$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa File: ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa (raw, json) Hash identifier: QZ2X1ULftiutlQlyPNv78FokorXK9mv1XbObGBAy+II= Subject key identifier: BF:8B:68:0D:E1:61:17:BC:EE:D1:A4:2D:EC:03:1F:BA:57:FD:69:4B Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA667ACED5654A1F420E973C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 208.101.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ac:ed:56:54:a1:f4:20:e9:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=ed56cbd3-1e9e-4aeb-995a-8f4ac99b1656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dd:aa:a5:e1:d7:3a:d5:9c:67:8d:2c:23:47: 12:69:51:b3:01:fd:89:4d:e8:65:9c:71:ce:86:ca: c1:81:e9:21:1d:ac:8d:51:63:ad:19:b2:e2:67:1d: cd:30:45:94:54:73:a2:9c:56:19:81:52:e7:7d:b1: 59:ea:f9:4c:4e:d1:a4:1f:91:d4:8f:7e:67:ff:c7: 91:27:26:bf:80:2c:6c:3c:4d:03:b9:3f:c4:56:9d: 1a:dc:d0:d1:d9:f4:e4:45:52:bf:4e:d1:22:3d:c4: ea:e2:e5:61:d8:d1:ef:08:3e:2c:ef:40:b0:19:05: cd:ae:7c:8a:3e:d9:b0:a9:a8:ca:25:dd:ef:11:68: 1b:8d:14:6b:c8:f8:7e:8a:5f:67:28:d7:86:70:8f: e8:65:bf:af:69:a9:75:20:89:64:b0:43:ae:9c:2c: 8d:bc:43:76:87:af:b0:0b:cf:b1:b5:6b:bf:23:91: 14:68:fb:0c:fe:99:cc:da:69:02:34:a7:e4:a7:a4: 19:ed:e7:f8:74:a4:9c:d9:45:8e:db:9f:4f:6e:52: 80:78:4e:ff:7f:e4:0f:39:65:fc:48:dc:d0:c8:82: 26:52:8e:7c:9c:fc:ae:2f:56:9e:9b:03:d3:2f:67: 9a:70:de:1c:4d:39:77:a7:2b:0e:f0:f2:79:d1:07: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8B:68:0D:E1:61:17:BC:EE:D1:A4:2D:EC:03:1F:BA:57:FD:69:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 208.101.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ec:22:6b:d7:ec:d2:25:fa:9f:61:72:de:71:47:a8:a0:b5: 50:57:8b:ba:fc:5f:d5:f6:e9:9e:79:3d:3e:fa:46:74:d2:62: 4e:5f:a8:ba:0e:b1:68:6f:57:8b:3e:3f:f1:33:7d:57:b0:d0: 08:0b:54:55:9f:af:69:a7:92:5f:06:8e:ec:42:3e:04:87:a0: 7d:48:19:1f:d0:ca:2e:11:3e:d9:3b:d5:f6:e2:1b:65:bd:55: 41:92:fb:b9:b0:3a:4f:02:9c:2d:18:bd:de:94:ce:16:ca:62: 54:a5:c1:52:4d:f6:50:c3:ea:40:98:6e:42:dc:b0:d1:0d:06: 06:bd:bf:a1:5c:96:0e:b1:4e:26:53:6d:31:75:d9:a9:5c:47: 04:d8:c5:5f:69:b4:c1:a8:7a:ef:78:a7:0f:2b:b7:86:ef:5c: 54:34:71:99:9c:76:e0:a8:0d:c4:78:0a:46:8f:54:3b:d0:85: c9:7b:d9:41:30:25:2a:c2:69:56:5f:5b:55:7c:8d:ed:28:b3: b3:53:77:19:b2:09:9b:aa:8d:f0:7d:c9:11:85:26:52:fd:fe: a8:41:2f:c6:8f:e4:a1:35:c4:77:c8:0a:ea:75:71:28:f5:3d: b9:60:b7:cc:13:fe:b0:86:d1:b4:1a:a7:39:a4:0f:fd:32:a8: 8d:ae:ce:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6ztVlSh9CDpc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWQ1NmNiZDMtMWU5ZS00YWViLTk5NWEtOGY0YWM5OWIxNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t2qpeHXOtWcZ40sI0cSaVGzAf2JTehlnHHO hsrBgekhHayNUWOtGbLiZx3NMEWUVHOinFYZgVLnfbFZ6vlMTtGkH5HUj35n/8eR Jya/gCxsPE0DuT/EVp0a3NDR2fTkRVK/TtEiPcTq4uVh2NHvCD4s70CwGQXNrnyK PtmwqajKJd3vEWgbjRRryPh+il9nKNeGcI/oZb+vaal1IIlksEOunCyNvEN2h6+w C8+xtWu/I5EUaPsM/pnM2mkCNKfkp6QZ7ef4dKSc2UWO259PblKAeE7/f+QPOWX8 SNzQyIImUo58nPyuL1aemwPTL2eacN4cTTl3pysO8PJ50QeIIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+LaA3hYRe87tGkLewDH7pX/WlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmY1NWFhMWQtNWY5My0z MjE3LTg1MzYtNGFmNzg2ZjZmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzsImvX7NIl+p9hct5xR6igtVBXi7r8X9X26Z55PT76RnTSYk5fqLoO sWhvV4s+P/EzfVew0AgLVFWfr2mnkl8GjuxCPgSHoH1IGR/Qyi4RPtk71fbiG2W9 VUGS+7mwOk8CnC0Yvd6UzhbKYlSlwVJN9lDD6kCYbkLcsNENBga9v6Fclg6xTiZT bTF12alcRwTYxV9ptMGoeu94pw8rt4bvXFQ0cZmcduCoDcR4CkaPVDvQhcl72UEw JSrCaVZfW1V8je0os7NTdxmyCZuqjfB9yRGFJlL9/qhBL8aP5KE1xHfICup1cSj1 Pblgt8wT/rCG0bQapzmkD/0yqI2uziI= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:02 2025 by rpki-client