$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/cb6c4588-46d5-3dd2-9ad6-acd6c66804f9.roa File: cb6c4588-46d5-3dd2-9ad6-acd6c66804f9.roa (raw, json) Hash identifier: 8a8WZ31057UybrwgMl2H4skaNE604l/kXl1/9d9Gzcg= Subject key identifier: 63:C1:01:87:F1:2A:1F:54:CF:64:E4:A2:90:FE:92:AA:0B:9D:E6:49 Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Certificate serial: 010D0C9F4328584B970D00B8282B3FB2984F1A80 Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/cb6c4588-46d5-3dd2-9ad6-acd6c66804f9.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 20259 IP address blocks: 169.224.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:00:b8:28:2b:3f:b2:98:4f:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=d46cdf90-977c-48de-84da-9d3f82ead93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:21:47:b3:75:f6:62:bc:82:57:41:89:2b:e6: 23:da:2c:60:b4:0d:d5:4d:e1:94:02:4d:38:a4:87: d0:df:46:a3:90:1c:01:70:a5:ca:39:d4:26:9b:a4: 26:b9:dc:c2:a2:ac:e9:05:09:ab:0c:ce:26:7b:f0: bf:a1:6a:3b:b4:25:70:d3:2c:ad:24:4b:18:81:d4: 98:22:ec:ff:a0:ec:98:92:d8:32:2e:a5:c5:a3:fc: 6e:8a:c6:c5:c5:b7:0b:ae:46:98:51:8b:46:2d:68: 7a:0a:3e:f5:d2:ee:d5:f9:69:48:b7:38:22:29:9d: f6:ac:9e:6b:8c:4b:8a:18:9d:4f:07:86:3e:b0:20: 6d:70:7f:32:ef:63:ce:a9:f9:e1:79:8a:17:f7:8c: 2b:3a:bf:1b:2e:af:e5:bb:fc:05:d9:14:72:9d:9f: 86:5d:5e:dd:27:fc:d4:c9:92:96:1f:b1:88:79:cd: 33:30:25:f8:30:a1:fd:0a:1d:3f:bb:51:96:bd:da: bb:40:0d:06:28:bb:26:08:3e:80:49:e3:e3:ce:93: 6d:36:28:a4:73:3c:30:57:c3:9c:8b:b9:25:a0:28: 5d:b6:68:f7:af:31:55:95:6b:7e:60:f5:8e:cc:0f: ec:ab:07:4e:b0:bc:df:6d:dd:66:0c:c2:73:0f:78: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C1:01:87:F1:2A:1F:54:CF:64:E4:A2:90:FE:92:AA:0B:9D:E6:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/cb6c4588-46d5-3dd2-9ad6-acd6c66804f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl X509v3 Authority Key Identifier: keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer sbgp-ipAddrBlock: critical IPv4: 169.224.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ce:c3:31:3c:41:7e:ef:6d:d5:9c:c0:67:76:19:5e:89:82: d0:2a:46:1a:f1:99:cf:d8:b6:98:50:d6:80:74:30:27:44:d6: 83:ca:b3:41:45:cc:5d:ce:e1:52:b4:7e:d2:dd:02:a4:52:ba: 69:b0:27:0a:7e:be:3b:96:85:ef:a2:31:20:36:66:28:82:ee: 11:6c:52:82:4e:18:a5:64:22:1e:d7:0c:00:c6:c1:c1:be:e5: 65:ef:ae:75:e5:1f:56:c2:7c:c9:42:8e:d2:fe:31:28:8b:ea: f3:69:2b:b4:01:54:26:76:da:dd:9d:ab:82:cd:f6:e6:22:da: 5b:87:df:32:66:66:92:9f:6d:f4:e8:66:67:d4:2c:c2:1b:1a: 8e:c0:42:a3:3c:ac:55:14:cc:07:cc:0c:40:c3:58:11:b1:af: e9:d5:e9:c5:a2:cc:40:9a:72:1b:86:5c:88:79:3a:7c:42:ff: ed:08:a4:8d:54:fc:c4:80:c1:92:ad:e0:9e:e2:80:9e:d0:b6: 34:c2:80:58:c3:5b:83:5a:08:2c:fe:b8:8d:48:04:65:5b:2a: 98:08:0e:9b:7d:51:5f:67:8a:d5:81:88:30:c4:57:c2:50:46: 9d:01:f0:b4:c0:9b:56:14:b1:4c:8a:39:74:36:95:bb:79:a0: 9b:fe:af:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQC4KCs/sphPGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlZjg3NWEtYzlhNC00NWUwLTliODAtM2VhMTBiZWNh ZDlmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDQ2Y2RmOTAtOTc3Yy00OGRlLTg0ZGEtOWQzZjgyZWFkOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SFHs3X2YryCV0GJK+Yj2ixgtA3VTeGUAk04 pIfQ30ajkBwBcKXKOdQmm6QmudzCoqzpBQmrDM4me/C/oWo7tCVw0yytJEsYgdSY Iuz/oOyYktgyLqXFo/xuisbFxbcLrkaYUYtGLWh6Cj710u7V+WlItzgiKZ32rJ5r jEuKGJ1PB4Y+sCBtcH8y72POqfnheYoX94wrOr8bLq/lu/wF2RRynZ+GXV7dJ/zU yZKWH7GIec0zMCX4MKH9Ch0/u1GWvdq7QA0GKLsmCD6ASePjzpNtNiikczwwV8Oc i7kloChdtmj3rzFVlWt+YPWOzA/sqwdOsLzfbd1mDMJzD3jH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPBAYfxKh9Uz2TkopD+kqoLneZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZWVm ODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWExMGJlY2FkOWYvY2I2YzQ1ODgtNDZkNS0z ZGQyLTlhZDYtYWNkNmM2NjgwNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGVlZjg3NWEtYzlhNC00NWUwLTli ODAtM2VhMTBiZWNhZDlmLzhlZWY4NzVhLWM5YTQtNDVlMC05YjgwLTNlYTEwYmVj YWQ5Zi5jcmwwHwYDVR0jBBgwFoAU2hd1uxE+8mvw+V5uiVzDDuCoynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZWVmODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWEx MGJlY2FkOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqeDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDOwzE8QX7vbdWcwGd2GV6JgtAqRhrxmc/YtphQ1oB0MCdE1oPKs0FF zF3O4VK0ftLdAqRSummwJwp+vjuWhe+iMSA2ZiiC7hFsUoJOGKVkIh7XDADGwcG+ 5WXvrnXlH1bCfMlCjtL+MSiL6vNpK7QBVCZ22t2dq4LN9uYi2luH3zJmZpKfbfTo ZmfULMIbGo7AQqM8rFUUzAfMDEDDWBGxr+nV6cWizECachuGXIh5OnxC/+0IpI1U /MSAwZKt4J7igJ7QtjTCgFjDW4NaCCz+uI1IBGVbKpgIDpt9UV9nitWBiDDEV8JQ Rp0B8LTAm1YUsUyKOXQ2lbt5oJv+r/Y= -----END CERTIFICATE-----Generated at Wed Oct 22 00:11:58 2025 by rpki-client