xt9lUHK+ux xSWDLCkuU86htJd1XgfEmCEVoNY3ZY3bO+tSEMY+/OxuS6iyMnM3AJ/7bQWdY4FN BwLLqmCJ+eXk2b/F49KrLrmZri8ndpPITSVswNB2QM7nz22yA5Mz9bAZDqEGLwPE hUJK0JabaLB3PGxRcLH6FW0O8YYtWBazi6rNa8CXD1Vy+p0ULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMncnKazzS+kpNPPV0D7L1KL4SowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZWY1MzZmYTQtOWVkMy0z NDVlLWFkMGUtZTZjYzNlNGJjZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2N3SQRr9RcZ67byHpBnd1hbWSqYe521RXd2fFpXOA8VREJulc7KvJm paAyHogw//pO2U4gZC27r5eYSEM0FgZicDjqwiS3w9LWDGG/FbSm33Hp/gkNVIYY ZFSE3SY6ovXeoL0GgTxjFjRh9011qx3imw+wJY6wyukoCw6/1M7xcaB6xyOWzMv1 OOmRBO0LJr6pxkORqMqQ0iBu4+0Z2OzWWOq877U7pxrudRC7hfhpOWI4+V56sLO7 zDO2kMpunKSJA5nX6ja1/NGKyXvFw0vS8UZn2XuggwzkfaQFOy1u07UvxTdEAxrb YHm7A9bOyEL7R+GRMpZnSF4cnMPw/qk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:50 2025 by rpki-client