$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa File: 1b665078-97d3-3b44-911e-af654cfb98a0.roa (raw, json) Hash identifier: fYY+qhnZemXY2Taa3eud6tTKK/YrYL/TLoQPlG4eVS4= Subject key identifier: 1B:0F:73:98:77:06:D4:35:20:E0:06:34:95:59:DE:72:F9:AD:F5:40 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584BBB758B4C608AC267CBFFFFC0 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 23158 IP address blocks: 67.216.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8b:4c:60:8a:c2:67:cb:ff:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=7fd4c0d5-8930-4d8a-a355-3bf7d54acadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1c:a4:f0:52:cf:e8:7a:09:8e:6d:2d:96:ea: e2:c1:d4:38:67:51:03:0e:3e:70:cf:cc:ae:b3:aa: bd:13:eb:88:0b:9d:57:d6:52:77:45:86:df:1a:8b: e5:21:15:4e:44:ae:ff:02:ac:1f:95:b1:58:d0:e1: 4b:6a:cf:b7:06:f9:9b:b5:a4:d6:12:cf:c3:7c:6e: dc:e1:e7:92:53:ae:ff:67:9a:7b:71:66:c8:d8:a8: c0:2f:f8:85:a3:c8:1d:4b:37:38:4b:a6:0e:8c:81: 07:19:4f:52:bf:27:a6:85:48:cf:c6:26:a2:b2:48: 6e:c5:21:5a:ee:02:38:f0:12:41:10:ed:a2:9a:90: 2a:f2:4d:3b:de:cf:3b:25:40:2f:54:17:10:f8:f1: b6:4d:6b:47:a7:1f:f2:10:bf:ab:6b:2d:e6:a6:d6: 5d:6f:1a:03:91:2a:dc:d3:10:c3:46:58:17:b5:4b: 8d:af:12:ce:1c:d8:9e:fd:13:ae:c9:9a:27:5d:50: e1:ec:2b:8b:b0:54:19:a7:a2:d7:e4:04:d2:24:a3: 14:d0:c7:33:7e:52:38:81:cb:9b:4c:59:91:23:36: 47:26:88:63:ce:2d:0b:4f:c0:80:7e:8c:6e:e1:38: a2:c4:69:70:40:8a:35:30:5e:47:a7:5f:37:41:b9: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0F:73:98:77:06:D4:35:20:E0:06:34:95:59:DE:72:F9:AD:F5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 67.216.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:4b:18:f5:b6:6e:10:03:53:20:bb:e1:e9:b2:8a:fc:f5:4b: 4d:0b:70:35:9b:a6:f9:a9:22:76:db:b2:d8:c6:f4:1c:ba:e6: 6c:b3:a4:74:39:f2:ff:fb:8c:2a:36:42:d9:0c:06:74:bd:4d: 99:f3:b5:7d:1b:4c:ab:84:23:e0:00:5a:ff:03:22:9f:84:ff: 27:db:e9:07:b0:37:cd:41:d0:d3:4d:d8:04:e2:1b:a6:9a:c9: d3:35:ee:33:99:d1:40:9d:e4:b5:8d:2b:cd:40:1c:fe:91:a3: 8a:21:79:49:e7:13:4e:f6:0e:82:e9:ce:5d:46:fd:07:bd:b1: d8:f7:77:17:bf:e9:8e:89:40:b9:52:14:cd:9b:07:43:7a:82: cf:cd:dc:51:c0:74:bd:82:9b:21:77:6d:3d:ff:2e:e8:4b:e0: 55:e5:dd:6f:af:01:0a:60:cf:d2:00:01:25:05:c5:2e:ff:74: 40:35:44:f7:1e:fa:46:d8:aa:07:0f:83:87:b5:2d:d3:76:55: 80:1c:b2:ce:a6:f4:1c:99:aa:c0:dd:67:ac:fa:83:34:10:38: 3b:a2:8d:a2:56:3e:e8:c9:a6:0d:4a:36:fa:d9:31:44:0f:0e: cf:b7:ee:27:77:87:67:ab:b2:97:f7:de:80:37:e1:bf:42:89: e8:cf:e7:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYtMYIrCZ8v//8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk N2ZkNGMwZDUtODkzMC00ZDhhLWEzNTUtM2JmN2Q1NGFjYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRyk8FLP6HoJjm0tluriwdQ4Z1EDDj5wz8yu s6q9E+uIC51X1lJ3RYbfGovlIRVORK7/AqwflbFY0OFLas+3BvmbtaTWEs/DfG7c 4eeSU67/Z5p7cWbI2KjAL/iFo8gdSzc4S6YOjIEHGU9SvyemhUjPxiaiskhuxSFa 7gI48BJBEO2impAq8k073s87JUAvVBcQ+PG2TWtHpx/yEL+ray3mptZdbxoDkSrc 0xDDRlgXtUuNrxLOHNie/ROuyZonXVDh7CuLsFQZp6LX5ATSJKMU0MczflI4gcub TFmRIzZHJohjzi0LT8CAfoxu4TiixGlwQIo1MF5Hp183QbluOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsPc5h3BtQ1IOAGNJVZ3nL5rfVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvMWI2NjUwNzgtOTdkMy0z YjQ0LTkxMWUtYWY2NTRjZmI5OGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1LGPW2bhADUyC74emyivz1S00LcDWbpvmpInbbstjG9By65myzpHQ5 8v/7jCo2QtkMBnS9TZnztX0bTKuEI+AAWv8DIp+E/yfb6QewN81B0NNN2ATiG6aa ydM17jOZ0UCd5LWNK81AHP6Ro4oheUnnE072DoLpzl1G/Qe9sdj3dxe/6Y6JQLlS FM2bB0N6gs/N3FHAdL2CmyF3bT3/LuhL4FXl3W+vAQpgz9IAASUFxS7/dEA1RPce +kbYqgcPg4e1LdN2VYAcss6m9ByZqsDdZ6z6gzQQODuijaJWPujJpg1KNvrZMUQP Ds+37id3h2erspf33oA34b9CiejP578= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:28 2025 by rpki-client