$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa File: bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa (raw, json) Hash identifier: dXJuqs4uGQsYUQoMFsnF7UA20iihcZJ9f6Ytelvus+o= Subject key identifier: D5:18:0A:13:90:0C:8B:D5:40:22:11:D2:4D:57:51:65:A6:2D:5B:F1 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB7591C6A9F4A6AF29A3CDC0 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 216.255.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:91:c6:a9:f4:a6:af:29:a3:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=d2a2b406-7098-4ad2-8752-6bf1784dc535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:56:d0:18:a1:7f:23:61:2a:88:1d:bc:65:06: ef:d6:c9:52:dc:7e:3b:57:76:f8:fa:a1:61:c4:78: 73:4f:72:2d:c0:4d:21:47:b0:b8:3c:2a:a0:1f:11: 36:61:83:ee:34:ed:f0:11:5d:74:f4:f9:ff:2a:f1: d8:df:64:df:50:42:c1:a4:57:4d:c7:e9:ca:b4:85: 77:d1:5c:24:14:22:c9:ce:22:2c:73:ff:07:99:96: 31:4b:8a:ea:1a:4c:d1:de:1d:b5:62:5c:aa:90:cf: 8d:cb:90:f5:58:6f:fa:bc:a0:cf:c2:73:33:16:04: 5c:0d:d9:5b:20:d9:9c:0b:c5:0e:72:c6:65:44:87: cb:44:33:b1:b9:8b:a3:78:f6:4c:bc:17:05:57:a5: 01:58:d9:30:5c:39:98:a4:6d:2f:af:59:63:23:95: cc:3e:78:87:41:fb:0f:ca:3d:07:b9:72:82:34:7f: 5e:b6:1c:5a:13:32:2b:81:46:8b:cc:92:7d:52:38: 13:41:1a:87:fe:86:c2:8f:1a:50:40:d7:d3:ef:bf: 44:d9:8d:3c:50:26:ad:67:80:15:62:e0:6f:f8:c3: 03:15:a7:69:dd:bf:60:88:4e:c3:f9:82:d1:e9:be: 77:ab:35:14:18:80:33:10:1c:da:75:e9:2b:a2:d2: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:18:0A:13:90:0C:8B:D5:40:22:11:D2:4D:57:51:65:A6:2D:5B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ad:1d:4f:78:a2:a9:44:6a:29:52:8c:e9:82:d7:10:04:03: 91:ef:c1:62:c2:9d:59:66:62:73:15:c9:43:b0:2a:7b:58:ea: 50:5b:d8:c8:08:78:e7:4e:2d:ab:ed:7c:5c:8c:05:ca:49:95: 81:2b:83:77:88:3f:21:a3:24:a6:80:fd:fc:83:3b:00:f5:4b: 6d:02:3d:ab:e9:2c:8e:11:4e:ca:d4:7a:c3:ac:6b:0f:03:96: a2:b6:27:c4:1b:99:05:9e:f2:70:5b:0f:66:b2:0f:74:0d:57: 5b:b9:0e:d5:76:8e:b7:9f:ae:f7:1d:1f:ab:1a:df:ba:a6:17: a3:72:07:21:64:10:42:2f:10:8d:09:53:79:54:f2:71:89:2b: 12:2d:c5:b2:be:ae:f7:cf:9f:96:5a:c1:d3:35:cf:c7:1a:1b: fa:86:b0:7c:e5:93:5f:c2:ae:9d:88:71:06:f7:60:62:56:6c: 4f:04:e6:39:db:27:e3:d4:db:6f:d9:a0:14:26:20:72:04:c1: 26:18:37:ec:f4:b9:c6:84:ec:b3:21:7a:91:ec:f2:da:65:ab: d8:a7:cd:de:a9:4b:2b:93:07:70:f6:d0:f9:33:89:44:67:fc: dd:a5:b2:75:80:07:a7:c4:85:6d:0b:69:3f:68:71:30:1c:1f: 77:e6:21:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZHGqfSmrymjzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDJhMmI0MDYtNzA5OC00YWQyLTg3NTItNmJmMTc4NGRjNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFbQGKF/I2EqiB28ZQbv1slS3H47V3b4+qFh xHhzT3ItwE0hR7C4PCqgHxE2YYPuNO3wEV109Pn/KvHY32TfUELBpFdNx+nKtIV3 0VwkFCLJziIsc/8HmZYxS4rqGkzR3h21YlyqkM+Ny5D1WG/6vKDPwnMzFgRcDdlb INmcC8UOcsZlRIfLRDOxuYujePZMvBcFV6UBWNkwXDmYpG0vr1ljI5XMPniHQfsP yj0HuXKCNH9ethxaEzIrgUaLzJJ9UjgTQRqH/obCjxpQQNfT779E2Y08UCatZ4AV YuBv+MMDFadp3b9giE7D+YLR6b53qzUUGIAzEBzadekrotKXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUYChOQDIvVQCIR0k1XUWWmLVvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYmMyY2MwZjUtMzcyOC0z ODQ5LTk2Y2ItYTI3NzFiYjlhNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCtHU94oqlEailSjOmC1xAEA5HvwWLCnVlmYnMVyUOwKntY6lBb2MgI eOdOLavtfFyMBcpJlYErg3eIPyGjJKaA/fyDOwD1S20CPavpLI4RTsrUesOsaw8D lqK2J8QbmQWe8nBbD2ayD3QNV1u5DtV2jrefrvcdH6sa37qmF6NyByFkEEIvEI0J U3lU8nGJKxItxbK+rvfPn5ZawdM1z8caG/qGsHzlk1/Crp2IcQb3YGJWbE8E5jnb J+PU22/ZoBQmIHIEwSYYN+z0ucaE7LMhepHs8tplq9inzd6pSyuTB3D20PkziURn /N2lsnWAB6fEhW0LaT9ocTAcH3fmIRU= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:46 2025 by rpki-client