$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/3e71fa3d-35da-32cb-8bfc-5714765976a9.roa File: 3e71fa3d-35da-32cb-8bfc-5714765976a9.roa (raw, json) Hash identifier: M8Kvx4XfHs1FspHXkMx2mHsktU6TuU+LjwNc5jIaIxE= Subject key identifier: 01:A2:C2:C2:5E:95:66:02:FC:F7:7C:A6:52:86:EA:6B:42:D4:E4:8F Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584BA0F601A55628FCA28618A8C0 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/3e71fa3d-35da-32cb-8bfc-5714765976a9.roa Signing time: Fri 24 Oct 2025 14:12:42 +0000 ROA not before: Fri 24 Oct 2025 14:12:42 +0000 ROA not after: Thu 22 Jan 2026 15:12:42 +0000 asID: 834 IP address blocks: 216.170.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:f6:01:a5:56:28:fc:a2:86:18:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Oct 24 14:12:42 2025 GMT Not After : Jan 22 15:12:42 2026 GMT Subject: CN=2d144a39-27ba-44f5-a79b-07ff2ac76212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:6c:6b:f0:6d:6c:e5:b5:24:5d:6c:65:09: 3b:7f:76:2f:11:db:fc:23:8b:2a:d1:45:97:5b:77: 1a:94:99:e5:a2:9c:bf:f1:70:5a:31:1b:32:9c:10: 35:e7:c9:97:49:a3:aa:6e:31:ee:8c:3f:1c:f0:4c: c5:81:60:93:e4:de:90:44:90:ca:d2:5f:58:86:90: 53:7e:cf:63:ad:93:be:db:79:fd:12:7a:5a:64:ed: 17:fb:58:4b:4b:9e:ae:4f:ae:de:58:d1:bd:09:42: e5:99:2f:34:77:17:73:79:1f:6a:b6:f3:01:c9:1d: e8:37:5d:7d:03:f8:f2:07:ef:fa:1d:13:24:59:e0: 3b:79:f0:18:78:61:cb:e6:5c:70:a4:fa:96:6f:74: 48:3c:1b:62:f0:be:a6:ba:c3:b8:e5:bb:8c:08:f6: ab:0b:d2:46:94:52:e7:9f:1c:05:0b:2a:0b:86:e7: f7:4c:d5:4f:22:9c:f0:40:f3:2e:cd:53:c4:7c:dc: ea:69:cf:70:26:a4:d9:0d:04:be:ce:51:07:cf:d3: ac:86:56:cf:9a:65:ce:5c:e1:fe:c0:3b:0f:66:24: 59:8e:85:74:7e:3d:ce:c9:35:ec:04:8b:12:f3:cf: 18:1c:24:bd:e6:d6:59:10:f7:f6:c6:98:cf:c2:ff: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A2:C2:C2:5E:95:66:02:FC:F7:7C:A6:52:86:EA:6B:42:D4:E4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/3e71fa3d-35da-32cb-8bfc-5714765976a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 216.170.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:37:6c:7c:60:d2:79:3b:46:c7:7e:2b:10:07:15:39:00:79: 0d:9d:41:cd:85:dd:7a:7d:fd:ee:5e:c9:81:be:a9:20:4f:e1: b1:1a:82:d6:9a:e4:e4:95:d1:f1:10:df:a9:8e:15:b5:6f:d0: e2:53:28:d9:ab:a9:6d:c8:f2:78:17:ad:9c:b8:09:c0:ba:86: e1:4d:0f:5f:3c:b7:54:23:c5:32:6e:da:1d:43:7c:33:ad:e2: 2b:0a:e8:e5:1b:56:22:c5:37:32:65:48:3c:8f:c3:c7:9c:7b: 6b:a9:7d:4f:94:b2:fc:37:f2:b4:be:78:40:38:b1:5d:12:3a: 65:e3:ad:95:a6:a6:74:33:b9:9d:b1:b6:c8:5d:3a:d3:38:0a: 38:ab:cf:b4:2f:ff:f1:fc:54:32:db:93:fc:84:35:2e:d5:a7: cc:9c:d6:e7:05:66:8f:da:7c:64:37:a5:78:e8:3a:8c:ef:ec: 1a:ed:62:7c:2e:8d:15:7f:ab:07:f0:a6:f7:f5:b0:86:24:ad: a5:fb:c2:e2:60:77:66:8e:e5:ef:6e:1d:7e:66:71:80:98:dd: ca:a2:85:5b:cc:94:cb:4f:55:5c:fd:28:42:dc:47:98:2a:6a: 7b:1e:41:7b:32:43:00:de:07:21:50:8c:be:7a:41:4c:8f:3c: 75:40:2b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug9gGlVij8ooYYqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI1MTAyNDE0MTI0MloXDTI2MDEyMjE1MTI0MlowLzEtMCsGA1UEAxMk MmQxNDRhMzktMjdiYS00NGY1LWE3OWItMDdmZjJhYzc2MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyVsa/BtbOW1JF1sZQk7f3YvEdv8I4sq0UWX W3calJnlopy/8XBaMRsynBA158mXSaOqbjHujD8c8EzFgWCT5N6QRJDK0l9YhpBT fs9jrZO+23n9EnpaZO0X+1hLS56uT67eWNG9CULlmS80dxdzeR9qtvMByR3oN119 A/jyB+/6HRMkWeA7efAYeGHL5lxwpPqWb3RIPBti8L6musO45buMCParC9JGlFLn nxwFCyoLhuf3TNVPIpzwQPMuzVPEfNzqac9wJqTZDQS+zlEHz9OshlbPmmXOXOH+ wDsPZiRZjoV0fj3OyTXsBIsS888YHCS95tZZEPf2xpjPwv8HBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGiwsJelWYC/Pd8plKG6mtC1OSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvM2U3MWZhM2QtMzVkYS0z MmNiLThiZmMtNTcxNDc2NTk3NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ3bHxg0nk7Rsd+KxAHFTkAeQ2dQc2F3Xp9/e5eyYG+qSBP4bEagtaa 5OSV0fEQ36mOFbVv0OJTKNmrqW3I8ngXrZy4CcC6huFND188t1QjxTJu2h1DfDOt 4isK6OUbViLFNzJlSDyPw8ece2upfU+Usvw38rS+eEA4sV0SOmXjrZWmpnQzuZ2x tshdOtM4Cjirz7Qv//H8VDLbk/yENS7Vp8yc1ucFZo/afGQ3pXjoOozv7BrtYnwu jRV/qwfwpvf1sIYkraX7wuJgd2aO5e9uHX5mcYCY3cqihVvMlMtPVVz9KELcR5gq anseQXsyQwDeByFQjL56QUyPPHVAK48= -----END CERTIFICATE-----Generated at Fri Oct 31 05:36:12 2025 by rpki-client