$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa File: 971c127d-3b4c-3c7a-841b-6314c4d14d35.roa (raw, json) Hash identifier: ddPr4LUYvh8sEpXVrpc8LifdC441vm5bhbD2QJ000N4= Subject key identifier: EC:D3:2B:19:D2:15:09:13:7B:B3:75:9B:D9:C6:A9:6E:41:AA:63:80 Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F4328584B7DECAF6F25EB2D9BBEB0A980 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 165.1.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:af:6f:25:eb:2d:9b:be:b0:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=dce89844-459a-4e2d-80a7-870c8db99daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:53:d9:e8:50:f1:94:dd:dc:5e:4b:c5:8a: 41:1f:d1:28:14:63:d7:b7:9d:27:f8:e0:17:bc:54: 7c:5e:82:7b:f0:ca:65:eb:1c:68:27:68:85:4a:13: 9f:35:7b:d6:2d:c9:bf:a4:bc:de:33:7a:60:ec:42: 85:25:a5:b9:d5:59:d5:88:cb:c5:bd:d2:dd:29:99: f4:0a:08:e1:f2:da:1a:c5:bc:94:7e:26:dc:dc:3d: 8d:c6:87:cf:87:b6:25:3d:af:83:0a:a6:8b:d4:5d: 6e:b2:69:4a:76:53:25:af:6f:9f:c3:61:c3:8d:b7: b7:34:04:7a:97:a2:04:16:43:12:e4:e3:9d:46:fc: 06:a6:ab:c8:ec:94:16:d5:b5:6e:e0:79:95:38:9b: 20:9e:f5:85:2c:fc:1c:f5:09:7d:04:81:a4:37:2c: 7f:fd:b9:91:fb:6c:ea:84:67:f3:66:cd:03:45:b5: b1:3c:b4:5c:c3:57:7f:09:5f:1c:e6:97:1e:6d:45: ac:93:98:97:72:69:a7:86:77:5a:c4:66:ff:78:59: b8:60:57:80:53:20:0c:c1:90:d5:16:bd:88:00:04: a1:72:a7:6f:75:a2:ec:c1:08:f6:f2:ae:b3:91:24: c9:58:69:e6:ee:0f:86:91:d9:cb:e5:7c:ff:f3:ec: d8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D3:2B:19:D2:15:09:13:7B:B3:75:9B:D9:C6:A9:6E:41:AA:63:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a8:43:21:2e:c8:58:cf:cb:af:65:c8:f7:5a:e7:eb:fc:24: 3e:3d:76:b7:32:91:39:43:be:9d:1a:e3:55:99:1c:a0:56:d3: 10:c5:7a:b3:c0:16:c7:fa:69:a5:35:ce:56:c1:41:dc:1a:a1: 64:10:81:28:40:17:08:ae:e8:f6:ff:0f:58:ea:a8:29:d5:0a: 3e:4a:10:65:b6:27:99:64:87:61:30:ec:eb:8f:0d:a7:9b:b7: 57:1d:45:d0:2d:ea:d4:4d:c4:3e:63:22:90:cf:d7:ed:99:1e: 29:86:ce:5b:e8:de:43:06:00:92:fa:80:08:88:c6:a7:37:dd: 14:d3:12:81:a6:31:fb:aa:32:2c:f8:36:a1:f5:83:54:06:80: c9:4c:e1:fd:45:09:86:be:51:9f:f5:7b:72:d7:26:ee:c6:1f: c1:5f:70:04:bd:41:26:c6:0f:8f:45:e2:4c:10:b7:29:bb:96: a1:c4:87:ee:7b:f7:75:1e:56:0f:ea:f7:2d:df:61:eb:cd:ed: e7:74:05:57:c9:16:12:79:cb:b1:cf:47:84:41:2e:24:3c:63: ec:ce:0e:11:6b:76:4d:4a:53:38:68:ed:32:a0:b8:83:1e:17: 95:e6:e1:86:d0:fb:46:16:1e:7f:ce:8a:04:ce:be:90:93:60: 9a:8e:03:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97K9vJestm76wqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGNlODk4NDQtNDU5YS00ZTJkLTgwYTctODcwYzhkYjk5ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQRT2ehQ8ZTd3F5LxYpBH9EoFGPXt50n+OAX vFR8XoJ78Mpl6xxoJ2iFShOfNXvWLcm/pLzeM3pg7EKFJaW51VnViMvFvdLdKZn0 Cgjh8toaxbyUfibc3D2NxofPh7YlPa+DCqaL1F1usmlKdlMlr2+fw2HDjbe3NAR6 l6IEFkMS5OOdRvwGpqvI7JQW1bVu4HmVOJsgnvWFLPwc9Ql9BIGkNyx//bmR+2zq hGfzZs0DRbWxPLRcw1d/CV8c5pcebUWsk5iXcmmnhndaxGb/eFm4YFeAUyAMwZDV Fr2IAAShcqdvdaLswQj28q6zkSTJWGnm7g+GkdnL5Xz/8+zYTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzTKxnSFQkTe7N1m9nGqW5BqmOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvOTcxYzEyN2QtM2I0Yy0z YzdhLTg0MWItNjMxNGM0ZDE0ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuoQyEuyFjPy69lyPda5+v8JD49drcykTlDvp0a41WZHKBW0xDFerPA Fsf6aaU1zlbBQdwaoWQQgShAFwiu6Pb/D1jqqCnVCj5KEGW2J5lkh2Ew7OuPDaeb t1cdRdAt6tRNxD5jIpDP1+2ZHimGzlvo3kMGAJL6gAiIxqc33RTTEoGmMfuqMiz4 NqH1g1QGgMlM4f1FCYa+UZ/1e3LXJu7GH8FfcAS9QSbGD49F4kwQtym7lqHEh+57 93UeVg/q9y3fYevN7ed0BVfJFhJ5y7HPR4RBLiQ8Y+zODhFrdk1KUzho7TKguIMe F5Xm4YbQ+0YWHn/OigTOvpCTYJqOA0k= -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:03 2025 by rpki-client