$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa File: 71601b8f-c699-3d39-9db5-89efd79e5db2.roa (raw, json) Hash identifier: aUqk918WstZQcVxw8wLIHo7FT2eQl5VaLG9fMhMgHGI= Subject key identifier: CC:06:86:44:BC:70:20:9D:98:CA:39:45:5C:6B:D1:E2:E7:FA:40:D9 Certificate issuer: /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092 Certificate serial: 010D0C9F4328584BBA10398448AF44C01BA9D4A0 Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 152.130.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:39:84:48:af:44:c0:1b:a9:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=5cbe1189-bd02-484a-9a0b-003ccccb68ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:72:34:f6:f8:6b:7e:bf:1c:3b:c0:1e:97: 8f:1d:a5:58:2e:e5:5e:84:25:ec:d3:8c:c5:90:f7: ae:cb:b6:85:d1:14:d2:6f:dc:f2:a1:d9:1a:e5:96: bb:7b:8e:52:a3:50:08:ea:4b:e0:0b:36:5c:b1:47: 58:ce:6e:07:15:93:5a:46:04:4b:20:39:5b:9a:db: ef:f6:73:a2:82:fe:09:2a:4b:c4:62:dd:db:11:78: 61:b0:17:7b:3e:d6:37:d1:bc:4a:f5:65:a2:5e:08: 09:cf:c8:75:96:b2:b8:d0:cc:99:77:eb:b5:00:19: fd:7d:08:1d:cc:17:21:ea:cc:c4:18:47:9f:db:70: 3f:f1:dd:0f:39:1c:54:33:25:54:77:fa:af:0b:d2: 58:c0:8d:bc:07:ab:b5:41:ea:3c:ac:24:ca:37:80: 5d:4f:d2:c3:37:b1:60:20:ec:a5:8c:51:73:85:d4: 13:6f:18:cb:8b:39:69:6d:04:14:58:ca:8f:95:31: 0a:36:62:6b:18:bd:0d:50:42:69:be:52:34:1f:ea: 54:9e:71:47:5a:11:82:a0:34:ab:60:21:60:42:4d: fc:5c:22:a6:df:fb:2b:af:1f:a8:48:d0:bb:09:cb: 68:cc:f0:c8:fe:ff:f7:13:0e:bb:51:13:29:24:9b: 44:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:06:86:44:BC:70:20:9D:98:CA:39:45:5C:6B:D1:E2:E7:FA:40:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl X509v3 Authority Key Identifier: keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer sbgp-ipAddrBlock: critical IPv4: 152.130.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c8:e5:60:ea:95:2f:6e:8d:df:ff:29:ae:77:0c:ee:51:ad: 07:10:a9:72:ed:71:da:0a:3c:d4:fe:fa:4b:2d:71:db:d6:2f: 8b:53:ad:d3:ce:81:c6:7b:09:d9:ac:9b:cd:41:ee:44:9d:58: 69:e8:5f:6c:86:3f:09:8e:e0:ac:19:54:a2:1f:3b:7f:30:aa: ad:40:08:e1:6e:12:06:28:b7:1d:ed:df:cd:bc:21:24:05:86: 47:8b:cd:d3:e1:29:7e:0c:6f:71:d1:5c:6a:b6:17:a7:dd:eb: 2d:ce:c4:e9:6a:f8:95:ae:20:73:3c:d4:ed:67:2e:df:6f:de: 5c:dd:fb:64:32:c3:b0:63:76:3c:5b:f7:a8:65:7f:05:0c:c6: 00:1f:3f:7e:34:ca:a8:d4:db:04:08:04:4f:8a:35:3a:a5:65: d7:1f:80:98:75:c5:59:04:bf:5f:b3:cf:7d:31:14:41:e4:09: 8f:6e:f3:43:99:3b:42:51:4f:b8:da:bf:6b:bb:9e:a4:67:2a: d1:33:44:29:0c:e3:9a:86:cf:9c:7f:fc:89:75:ff:2b:12:f3: 2f:e2:74:b9:82:1e:87:e6:58:64:80:a3:95:c1:a0:48:2d:da: dc:52:b9:70:55:aa:f0:bd:10:5f:04:29:2d:f9:9e:f5:e7:bc: d9:28:c6:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDmESK9EwBup1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFk MDkyMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NWNiZTExODktYmQwMi00ODRhLTlhMGItMDAzY2NjY2I2OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH5yNPb4a36/HDvAHpePHaVYLuVehCXs04zF kPeuy7aF0RTSb9zyodka5Za7e45So1AI6kvgCzZcsUdYzm4HFZNaRgRLIDlbmtvv 9nOigv4JKkvEYt3bEXhhsBd7PtY30bxK9WWiXggJz8h1lrK40MyZd+u1ABn9fQgd zBch6szEGEef23A/8d0PORxUMyVUd/qvC9JYwI28B6u1Qeo8rCTKN4BdT9LDN7Fg IOyljFFzhdQTbxjLizlpbQQUWMqPlTEKNmJrGL0NUEJpvlI0H+pUnnFHWhGCoDSr YCFgQk38XCKm3/srrx+oSNC7CctozPDI/v/3Ew67URMpJJtEgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwGhkS8cCCdmMo5RVxr0eLn+kDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRm YWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvNzE2MDFiOGYtYzY5OS0z ZDM5LTlkYjUtODllZmQ3OWU1ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGY0ZmFmMmEtMTdmZi00ODI3LTli ZWMtYzZmZmNiMmFkMDkyLzRmNGZhZjJhLTE3ZmYtNDgyNy05YmVjLWM2ZmZjYjJh ZDA5Mi5jcmwwHwYDVR0jBBgwFoAU4BNewN3Gcqc4VJWHF5QWjm2ZcC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZm Y2IyYWQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmIL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjI5WDqlS9ujd//Ka53DO5RrQcQqXLtcdoKPNT++kstcdvWL4tTrdPO gcZ7Cdmsm81B7kSdWGnoX2yGPwmO4KwZVKIfO38wqq1ACOFuEgYotx3t3828ISQF hkeLzdPhKX4Mb3HRXGq2F6fd6y3OxOlq+JWuIHM81O1nLt9v3lzd+2Qyw7Bjdjxb 96hlfwUMxgAfP340yqjU2wQIBE+KNTqlZdcfgJh1xVkEv1+zz30xFEHkCY9u80OZ O0JRT7jav2u7nqRnKtEzRCkM45qGz5x//Il1/ysS8y/idLmCHofmWGSAo5XBoEgt 2txSuXBVqvC9EF8EKS35nvXnvNkoxus= -----END CERTIFICATE-----Generated at Mon Nov 3 14:47:54 2025 by rpki-client