$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/78b70c42-302e-3f15-8201-56c579d8d2b1.roa File: 78b70c42-302e-3f15-8201-56c579d8d2b1.roa (raw, json) Hash identifier: J6pz3tc5ombsBzhDV4pA04g/LnPqUYSHpeA0HDKdsS8= Subject key identifier: C0:A0:C7:02:89:BE:64:49:D6:37:D4:BE:7D:97:44:D4:6A:B3:CA:F1 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584B9EA1EC7C09B95255670C5E40 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/78b70c42-302e-3f15-8201-56c579d8d2b1.roa Signing time: Thu 23 Oct 2025 18:11:41 +0000 ROA not before: Thu 23 Oct 2025 18:11:41 +0000 ROA not after: Wed 21 Jan 2026 19:11:41 +0000 asID: 29831 IP address blocks: 216.198.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:a1:ec:7c:09:b9:52:55:67:0c:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Oct 23 18:11:41 2025 GMT Not After : Jan 21 19:11:41 2026 GMT Subject: CN=70d36de8-9d93-4680-933e-d27b04d79cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:a1:5a:76:2b:40:c6:9d:49:0f:d2:4f:ab: 73:cf:db:90:6e:aa:7c:a5:71:84:eb:99:a9:e7:cd: 25:07:81:d7:03:3e:7f:34:a2:1f:b0:22:c0:3e:31: d2:ec:3f:57:7a:95:b4:e6:68:0e:33:d7:a2:f8:00: 80:33:fb:76:24:80:d2:93:52:d6:c6:04:21:7d:ad: e9:c7:8b:af:20:78:76:7a:c5:f7:cb:11:21:bb:8f: 67:c4:4d:de:89:65:7e:a0:f6:91:fc:3c:82:83:1e: 83:60:b2:1b:a4:de:21:b4:3d:12:a9:95:ce:d3:52: d9:5f:6f:8c:cd:a6:67:91:54:1c:52:72:75:7f:b0: 4e:aa:22:f7:e6:e1:6b:01:30:17:f8:ea:e5:fb:47: ba:fb:7d:09:10:07:d4:10:99:48:8a:c6:59:47:ea: 13:b7:d5:56:9d:de:2f:cb:49:fc:e5:21:2f:d7:a3: 17:a6:65:03:fe:45:32:b4:c1:5f:17:24:6b:b3:91: a8:12:e7:a1:65:fa:6c:e9:6e:3c:fe:cf:4b:1c:f6: 67:7f:1b:89:2d:0e:38:ed:7e:fc:42:55:23:7e:de: 56:7e:be:b8:26:ed:10:c6:c8:2f:7f:0a:95:25:c0: 20:ea:4f:d8:28:22:81:fb:81:2e:3a:34:bb:3d:bc: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A0:C7:02:89:BE:64:49:D6:37:D4:BE:7D:97:44:D4:6A:B3:CA:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/78b70c42-302e-3f15-8201-56c579d8d2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 216.198.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:cd:42:96:1f:2a:c0:12:9c:87:9b:2f:20:ee:c5:1d:68:2c: a9:60:61:82:49:3b:53:5b:56:8e:48:cb:89:72:93:7c:3a:c3: 03:49:8a:c6:92:db:9d:f1:8f:0a:7f:b8:11:a4:a4:92:66:2f: dc:05:62:d0:d4:be:a2:bc:44:4e:bf:b6:7c:4b:19:c2:85:85: d9:16:bf:c6:93:20:96:4a:51:f6:e7:e7:ae:7d:f3:12:64:72: 63:38:0b:b9:01:8e:93:47:27:c4:81:74:0a:2f:2a:4c:e5:03: 36:a1:50:b3:b7:7f:b3:8e:88:66:45:58:24:fa:82:63:4b:9e: 82:7f:d9:db:20:5b:ad:76:bb:99:57:1c:3a:7d:36:df:f7:dd: 36:7a:52:c3:73:33:9f:86:fd:4b:c9:f1:5d:2a:22:bc:cf:0c: 18:70:71:f8:8c:fa:d9:3a:c2:58:cf:27:f9:06:2b:9e:54:a1: 4b:bc:33:5b:bd:b7:71:96:75:e4:2c:db:2c:b6:cc:d5:a4:f6: cc:5f:68:c8:eb:3e:fd:7d:59:02:69:ab:01:5d:0a:a9:9c:5f: 85:6b:93:62:a5:4d:a9:37:c2:13:bc:a9:ab:27:ab:7a:4b:80: 35:f7:15:45:42:8f:b4:5c:a4:cd:b6:23:e5:66:8c:85:22:58: 45:6a:a6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueoex8CblSVWcMXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MTAyMzE4MTE0MVoXDTI2MDEyMTE5MTE0MVowLzEtMCsGA1UEAxMk NzBkMzZkZTgtOWQ5My00NjgwLTkzM2UtZDI3YjA0ZDc5Y2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZChWnYrQMadSQ/ST6tzz9uQbqp8pXGE65mp 580lB4HXAz5/NKIfsCLAPjHS7D9XepW05mgOM9ei+ACAM/t2JIDSk1LWxgQhfa3p x4uvIHh2esX3yxEhu49nxE3eiWV+oPaR/DyCgx6DYLIbpN4htD0SqZXO01LZX2+M zaZnkVQcUnJ1f7BOqiL35uFrATAX+Orl+0e6+30JEAfUEJlIisZZR+oTt9VWnd4v y0n85SEv16MXpmUD/kUytMFfFyRrs5GoEuehZfps6W48/s9LHPZnfxuJLQ447X78 QlUjft5Wfr64Ju0QxsgvfwqVJcAg6k/YKCKB+4EuOjS7PbyEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCgxwKJvmRJ1jfUvn2XRNRqs8rxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvNzhiNzBjNDItMzAyZS0z ZjE1LTgyMDEtNTZjNTc5ZDhkMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MZzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHNQpYfKsASnIebLyDuxR1oLKlgYYJJO1NbVo5Iy4lyk3w6wwNJisaS 253xjwp/uBGkpJJmL9wFYtDUvqK8RE6/tnxLGcKFhdkWv8aTIJZKUfbn56598xJk cmM4C7kBjpNHJ8SBdAovKkzlAzahULO3f7OOiGZFWCT6gmNLnoJ/2dsgW612u5lX HDp9Nt/33TZ6UsNzM5+G/UvJ8V0qIrzPDBhwcfiM+tk6wljPJ/kGK55UoUu8M1u9 t3GWdeQs2yy2zNWk9sxfaMjrPv19WQJpqwFdCqmcX4Vrk2KlTak3whO8qasnq3pL gDX3FUVCj7RcpM22I+VmjIUiWEVqpjA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:48 2025 by rpki-client