$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa File: 0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa (raw, json) Hash identifier: mbPhQODNNEzYh+8OyFRP9YRQXhdDoogsrEtp9eiPUkA= Subject key identifier: AD:9E:58:62:C8:CA:85:51:B5:51:CA:3A:A7:21:5A:49:54:20:16:DA Certificate issuer: /CN=ebe4e372-a81b-4281-b3fe-19178dec0235 Certificate serial: 010D0C9F4328584B8BE228DC9EC6E7397B145A95 Authority key identifier: 0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16954 IP address blocks: 209.54.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:28:dc:9e:c6:e7:39:7b:14:5a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe4e372-a81b-4281-b3fe-19178dec0235 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=2dfaa8b0-6813-47d1-8032-ab58a753c6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:f7:11:87:19:9d:78:d1:f4:b2:2e:dc:93: 0d:4d:c4:3d:98:a0:e5:e6:04:15:a3:ac:61:69:92: 9b:e3:34:44:91:67:3c:57:df:52:e7:19:fa:ad:0a: a6:52:d3:a8:54:55:f9:1b:77:71:25:4c:ca:8b:37: 3c:c0:9c:d1:7a:c2:d7:ad:8c:56:95:65:74:c7:6e: 8a:a4:04:76:99:a6:16:65:b6:06:7c:09:74:d5:52: 77:f5:38:51:04:06:1e:0e:16:0c:01:29:40:b6:7b: 63:47:b6:3c:bc:d4:24:19:b2:8b:07:b2:93:51:f7: 48:89:2e:86:35:45:a9:fa:7a:0c:83:16:46:ef:d8: 08:56:eb:71:22:ae:80:c6:84:7f:3b:80:66:bb:fd: 3d:2a:ee:a7:ff:a1:a5:1a:a2:f4:16:17:0f:ce:4b: 26:2f:39:4e:89:1a:1c:83:f2:44:a6:07:2e:38:53: a3:18:6d:41:d2:e6:76:c0:99:e2:7d:f9:04:44:ec: 5a:33:2b:bb:f7:36:2b:f6:3a:8d:9b:45:bf:1c:a8: 08:22:a6:3e:2c:dc:22:3c:0b:dd:8e:0d:1a:f2:a5: d2:9a:98:4a:56:cf:00:4c:e1:85:82:e6:b2:21:82: 00:d0:01:63:11:6e:fb:e8:33:df:55:a3:73:84:d5: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:58:62:C8:CA:85:51:B5:51:CA:3A:A7:21:5A:49:54:20:16:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl X509v3 Authority Key Identifier: keyid:0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer sbgp-ipAddrBlock: critical IPv4: 209.54.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:65:49:17:0e:be:ca:76:f1:57:ca:03:5d:25:19:83:56:b2: 90:4c:51:1a:b6:d6:1e:4e:a3:a0:0a:66:89:16:8e:12:6d:43: 2a:65:e6:ed:17:1f:55:ba:3f:9f:20:69:ea:e9:72:7e:a3:e2: d5:ca:dd:54:c8:d6:dd:9c:48:2a:a6:99:0f:7f:b2:23:99:e3: a4:1c:05:be:82:14:b5:82:c6:49:c6:9a:64:db:60:19:d8:f5: 69:8c:65:a7:f0:78:76:a8:66:5a:03:f5:79:52:c2:7d:52:10: 6d:f4:f4:6f:57:18:10:e1:ee:4e:68:5c:65:f5:3e:0d:15:ba: 9a:cd:40:56:30:51:ae:3a:4d:8b:9d:e6:d6:ba:b5:28:41:ff: 27:0e:e8:82:9e:c9:85:41:78:43:3a:c5:da:c8:7b:f3:d4:bf: b2:c0:6b:ed:ff:59:3a:68:80:b3:b8:c5:d0:41:d1:e3:5b:91: c6:7b:5f:6a:29:ca:7d:58:1e:03:19:52:06:0c:ac:2e:6a:c9: 22:82:a9:e8:e9:56:a7:9d:30:80:69:9a:a1:b8:41:e7:84:3d: 06:0f:d5:f1:69:ae:53:3e:15:09:0f:bc:c7:94:a3:43:f9:8f: a3:48:5c:48:85:05:f8:1f:24:17:89:c7:16:c0:cb:f4:a5:e9: ef:c8:78:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4ijcnsbnOXsUWpUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJlNGUzNzItYTgxYi00MjgxLWIzZmUtMTkxNzhkZWMw MjM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MmRmYWE4YjAtNjgxMy00N2QxLTgwMzItYWI1OGE3NTNjNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5z3EYcZnXjR9LIu3JMNTcQ9mKDl5gQVo6xh aZKb4zREkWc8V99S5xn6rQqmUtOoVFX5G3dxJUzKizc8wJzResLXrYxWlWV0x26K pAR2maYWZbYGfAl01VJ39ThRBAYeDhYMASlAtntjR7Y8vNQkGbKLB7KTUfdIiS6G NUWp+noMgxZG79gIVutxIq6AxoR/O4Bmu/09Ku6n/6GlGqL0FhcPzksmLzlOiRoc g/JEpgcuOFOjGG1B0uZ2wJniffkEROxaMyu79zYr9jqNm0W/HKgIIqY+LNwiPAvd jg0a8qXSmphKVs8ATOGFguayIYIA0AFjEW776DPfVaNzhNWt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2eWGLIyoVRtVHKOqchWklUIBbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYmU0 ZTM3Mi1hODFiLTQyODEtYjNmZS0xOTE3OGRlYzAyMzUvMGNiZWE5YzUtOWMxZS0z ZmJjLWI1ZjgtNTFjNTQxZTE3Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWJlNGUzNzItYTgxYi00MjgxLWIz ZmUtMTkxNzhkZWMwMjM1L2ViZTRlMzcyLWE4MWItNDI4MS1iM2ZlLTE5MTc4ZGVj MDIzNS5jcmwwHwYDVR0jBBgwFoAUDFhkm8tv/zRFcJ2iuFyN4Pyf9e4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYmU0ZTM3Mi1hODFiLTQyODEtYjNmZS0xOTE3 OGRlYzAyMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtlSRcOvsp28VfKA10lGYNWspBMURq21h5Oo6AKZokWjhJtQypl5u0X H1W6P58gaerpcn6j4tXK3VTI1t2cSCqmmQ9/siOZ46QcBb6CFLWCxknGmmTbYBnY 9WmMZafweHaoZloD9XlSwn1SEG309G9XGBDh7k5oXGX1Pg0VuprNQFYwUa46TYud 5ta6tShB/ycO6IKeyYVBeEM6xdrIe/PUv7LAa+3/WTpogLO4xdBB0eNbkcZ7X2op yn1YHgMZUgYMrC5qySKCqejpVqedMIBpmqG4QeeEPQYP1fFprlM+FQkPvMeUo0P5 j6NIXEiFBfgfJBeJxxbAy/Sl6e/IeOg= -----END CERTIFICATE-----Generated at Wed Oct 22 02:24:39 2025 by rpki-client