$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa File: 36662260-e268-3f6b-b84f-abb203cc78ac.roa (raw, json) Hash identifier: XKqqUDIcvUeZOu1Vl4jC7EL/vaC/whXnWfwHGxpwNOI= Subject key identifier: 1A:63:3B:C9:2A:C9:66:52:0D:EE:F3:A8:A5:E9:4C:90:98:D2:6E:64 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB758A4BF77DD05ABB45F300 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 216.255.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8a:4b:f7:7d:d0:5a:bb:45:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=19ea39b1-70f8-474f-9928-a6cb9b607e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:7a:37:dc:c7:da:fc:93:d3:63:ec:04:a6: 4c:45:ef:a5:b3:9a:c5:ae:a7:e4:ef:40:8d:9f:80: 7d:b5:40:a6:91:2d:d4:27:99:89:6b:2f:1d:06:e3: 56:b2:c3:a8:68:c8:ce:43:0f:0f:e6:93:df:44:4b: b8:7d:b6:47:38:d3:5d:87:f7:df:d9:09:c9:e4:d3: 09:8b:ff:0b:cd:ff:c8:40:46:d3:7b:8c:5d:f6:66: 01:32:5b:61:7c:f5:bf:fd:5e:78:12:6b:e3:a6:8d: 29:64:57:b1:4f:02:68:5f:32:27:6b:ce:88:31:3c: 6b:84:6a:b1:19:24:44:16:10:c8:f4:99:72:c1:fb: f1:31:32:e5:98:5e:8e:06:e5:da:35:92:73:a9:33: 7d:0b:b4:cb:5a:95:02:1e:90:ef:34:bd:ad:84:60: 40:f4:cf:ba:b9:89:62:8f:18:e5:22:bd:5a:25:32: 6b:4e:90:a7:d2:56:c8:a8:cb:0e:ee:28:37:2a:24: ee:b9:da:34:3c:13:49:ab:ec:e0:26:9a:eb:94:43: e7:5d:f3:d6:20:75:01:2f:d8:cb:49:31:4b:58:6a: 21:fb:c7:58:7b:9e:2c:0d:21:ac:b0:92:ca:07:ed: ef:8c:08:86:78:03:48:f8:9b:9e:58:88:56:05:42: 6f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:63:3B:C9:2A:C9:66:52:0D:EE:F3:A8:A5:E9:4C:90:98:D2:6E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:27:db:bc:74:e9:9f:87:08:71:2e:81:7c:c7:90:da:5e:82: b3:ca:0d:25:3b:71:db:a9:bb:6a:3b:19:84:7b:ec:14:05:92: 6d:cf:e7:a0:86:2e:4e:9d:4b:0b:13:9b:59:4a:e7:ac:6d:68: 77:2e:cb:7a:ff:aa:34:f2:0c:cf:c2:c3:a8:61:9b:fa:42:9d: 5e:bb:c9:a7:95:16:5e:86:ae:09:85:03:73:7c:67:2f:25:b4: 27:8b:fb:84:3f:d7:a8:4a:a3:c9:18:24:60:4d:ad:49:40:8b: 3d:32:e1:f9:86:89:09:43:ee:b5:09:2b:5e:91:cb:ec:d6:06: fb:fc:8f:5f:3c:5b:8d:6c:f1:c7:0a:7d:5e:61:e3:d1:c0:0d: 34:93:1a:99:33:71:80:6a:41:ac:f6:66:6d:53:24:00:41:07: 2a:cd:80:80:27:6f:96:4f:8e:44:9e:2a:77:13:87:f6:2c:5d: 83:8a:a5:64:cc:aa:3e:7b:04:ab:31:c4:12:5d:44:1f:91:3d: 2e:73:93:31:f7:54:74:20:64:53:b6:a1:70:5c:10:28:1c:e2: 12:af:f2:84:b3:ce:86:23:ce:22:e2:8c:37:95:c8:72:5a:f3: 09:ee:86:b9:3c:78:c7:22:d9:92:c4:10:07:88:2e:84:98:ef: 94:25:91:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYpL933QWrtF8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MTllYTM5YjEtNzBmOC00NzRmLTk5MjgtYTZjYjliNjA3ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7x6N9zH2vyT02PsBKZMRe+ls5rFrqfk70CN n4B9tUCmkS3UJ5mJay8dBuNWssOoaMjOQw8P5pPfREu4fbZHONNdh/ff2QnJ5NMJ i/8Lzf/IQEbTe4xd9mYBMlthfPW//V54Emvjpo0pZFexTwJoXzIna86IMTxrhGqx GSREFhDI9JlywfvxMTLlmF6OBuXaNZJzqTN9C7TLWpUCHpDvNL2thGBA9M+6uYli jxjlIr1aJTJrTpCn0lbIqMsO7ig3KiTuudo0PBNJq+zgJprrlEPnXfPWIHUBL9jL STFLWGoh+8dYe54sDSGssJLKB+3vjAiGeANI+JueWIhWBUJvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpjO8kqyWZSDe7zqKXpTJCY0m5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMzY2NjIyNjAtZTI2OC0z ZjZiLWI4NGYtYWJiMjAzY2M3OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQn27x06Z+HCHEugXzHkNpegrPKDSU7cdupu2o7GYR77BQFkm3P56CG Lk6dSwsTm1lK56xtaHcuy3r/qjTyDM/Cw6hhm/pCnV67yaeVFl6GrgmFA3N8Zy8l tCeL+4Q/16hKo8kYJGBNrUlAiz0y4fmGiQlD7rUJK16Ry+zWBvv8j188W41s8ccK fV5h49HADTSTGpkzcYBqQaz2Zm1TJABBByrNgIAnb5ZPjkSeKncTh/YsXYOKpWTM qj57BKsxxBJdRB+RPS5zkzH3VHQgZFO2oXBcECgc4hKv8oSzzoYjziLijDeVyHJa 8wnuhrk8eMci2ZLEEAeILoSY75Qlkbw= -----END CERTIFICATE-----Generated at Mon Nov 3 08:44:08 2025 by rpki-client