$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aa03b44c-f86e-318f-937f-6f3e15e870ca.roa File: aa03b44c-f86e-318f-937f-6f3e15e870ca.roa (raw, json) Hash identifier: JQNQA1K4216pyNBEoT1ZL/PD1Rn/cTBCJtbIfkFU/5w= Subject key identifier: 47:31:FC:A9:0C:8A:29:1A:14:27:CA:93:E5:2C:48:DB:D2:F1:76:6D Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B6632020C5C122529C2E69700 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aa03b44c-f86e-318f-937f-6f3e15e870ca.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 25961 IP address blocks: 206.192.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:02:0c:5c:12:25:29:c2:e6:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=c38e424c-eff8-4a1e-836a-72ae59d2426e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:99:18:a5:cb:ab:fd:ce:d6:0c:85:2e:6b: fb:0a:84:2f:6a:ba:df:ff:4d:98:3a:ee:a8:44:cc: 7c:b2:73:42:63:f8:6a:a2:a5:c1:7e:eb:43:f5:ba: 94:d4:9e:0c:88:9d:c2:d5:59:85:0b:b3:b9:c5:2e: 19:b9:cc:7c:66:7f:06:da:e7:19:89:69:6d:61:aa: 56:2d:13:a4:44:6c:8a:1f:ac:0a:87:36:22:ff:6d: a2:70:b2:32:7a:be:53:50:48:9d:28:f6:85:e0:90: 6f:1c:ae:53:7d:70:95:46:41:40:6d:d2:f9:d1:c0: d6:7e:90:3d:28:b0:3d:d0:8f:6b:31:76:19:1f:58: eb:2f:35:a6:a4:e4:ff:53:57:c4:e2:a8:8b:6d:3c: a6:fc:0a:c4:f0:d3:e1:cf:5b:04:93:6f:22:25:31: f7:19:c3:c2:14:d0:26:bf:69:48:18:f4:86:ba:4a: ff:73:ad:7e:a7:ba:5b:84:72:8e:dc:7e:f1:8a:05: 1c:61:03:b6:5f:de:f7:ac:75:1a:ab:57:26:e7:95: af:d7:07:82:26:87:5e:b0:31:7a:a9:87:67:bd:a9: 20:17:25:ec:d1:cf:7a:5c:8c:ea:be:75:94:e1:6a: 1c:5a:80:d3:b6:02:32:69:e9:96:d0:7c:c5:5c:e9: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:FC:A9:0C:8A:29:1A:14:27:CA:93:E5:2C:48:DB:D2:F1:76:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aa03b44c-f86e-318f-937f-6f3e15e870ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 206.192.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:53:76:9f:fd:ed:d1:98:78:12:f3:43:da:a4:b3:80:a9:53: d8:b4:84:3c:a4:88:78:b9:04:1f:fb:ea:1b:61:bd:98:67:da: 13:d7:42:a3:93:39:c3:a0:30:35:f3:06:82:df:ef:5e:31:73: 11:ac:05:1c:8b:88:8a:9c:64:0f:79:37:8f:74:d3:26:9a:02: 42:5d:c6:2f:74:c1:58:41:fe:03:d2:28:22:e8:7d:30:ab:c8: 91:36:50:24:a5:2a:1c:b5:5c:26:3e:1b:73:fa:58:0a:b2:5d: 14:f4:1c:44:7f:c4:d9:19:f0:90:86:b7:ab:35:7b:ca:3b:39: 31:2e:99:97:69:9d:56:f3:d2:91:44:58:0a:97:f6:77:83:89: 03:32:db:fe:97:a0:3c:e0:61:23:ca:d1:65:c4:cb:71:ed:71: 43:e6:0a:33:28:4a:4c:79:c0:e0:3b:2a:ac:fc:98:05:bc:fd: 79:88:4d:e7:62:75:92:83:b0:73:06:e1:09:bd:b0:c9:6d:7b: 5d:7b:c5:be:d9:26:53:8f:06:5e:1b:a7:85:01:c6:85:4a:b6: c2:dc:71:f1:4a:8e:97:0e:7a:f6:19:9c:af:48:43:e8:dc:a0: 3a:21:af:31:32:2c:57:4c:ea:5e:4a:f1:f7:5d:e0:02:2e:39: b9:2f:25:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgIMXBIlKcLmlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YzM4ZTQyNGMtZWZmOC00YTFlLTgzNmEtNzJhZTU5ZDI0MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmmZGKXLq/3O1gyFLmv7CoQvarrf/02YOu6o RMx8snNCY/hqoqXBfutD9bqU1J4MiJ3C1VmFC7O5xS4Zucx8Zn8G2ucZiWltYapW LROkRGyKH6wKhzYi/22icLIyer5TUEidKPaF4JBvHK5TfXCVRkFAbdL50cDWfpA9 KLA90I9rMXYZH1jrLzWmpOT/U1fE4qiLbTym/ArE8NPhz1sEk28iJTH3GcPCFNAm v2lIGPSGukr/c61+p7pbhHKO3H7xigUcYQO2X973rHUaq1cm55Wv1weCJodesDF6 qYdnvakgFyXs0c96XIzqvnWU4WocWoDTtgIyaemW0HzFXOmkOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcx/KkMiikaFCfKk+UsSNvS8XZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYWEwM2I0NGMtZjg2ZS0z MThmLTkzN2YtNmYzZTE1ZTg3MGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtTdp/97dGYeBLzQ9qks4CpU9i0hDykiHi5BB/76hthvZhn2hPXQqOT OcOgMDXzBoLf714xcxGsBRyLiIqcZA95N4900yaaAkJdxi90wVhB/gPSKCLofTCr yJE2UCSlKhy1XCY+G3P6WAqyXRT0HER/xNkZ8JCGt6s1e8o7OTEumZdpnVbz0pFE WAqX9neDiQMy2/6XoDzgYSPK0WXEy3HtcUPmCjMoSkx5wOA7Kqz8mAW8/XmITedi dZKDsHMG4Qm9sMlte117xb7ZJlOPBl4bp4UBxoVKtsLccfFKjpcOevYZnK9IQ+jc oDohrzEyLFdM6l5K8fdd4AIuObkvJcc= -----END CERTIFICATE-----Generated at Tue Oct 21 04:47:55 2025 by rpki-client