$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa File: fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa (raw, json) Hash identifier: iVqmrosdtqQ5ysddgXwrT1WaJOhpBYzHjzYFFNpKq40= Subject key identifier: 9A:75:AD:DF:B4:C4:79:24:84:A7:49:6C:BF:87:D7:C2:28:D7:39:7C Certificate issuer: /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad Certificate serial: 010D0C9F4328584BC96AE96D18C4F95FA851F160 Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 13959 IP address blocks: 216.150.43.0/24 maxlen: 24 216.150.44.0/24 maxlen: 24 216.150.45.0/24 maxlen: 24 216.150.46.0/24 maxlen: 24 216.150.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:e9:6d:18:c4:f9:5f:a8:51:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=172a77b4-1e44-4566-95ba-e5631965b14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:34:99:c8:8d:d0:b9:fa:14:76:1f:5c:c5:f2: d8:e8:37:ea:4f:51:90:d2:df:f6:63:10:9a:20:bc: 81:3b:27:b8:80:3f:fb:5a:93:49:f3:c8:35:81:7c: f1:9c:35:83:34:c5:d2:85:da:88:75:a5:a6:07:c9: fb:7e:9c:6e:17:ab:87:e0:44:79:09:df:37:4d:b8: ae:ef:71:eb:42:fc:40:51:3c:ad:6d:0e:8e:bf:23: 58:d4:f6:8f:e9:03:a3:4c:7f:df:6a:42:d5:3a:97: 16:23:1b:e3:b3:e4:5b:62:9f:91:b0:38:b5:fb:65: 42:a4:2a:12:56:30:28:a0:d9:77:09:3f:cc:23:ad: 70:f6:ac:eb:30:7a:af:d7:03:ca:54:10:e8:e4:9a: c7:ee:2c:03:5f:b9:f3:cf:9c:57:ff:e0:e5:e1:1e: 8a:71:82:69:d6:98:17:b4:95:f8:3c:7d:c1:62:24: 18:d4:4e:f3:8d:bf:44:8e:f8:34:c3:e0:58:53:de: b3:51:47:8c:fd:c5:3f:ab:f7:4b:fd:b8:79:60:04: ef:5e:b0:69:66:e3:b9:9c:4b:44:83:e9:4f:1f:3f: 51:2b:a6:93:7c:22:02:41:44:16:44:eb:0f:c1:e6: fe:9c:41:e3:d9:35:c4:55:0c:c9:4c:e7:b9:70:53: 70:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:AD:DF:B4:C4:79:24:84:A7:49:6C:BF:87:D7:C2:28:D7:39:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl X509v3 Authority Key Identifier: keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer sbgp-ipAddrBlock: critical IPv4: 216.150.43.0-216.150.47.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:98:7d:01:2d:c6:ce:36:ef:be:ab:64:59:6f:25:bd:47:b7: 7b:f4:39:4b:cc:75:a2:ac:29:5e:12:76:1b:bc:e2:02:20:04: 1d:9b:48:70:ec:d9:38:47:5d:63:ea:3f:61:9b:6f:6f:86:45: b8:99:6d:ae:20:45:16:94:03:a5:a3:a4:58:e5:8a:0d:f0:37: 4f:4c:a4:63:bc:6f:ae:03:c8:36:43:98:27:9d:48:65:a9:26: b4:4c:09:54:06:4a:81:73:eb:f5:6f:38:e9:b1:41:9e:af:d4: e4:f8:ce:db:00:9d:e1:15:a9:6f:3f:94:23:31:08:33:f0:e1: c9:4d:60:3c:39:c1:aa:3f:22:aa:98:4f:9f:e2:14:e7:4a:de: df:ef:e1:4b:f1:18:81:e6:12:f8:62:40:5e:a9:dc:0b:d4:40: 9e:67:4f:8d:87:58:fa:61:bc:2d:4b:45:6f:3a:85:81:81:22: 1c:41:b9:ad:75:b8:61:a8:82:0b:1d:dc:41:df:99:5c:d2:b2: fe:79:49:9c:e5:f1:fb:19:88:d9:95:cd:6f:ac:a3:79:71:e5: de:68:58:d9:28:4f:10:10:ff:51:5d:61:46:d1:3c:53:ed:96: 0b:98:e3:87:11:dc:c7:02:b7:5d:39:7b:4e:4d:36:57:34:16: d7:95:59:e5 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEvJaultGMT5X6hR8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZlOGE5NDItNWFjMi00MWU4LWFhODktN2RkY2ZkMGJi NmFkMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk MTcyYTc3YjQtMWU0NC00NTY2LTk1YmEtZTU2MzE5NjViMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTSZyI3QufoUdh9cxfLY6DfqT1GQ0t/2YxCa ILyBOye4gD/7WpNJ88g1gXzxnDWDNMXShdqIdaWmB8n7fpxuF6uH4ER5Cd83Tbiu 73HrQvxAUTytbQ6OvyNY1PaP6QOjTH/fakLVOpcWIxvjs+RbYp+RsDi1+2VCpCoS VjAooNl3CT/MI61w9qzrMHqv1wPKVBDo5JrH7iwDX7nzz5xX/+Dl4R6KcYJp1pgX tJX4PH3BYiQY1E7zjb9Ejvg0w+BYU96zUUeM/cU/q/dL/bh5YATvXrBpZuO5nEtE g+lPHz9RK6aTfCICQUQWROsPweb+nEHj2TXEVQzJTOe5cFNwswIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJp1rd+0xHkkhKdJbL+H18Io1zl8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4 YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRjZmQwYmI2YWQvZmNiODVmNWMtMGFjNi0z MjY4LTkyZWUtNjYxMDNlYWEwNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWZlOGE5NDItNWFjMi00MWU4LWFh ODktN2RkY2ZkMGJiNmFkL2FmZThhOTQyLTVhYzItNDFlOC1hYTg5LTdkZGNmZDBi YjZhZC5jcmwwHwYDVR0jBBgwFoAUX9vLCQSsI6jASrDynFopVAP/iRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRj ZmQwYmI2YWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYlisD BATYliAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAjZh9AS3GzjbvvqtkWW8lvUe3e/Q5S8x1oqwpXhJ2G7zi AiAEHZtIcOzZOEddY+o/YZtvb4ZFuJltriBFFpQDpaOkWOWKDfA3T0ykY7xvrgPI NkOYJ51IZakmtEwJVAZKgXPr9W846bFBnq/U5PjO2wCd4RWpbz+UIzEIM/DhyU1g PDnBqj8iqphPn+IU50re3+/hS/EYgeYS+GJAXqncC9RAnmdPjYdY+mG8LUtFbzqF gYEiHEG5rXW4YaiCCx3cQd+ZXNKy/nlJnOXx+xmI2ZXNb6yjeXHl3mhY2ShPEBD/ UV1hRtE8U+2WC5jjhxHcxwK3XTl7Tk02VzQW15VZ5Q== -----END CERTIFICATE-----Generated at Sat Nov 8 20:27:23 2025 by rpki-client