$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa File: c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa (raw, json) Hash identifier: iVQrnLKHijB5UWp3/vni4w/odfenFtIrIHRsXDJ9naE= Subject key identifier: 01:D6:50:F9:67:86:02:A1:3B:73:5B:06:E4:1A:80:E7:5A:B2:9D:56 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B047C02C298717EBDDD2441C0 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13807 IP address blocks: 24.72.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:02:c2:98:71:7e:bd:dd:24:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=5b13fe48-b278-4502-97ee-aa39d4dce2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:8e:75:a3:b4:95:f6:25:7e:6b:fe:5b:79: 22:98:40:12:fd:1a:34:83:30:bf:88:99:16:9a:dc: ae:0a:2c:1e:71:00:5b:74:59:05:6c:3f:03:48:20: b7:1a:66:c4:1f:f0:58:d5:53:d0:3a:f2:b8:13:4a: b9:59:fb:5c:ec:de:8a:98:db:20:11:f1:07:5b:50: 8e:90:4a:c7:e9:c3:f3:21:0a:23:7d:f8:f8:2f:b8: 76:96:10:97:14:f1:ec:3a:63:3a:d8:07:25:34:04: 1a:cb:c3:a2:3b:6f:cc:f1:ce:05:f7:b5:d6:c3:1f: eb:d9:26:45:e4:b3:eb:d4:9a:83:aa:e4:28:8b:c7: ac:55:2b:79:2e:ee:e1:15:5a:17:ee:2b:84:ae:73: 9b:cf:da:3e:54:7a:e9:c2:11:ab:78:59:cc:7a:1c: 63:80:f6:99:39:11:84:b5:12:5c:f6:a3:84:e2:ac: 9b:b6:f5:fd:be:f2:41:89:73:34:bc:9a:c9:c8:38: 08:b8:75:c6:b6:bd:13:33:84:21:f7:ff:bc:ee:db: 7e:ed:a7:78:3d:d3:26:c8:63:76:67:95:9f:82:c6: cc:02:a4:24:ac:20:bb:1a:83:02:6c:92:3e:e0:00: 46:db:17:82:21:36:38:c8:ae:a9:4d:14:b9:3f:4f: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D6:50:F9:67:86:02:A1:3B:73:5B:06:E4:1A:80:E7:5A:B2:9D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.72.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:99:d0:3d:e1:0e:7f:9e:86:89:2c:b2:72:83:0c:b7:2d:d2: 71:ba:4c:b3:30:86:b3:5b:94:c4:14:b2:50:79:14:ae:b4:1c: 3b:9d:b0:1e:4b:43:7b:ad:3f:4b:1b:31:0f:54:c3:3b:d0:1a: ef:45:a0:14:79:9c:57:a2:50:52:a9:43:73:a9:ff:51:b1:fd: 48:9d:13:58:d2:fe:1a:75:18:31:ed:b6:5c:28:03:ea:3b:2f: 79:de:e6:9e:65:49:9d:b7:e8:b9:6a:19:50:36:d8:5f:95:21: 9a:f5:18:ad:4c:2e:6a:84:5c:01:fe:3e:46:f8:75:45:46:e4: aa:e2:80:c0:e8:71:ba:3b:c8:39:0f:6a:07:43:a8:46:e9:08: 39:09:33:82:5c:eb:e4:c1:64:94:d2:4c:e8:6c:8d:3e:a9:22: df:2e:63:0e:a9:67:40:02:68:0f:53:5b:c6:1a:36:d0:49:77: 5e:45:e8:fc:81:2e:1b:87:e8:59:dc:58:57:81:19:6e:6e:f6: f0:0f:2b:ea:5a:6b:24:2d:f4:1a:e3:29:78:f7:6a:28:20:39: d6:7a:7f:63:3b:dd:87:bc:02:28:f8:d8:7e:d6:db:5d:29:a4: a3:02:2d:0f:59:5b:36:81:e3:51:4b:27:db:6c:df:9b:3c:3d: 9d:b2:55:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfALCmHF+vd0kQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NWIxM2ZlNDgtYjI3OC00NTAyLTk3ZWUtYWEzOWQ0ZGNlMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEKOdaO0lfYlfmv+W3kimEAS/Ro0gzC/iJkW mtyuCiwecQBbdFkFbD8DSCC3GmbEH/BY1VPQOvK4E0q5Wftc7N6KmNsgEfEHW1CO kErH6cPzIQojffj4L7h2lhCXFPHsOmM62AclNAQay8OiO2/M8c4F97XWwx/r2SZF 5LPr1JqDquQoi8esVSt5Lu7hFVoX7iuErnObz9o+VHrpwhGreFnMehxjgPaZORGE tRJc9qOE4qybtvX9vvJBiXM0vJrJyDgIuHXGtr0TM4Qh9/+87tt+7ad4PdMmyGN2 Z5WfgsbMAqQkrCC7GoMCbJI+4ABG2xeCITY4yK6pTRS5P0941QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHWUPlnhgKhO3NbBuQagOdasp1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYzFiYzAwMjMtMWJhMC0z MTY3LWEyZTItOGI5ZjRjODBjMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGEjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2Z0D3hDn+ehokssnKDDLct0nG6TLMwhrNblMQUslB5FK60HDudsB5L Q3utP0sbMQ9UwzvQGu9FoBR5nFeiUFKpQ3Op/1Gx/UidE1jS/hp1GDHttlwoA+o7 L3ne5p5lSZ236LlqGVA22F+VIZr1GK1MLmqEXAH+Pkb4dUVG5KrigMDocbo7yDkP agdDqEbpCDkJM4Jc6+TBZJTSTOhsjT6pIt8uYw6pZ0ACaA9TW8YaNtBJd15F6PyB LhuH6FncWFeBGW5u9vAPK+paayQt9BrjKXj3aiggOdZ6f2M73Ye8Aij42H7W210p pKMCLQ9ZWzaB41FLJ9ts35s8PZ2yVa0= -----END CERTIFICATE-----Generated at Thu Oct 16 13:48:57 2025 by rpki-client