$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa File: 9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa (raw, json) Hash identifier: z5+e7SYBGEYLvH1b2mhLQo/fMv1AqjuhNwGAV0WTHoE= Subject key identifier: 80:68:7A:6D:1C:C2:C1:E6:F3:0B:8F:9F:61:B5:91:B1:62:F1:F0:1E Certificate issuer: /CN=efead3cb-1d38-407f-ba06-8e276b067238 Certificate serial: 010D0C9F4328584B84E777565587F932C1442780 Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 216.238.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:77:56:55:87:f9:32:c1:44:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=4c9a3276-f7cb-414c-8390-cd8be09bea00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:91:fd:45:ff:f9:f8:9e:d5:04:b3:ef:d3: 11:f7:22:56:1e:8b:78:15:2f:be:20:66:71:b1:6b: be:80:5d:9c:6a:2e:a3:58:bf:59:c8:7b:e6:6a:92: d0:ac:bf:1c:4d:22:9d:fb:dc:43:6c:fa:2c:47:64: ea:e1:4d:ef:9d:f7:1d:fa:9c:b8:d9:3c:3d:6a:7c: 52:51:5e:7c:9e:ec:05:19:73:e4:80:dd:95:86:59: 6e:54:ce:f1:18:99:84:c2:63:bd:31:7a:4d:d4:a6: 96:57:23:4b:f4:74:dd:9d:e6:3f:50:24:08:96:ba: f8:31:17:b4:17:f7:cf:69:e1:18:d2:03:07:d8:0f: 09:8d:8e:06:09:ae:3a:be:09:3f:d2:da:1d:41:c5: 46:41:0a:4a:78:f4:45:1d:4f:d0:7b:c2:21:bf:73: d2:b1:48:e9:17:95:fd:50:40:7c:1c:af:85:05:f1: 8d:26:38:ac:40:22:f1:66:f3:ca:c6:58:91:5a:0e: 6b:c2:3f:0d:dc:bc:3a:92:a5:98:a2:c9:fe:37:5b: 11:08:11:40:62:7d:2c:69:e7:ea:82:b5:18:f3:08: 00:aa:46:81:17:e3:d6:9b:91:40:63:9d:bf:76:64: 33:17:18:fb:b4:6b:e1:f6:ec:18:84:87:a3:38:7d: 66:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:68:7A:6D:1C:C2:C1:E6:F3:0B:8F:9F:61:B5:91:B1:62:F1:F0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl X509v3 Authority Key Identifier: keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer sbgp-ipAddrBlock: critical IPv4: 216.238.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a0:ba:7b:ce:d2:d9:f2:cc:03:9d:2c:a1:8e:0a:ee:2e:52: aa:ec:2b:71:47:66:6b:38:63:ae:22:e2:73:b7:f7:0b:f7:4f: 98:4f:d6:ab:c6:a2:b4:8e:31:d8:d8:b4:25:71:0a:6d:6a:3f: 9e:38:08:91:1c:96:49:1b:79:8d:b3:45:c0:bd:51:4a:5a:ed: 1f:08:7c:58:a0:e2:f1:64:c7:95:6a:69:bb:10:81:af:e4:6f: 18:97:fe:7c:aa:d8:fe:59:66:7a:f6:bf:04:cb:c5:0b:44:de: bc:75:0e:41:b3:e7:b6:fe:e2:60:ff:c4:6b:7c:c3:2c:49:87: 8a:5f:46:12:70:56:e8:85:d6:d3:1a:91:60:09:aa:74:fb:9a: e2:59:11:49:07:37:6b:f9:e7:f0:9c:cf:98:30:a6:36:2c:5a: 28:60:35:4a:85:0b:31:c4:48:7f:55:07:60:32:1b:93:53:9c: e2:d0:58:c2:a4:33:72:18:59:26:75:83:ae:1a:41:b0:95:b5: e2:c1:fb:ac:1e:3a:df:73:77:88:1f:98:65:00:03:55:60:4c: 95:71:d9:2b:0b:d4:5c:31:3d:91:1f:ec:db:14:7a:85:e8:c7: b4:ae:a1:07:b0:1c:a7:fc:7c:57:52:05:5c:7e:8e:48:c0:ef: df:de:70:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53dWVYf5MsFEJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3 MjM4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NGM5YTMyNzYtZjdjYi00MTRjLTgzOTAtY2Q4YmUwOWJlYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluWR/UX/+fie1QSz79MR9yJWHot4FS++IGZx sWu+gF2cai6jWL9ZyHvmapLQrL8cTSKd+9xDbPosR2Tq4U3vnfcd+py42Tw9anxS UV58nuwFGXPkgN2VhlluVM7xGJmEwmO9MXpN1KaWVyNL9HTdneY/UCQIlrr4MRe0 F/fPaeEY0gMH2A8JjY4GCa46vgk/0todQcVGQQpKePRFHU/Qe8Ihv3PSsUjpF5X9 UEB8HK+FBfGNJjisQCLxZvPKxliRWg5rwj8N3Lw6kqWYosn+N1sRCBFAYn0saefq grUY8wgAqkaBF+PWm5FAY52/dmQzFxj7tGvh9uwYhIejOH1mawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBoem0cwsHm8wuPn2G1kbFi8fAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVh ZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvOWNmMGZjZDUtOWVkYy0z NzAwLThjMDgtZWRjZmQzOTYzYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWZlYWQzY2ItMWQzOC00MDdmLWJh MDYtOGUyNzZiMDY3MjM4L2VmZWFkM2NiLTFkMzgtNDA3Zi1iYTA2LThlMjc2YjA2 NzIzOC5jcmwwHwYDVR0jBBgwFoAUNPnajc3fX4CiVfX2aItPRyDBA9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3 NmIwNjcyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2gunvO0tnyzAOdLKGOCu4uUqrsK3FHZms4Y64i4nO39wv3T5hP1qvG orSOMdjYtCVxCm1qP544CJEclkkbeY2zRcC9UUpa7R8IfFig4vFkx5VqabsQga/k bxiX/nyq2P5ZZnr2vwTLxQtE3rx1DkGz57b+4mD/xGt8wyxJh4pfRhJwVuiF1tMa kWAJqnT7muJZEUkHN2v55/Ccz5gwpjYsWihgNUqFCzHESH9VB2AyG5NTnOLQWMKk M3IYWSZ1g64aQbCVteLB+6weOt9zd4gfmGUAA1VgTJVx2SsL1FwxPZEf7NsUeoXo x7SuoQewHKf8fFdSBVx+jkjA79/ecGg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:57 2025 by rpki-client