$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/516c39ee-52de-38f7-a234-ab1ef5d7ea3b.roa File: 516c39ee-52de-38f7-a234-ab1ef5d7ea3b.roa (raw, json) Hash identifier: K3LZTMIE+EWa5XOhp9gbBsYiWStM5w377Nmgs4MV6Gg= Subject key identifier: 2D:F1:D7:22:53:12:94:62:F9:70:B9:23:88:F2:DA:7A:C5:D4:97:F4 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584B4FDC7C7336F12BFF3AC19EC0 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/516c39ee-52de-38f7-a234-ab1ef5d7ea3b.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 5769 IP address blocks: 198.251.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7c:73:36:f1:2b:ff:3a:c1:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=34d77b51-3aaa-49b0-9e29-7fdafb2cb003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:e2:84:3e:62:b3:75:22:e7:fc:1f:96:9e: 89:51:89:eb:10:4c:9d:19:60:f7:54:37:ff:e0:47: 94:68:8a:6e:97:d6:3b:96:b3:22:3e:bd:60:e5:7e: 6b:42:cd:39:11:8c:89:7b:3d:3c:1c:11:ad:66:41: 3a:fe:ec:87:fe:73:e7:77:a0:7a:33:6d:c2:54:a7: 3f:bd:af:cb:cb:d4:4c:2f:82:51:a3:ab:75:0a:3f: 13:4f:39:5b:31:6c:9d:7b:b4:ad:fc:86:aa:5a:62: f3:c9:14:ca:f3:9e:b6:19:e6:fd:ee:92:f9:e9:ab: e9:c2:55:29:10:88:67:3f:df:20:14:61:51:18:58: d0:8b:47:2f:63:2a:c5:a3:cc:aa:3e:0b:05:5c:3c: a7:0c:90:80:1c:33:70:ba:84:2d:0a:78:64:26:80: 47:d8:65:23:ba:2a:af:68:1a:58:93:0b:79:fc:48: c7:e8:32:25:b6:a3:be:06:6f:ca:60:ca:41:0a:15: 2e:bc:f9:4f:2d:50:34:99:28:e5:00:0c:d9:88:cd: dc:b8:9e:8d:d6:14:97:3f:a7:09:62:8c:d4:30:0f: 07:77:b6:52:7b:d9:3d:d3:d9:6c:0b:2b:f5:63:b8: 61:95:82:45:e3:f9:5f:ac:c8:b4:a4:31:0e:88:05: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F1:D7:22:53:12:94:62:F9:70:B9:23:88:F2:DA:7A:C5:D4:97:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/516c39ee-52de-38f7-a234-ab1ef5d7ea3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 198.251.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:19:f1:73:b5:4a:f7:d8:09:4b:b2:ec:1d:4e:d0:13:7b:82: d9:3e:17:67:68:c6:d6:99:08:03:17:fd:e4:e1:10:09:b0:e4: 7f:4f:ba:ef:35:44:41:85:da:cb:1a:12:68:11:0c:bf:39:44: 79:b6:c7:c5:5c:b7:12:ba:ff:68:f3:50:c3:14:ae:7c:04:0d: d6:55:9e:eb:57:c3:8f:8d:79:1c:33:77:8b:3d:72:2f:1a:8e: 4d:38:fa:4f:5a:b0:0b:72:61:2d:6b:be:1a:3a:6e:48:4c:01: 70:66:81:1d:88:58:0c:57:17:9c:bb:1c:c8:c5:b2:a6:b2:9c: a8:d5:e0:80:9a:63:da:58:3d:f6:fa:ce:61:28:c6:de:f0:5b: b3:04:80:6d:82:7b:26:0c:66:37:da:db:50:1e:cb:e7:e2:4b: 3e:71:3c:c2:81:55:a3:68:ab:73:b4:6c:33:4c:64:6e:21:cb: d6:c5:e4:1c:33:eb:1f:55:eb:17:0c:66:04:f5:aa:86:2f:67: f4:5a:31:a8:f2:85:cf:11:4b:e6:d1:ca:86:cb:05:0c:1b:f8: db:c4:03:f5:aa:c2:dc:aa:14:52:f7:45:44:fa:94:9d:06:b7: 0b:25:f2:60:b1:2e:de:b0:cb:09:6b:e9:32:a6:97:fb:c4:ca: d3:9c:67:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HxzNvEr/zrBnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MzRkNzdiNTEtM2FhYS00OWIwLTllMjktN2ZkYWZiMmNiMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRfihD5is3Ui5/wflp6JUYnrEEydGWD3VDf/ 4EeUaIpul9Y7lrMiPr1g5X5rQs05EYyJez08HBGtZkE6/uyH/nPnd6B6M23CVKc/ va/Ly9RML4JRo6t1Cj8TTzlbMWyde7St/IaqWmLzyRTK8562Geb97pL56avpwlUp EIhnP98gFGFRGFjQi0cvYyrFo8yqPgsFXDynDJCAHDNwuoQtCnhkJoBH2GUjuiqv aBpYkwt5/EjH6DIltqO+Bm/KYMpBChUuvPlPLVA0mSjlAAzZiM3cuJ6N1hSXP6cJ YozUMA8Hd7ZSe9k909lsCyv1Y7hhlYJF4/lfrMi0pDEOiAWtUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3x1yJTEpRi+XC5I4jy2nrF1Jf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNTE2YzM5ZWUtNTJkZS0z OGY3LWEyMzQtYWIxZWY1ZDdlYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAZ8XO1SvfYCUuy7B1O0BN7gtk+F2doxtaZCAMX/eThEAmw5H9Puu81 REGF2ssaEmgRDL85RHm2x8VctxK6/2jzUMMUrnwEDdZVnutXw4+NeRwzd4s9ci8a jk04+k9asAtyYS1rvho6bkhMAXBmgR2IWAxXF5y7HMjFsqaynKjV4ICaY9pYPfb6 zmEoxt7wW7MEgG2CeyYMZjfa21Aey+fiSz5xPMKBVaNoq3O0bDNMZG4hy9bF5Bwz 6x9V6xcMZgT1qoYvZ/RaMajyhc8RS+bRyobLBQwb+NvEA/WqwtyqFFL3RUT6lJ0G twsl8mCxLt6wywlr6TKml/vEytOcZ+o= -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:48 2025 by rpki-client