$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa File: fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa (raw, json) Hash identifier: 2BOI4PuCBWkTmxQvvzIjrYjl66zRoLCgY9SQqAfMl1w= Subject key identifier: 75:F3:09:7D:DE:C8:5F:3E:B1:69:3E:C6:94:BF:E1:49:6E:E9:A1:04 Certificate issuer: /CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Certificate serial: 010D0C9F4328584B3820986898752271AE5A3C80 Authority key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa Signing time: Wed 17 Sep 2025 00:58:39 +0000 ROA not before: Wed 17 Sep 2025 00:58:39 +0000 ROA not after: Tue 16 Dec 2025 01:58:39 +0000 asID: 18108 IP address blocks: 216.14.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:20:98:68:98:75:22:71:ae:5a:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Validity Not Before: Sep 17 00:58:39 2025 GMT Not After : Dec 16 01:58:39 2025 GMT Subject: CN=f35f98ce-e277-45b7-8a32-f2fe6c24a8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:68:e3:0f:aa:1c:b3:52:b9:ce:67:f1:c7: 79:8f:89:eb:da:dc:6d:41:d4:f7:d9:d5:e9:96:3a: 70:6a:bb:49:6b:cd:04:b8:8b:d3:30:33:55:c2:17: b0:a3:45:d6:6b:a2:4a:38:b6:52:6a:0f:5b:26:fe: 82:a0:19:5f:ce:3b:2a:4c:bb:ae:5b:18:ac:c7:be: 76:9f:50:39:21:46:e9:82:7d:aa:0d:96:52:9c:1c: e0:ce:ac:49:a3:86:8c:0f:ab:f7:6d:63:f6:21:19: 12:5c:d9:1c:60:b9:80:cd:be:80:b6:61:c2:5d:31: ea:76:27:7b:65:1b:7e:48:ea:fd:81:6c:2e:a3:b5: 55:49:76:ab:42:ba:8f:44:bc:08:d4:b7:97:1e:e8: dc:09:20:a8:1c:c0:23:37:bc:b9:94:76:e7:0f:81: c4:2b:b9:90:f2:fb:9d:df:41:64:52:53:e7:55:bb: ca:bb:6b:34:2e:3f:31:0e:3f:d0:46:e4:de:ea:6e: 99:a3:9f:c5:d0:b2:bc:29:d8:ff:19:c0:74:ee:a9: 15:b0:ab:eb:25:49:30:75:af:d1:13:5c:87:8e:b7: 33:32:2f:7d:44:64:e9:68:d9:f7:09:1e:b1:3b:48: e8:71:7a:61:fd:80:a6:8c:fb:2f:6e:2e:91:9a:b9: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:09:7D:DE:C8:5F:3E:B1:69:3E:C6:94:BF:E1:49:6E:E9:A1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl X509v3 Authority Key Identifier: keyid:82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer sbgp-ipAddrBlock: critical IPv4: 216.14.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7a:58:70:8e:80:39:27:c3:98:89:65:e6:e8:14:e8:f6:20: 7e:00:08:6b:2f:e4:e2:6c:be:db:b3:d2:35:9b:73:99:ef:c2: eb:ad:b8:4a:88:c8:35:b5:44:f2:86:d0:2b:35:fe:d0:74:b5: 5f:32:f4:3e:81:80:5c:a8:f4:4f:a6:e3:30:6d:fd:12:52:b6: 1b:e4:c3:c0:a8:ff:5e:15:24:ac:73:a2:e0:9c:b0:e0:90:24: 1c:4c:8b:f7:10:60:cf:5d:8a:70:f1:69:a9:a7:6b:ff:9a:27: be:03:b4:7a:4c:a4:64:51:4a:de:88:bc:06:42:6f:8a:c9:2f: 66:7a:ad:40:9e:1a:7c:82:0b:e0:66:3f:2e:44:2e:71:6f:b9: 97:15:1d:fd:9e:61:d2:1f:77:21:ee:90:1d:11:4d:97:c8:27: e4:98:0e:85:6d:67:d0:07:e7:5e:53:69:07:5c:83:04:ed:fd: 9c:99:b4:6f:15:f1:69:76:9c:3f:22:ba:80:4f:ec:a8:b5:88: b7:3d:1f:6d:9b:5e:de:bf:e5:f2:a7:80:a8:09:25:b4:54:68: 6a:58:34:a5:05:43:78:01:43:6c:48:08:72:cb:7b:14:28:bb: fa:dc:c6:d0:25:b0:25:58:3b:6a:03:68:78:d9:ff:43:86:7d: 42:53:ae:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IJhomHUica5aPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxYzBlYzgtNjRhOS00YzUxLWJkNzctYjI4ZTY5M2Ez ZTcyMB4XDTI1MDkxNzAwNTgzOVoXDTI1MTIxNjAxNTgzOVowLzEtMCsGA1UEAxMk ZjM1Zjk4Y2UtZTI3Ny00NWI3LThhMzItZjJmZTZjMjRhOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlZo4w+qHLNSuc5n8cd5j4nr2txtQdT32dXp ljpwartJa80EuIvTMDNVwhewo0XWa6JKOLZSag9bJv6CoBlfzjsqTLuuWxisx752 n1A5IUbpgn2qDZZSnBzgzqxJo4aMD6v3bWP2IRkSXNkcYLmAzb6AtmHCXTHqdid7 ZRt+SOr9gWwuo7VVSXarQrqPRLwI1LeXHujcCSCoHMAjN7y5lHbnD4HEK7mQ8vud 30FkUlPnVbvKu2s0Lj8xDj/QRuTe6m6Zo5/F0LK8Kdj/GcB07qkVsKvrJUkwda/R E1yHjrczMi99RGTpaNn3CR6xO0jocXph/YCmjPsvbi6RmrlnfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXzCX3eyF8+sWk+xpS/4Ulu6aEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NjFj MGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkzYTNlNzIvZmVjYmMzZTUtZWIzOC0z OTE3LTk1ZWUtNGMyY2VhNDZlNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTYxYzBlYzgtNjRhOS00YzUxLWJk NzctYjI4ZTY5M2EzZTcyLzk2MWMwZWM4LTY0YTktNGM1MS1iZDc3LWIyOGU2OTNh M2U3Mi5jcmwwHwYDVR0jBBgwFoAUgr/tJi5XV5QT3YvMVzRT2EbNguQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhl NjkzYTNlNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2A7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC56WHCOgDknw5iJZeboFOj2IH4ACGsv5OJsvtuz0jWbc5nvwuutuEqI yDW1RPKG0Cs1/tB0tV8y9D6BgFyo9E+m4zBt/RJSthvkw8Co/14VJKxzouCcsOCQ JBxMi/cQYM9dinDxaamna/+aJ74DtHpMpGRRSt6IvAZCb4rJL2Z6rUCeGnyCC+Bm Py5ELnFvuZcVHf2eYdIfdyHukB0RTZfIJ+SYDoVtZ9AH515TaQdcgwTt/ZyZtG8V 8Wl2nD8iuoBP7Ki1iLc9H22bXt6/5fKngKgJJbRUaGpYNKUFQ3gBQ2xICHLLexQo u/rcxtAlsCVYO2oDaHjZ/0OGfUJTrgE= -----END CERTIFICATE-----Generated at Sun Oct 19 12:05:27 2025 by rpki-client