$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa File: b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa (raw, json) Hash identifier: LTHdx6dT32krH4Gj7ae5WQSJQ0Qgxaf/WnlZrudnrUA= Subject key identifier: 35:4E:B3:AF:15:F1:4C:2B:8B:7C:70:B6:88:AA:6D:ED:86:B9:C5:91 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB5C72F4ABA7DC0E9E280 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 192.95.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b5:c7:2f:4a:ba:7d:c0:e9:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=fd294ee4-4e8f-4f7d-8e1f-344309dd28fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:81:08:98:47:f9:df:ff:f6:64:76:1e:ce:9a: 1d:02:d1:18:c8:1b:13:51:5d:95:8f:ce:d5:96:09: 32:f2:9d:b8:b9:bf:2b:db:80:86:69:f4:1e:b4:62: 02:e0:d7:08:a4:ac:51:43:71:73:bd:4b:fd:30:da: 80:e4:d4:6d:4b:93:6f:c2:05:5c:6a:82:cf:a8:eb: 9a:e3:c4:b1:6d:13:46:2f:f5:2e:2b:f1:ac:11:40: 1a:d1:35:b5:6f:f0:89:ca:4e:e2:51:65:59:1c:1e: af:9d:8d:e8:8c:4d:68:c0:e5:e7:4e:99:17:2c:a6: 01:5a:5e:a2:87:2c:a5:07:23:c2:ed:ba:32:d1:98: 16:1a:67:79:29:74:1e:2c:a4:3c:89:0c:56:59:c2: 3f:cd:33:30:e3:47:8b:eb:ee:3a:f5:9b:39:57:a4: 9f:b9:4a:b3:f9:5a:de:3a:95:ab:65:14:eb:90:2f: bd:6c:91:e4:cb:9c:c5:f8:08:cc:dd:68:f2:cd:68: af:69:f5:25:ae:ce:d3:bd:06:63:7a:af:b2:91:13: 46:d3:fc:1e:1b:68:c6:c9:d7:e0:7b:59:09:44:61: 23:e8:f5:e5:cf:8c:9d:da:db:ad:a8:6f:6f:b9:b2: e2:5f:34:9b:dd:38:b4:87:e7:9e:fd:a8:04:38:a2: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4E:B3:AF:15:F1:4C:2B:8B:7C:70:B6:88:AA:6D:ED:86:B9:C5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 192.95.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:05:bc:08:7e:84:37:66:52:86:fd:71:ff:87:56:a4:86:11: 05:48:40:84:e7:69:4b:a2:f2:42:82:72:be:58:c8:f6:a7:53: 5b:6d:80:ff:29:04:7a:84:c2:c3:a1:2f:cb:fa:93:4a:e0:de: ba:8b:ad:c3:04:a3:f5:73:62:3e:f0:c6:d8:21:bc:db:5b:69: e2:81:ee:b9:3e:d5:17:22:b8:a0:47:7f:65:b7:eb:05:51:45: bb:ce:9d:2a:ab:49:8c:f4:4c:98:07:c4:9d:41:96:cf:b3:77: f3:0f:3d:79:78:b7:f2:26:6d:5e:7f:90:99:ff:7f:76:fa:fa: d2:80:f2:a4:a4:28:fc:96:ae:cd:49:8a:35:a0:ac:1a:30:62: c9:cf:6b:c9:b2:d8:3b:8c:c3:03:5b:a1:dd:e2:5e:dc:05:dd: 34:dc:9e:73:32:11:ed:a9:9e:93:69:c9:82:2f:0d:c0:7c:26: cb:ff:d3:78:5a:9e:24:c3:ec:5d:79:c1:cd:95:97:d2:2c:32: 6b:46:4d:b9:68:e9:57:1c:fb:e0:79:07:73:32:52:fa:2e:78: 64:22:ba:c5:14:49:b7:a9:a5:05:68:f6:e8:cd:93:65:e2:e0: 15:45:12:99:4e:01:29:45:75:fc:7b:03:64:57:3b:61:43:31: 7d:91:b2:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLXHL0q6fcDp4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZmQyOTRlZTQtNGU4Zi00ZjdkLThlMWYtMzQ0MzA5ZGQyOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIEImEf53//2ZHYezpodAtEYyBsTUV2Vj87V lgky8p24ub8r24CGafQetGIC4NcIpKxRQ3FzvUv9MNqA5NRtS5NvwgVcaoLPqOua 48SxbRNGL/UuK/GsEUAa0TW1b/CJyk7iUWVZHB6vnY3ojE1owOXnTpkXLKYBWl6i hyylByPC7boy0ZgWGmd5KXQeLKQ8iQxWWcI/zTMw40eL6+469Zs5V6SfuUqz+Vre OpWrZRTrkC+9bJHky5zF+AjM3WjyzWivafUlrs7TvQZjeq+ykRNG0/weG2jGydfg e1kJRGEj6PXlz4yd2tutqG9vubLiXzSb3Ti0h+ee/agEOKJg4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVOs68V8Uwri3xwtoiqbe2GucWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjdlNTA0YTQtZThiMC0z OGYzLTljY2YtZTcwZmE0OGFjMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAFvAh+hDdmUob9cf+HVqSGEQVIQITnaUui8kKCcr5YyPanU1ttgP8p BHqEwsOhL8v6k0rg3rqLrcMEo/VzYj7wxtghvNtbaeKB7rk+1RciuKBHf2W36wVR RbvOnSqrSYz0TJgHxJ1Bls+zd/MPPXl4t/ImbV5/kJn/f3b6+tKA8qSkKPyWrs1J ijWgrBowYsnPa8my2DuMwwNbod3iXtwF3TTcnnMyEe2pnpNpyYIvDcB8Jsv/03ha niTD7F15wc2Vl9IsMmtGTblo6Vcc++B5B3MyUvoueGQiusUUSbeppQVo9ujNk2Xi 4BVFEplOASlFdfx7A2RXO2FDMX2RspE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:35:29 2025 by rpki-client