$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/f2f0f036-6e97-358a-ae84-4ea51f08e916.roa File: f2f0f036-6e97-358a-ae84-4ea51f08e916.roa (raw, json) Hash identifier: 45hs/BOXZto/h4wP/0PlyT7K4AsXlTu09v6NDmiyxSU= Subject key identifier: 25:76:67:C5:0E:73:5A:10:8E:E4:1D:20:67:52:0F:29:95:00:F9:5B Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584B7C99F5B68DB21609A67AB600 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/f2f0f036-6e97-358a-ae84-4ea51f08e916.roa Signing time: Sat 11 Oct 2025 13:38:09 +0000 ROA not before: Sat 11 Oct 2025 13:38:09 +0000 ROA not after: Fri 09 Jan 2026 14:38:09 +0000 asID: 54252 IP address blocks: 216.126.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:99:f5:b6:8d:b2:16:09:a6:7a:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Oct 11 13:38:09 2025 GMT Not After : Jan 9 14:38:09 2026 GMT Subject: CN=09d0dc65-61dd-40d7-bf89-eb21a49ce350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:d0:88:ee:c7:6b:00:91:2a:c6:23:0b:b1: 53:80:7a:b9:95:68:ff:9e:28:3c:cb:71:ff:c5:22: 7f:d0:80:05:fd:cb:b8:35:63:7d:d9:a1:a1:c5:88: bf:c6:74:29:f3:d0:af:25:93:69:1b:1f:e1:5b:cc: cb:41:af:73:47:88:6d:be:fe:7a:9e:02:96:8f:79: a9:9f:8e:40:02:41:e2:42:e5:72:10:1b:4c:e3:88: b3:19:be:44:b2:27:be:d9:e9:cc:a2:8e:a8:9f:f3: fc:ec:0a:ba:78:a2:2f:4c:94:25:87:5b:98:c4:9d: d9:32:67:4e:76:46:96:2e:9f:f3:8f:17:f8:02:36: 58:56:c0:37:b3:5a:ca:08:6a:ee:f7:65:07:d7:73: 2e:d3:00:e8:67:56:83:60:3b:fb:28:68:07:e1:e8: 88:34:24:e9:30:d9:a0:24:72:e7:38:8c:75:a1:26: f6:b9:2e:02:81:a9:46:4e:86:e6:52:65:98:81:3d: e1:dc:bc:b1:89:49:b9:82:d3:08:47:2c:60:13:75: a3:43:95:ed:d8:9d:bb:56:fd:8f:c7:6b:d8:47:87: c3:de:f9:b9:83:c1:76:c9:3f:0e:95:df:7c:0f:e2: a8:a4:2b:b5:4d:ea:a8:d6:99:68:2d:0b:e3:79:ab: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:76:67:C5:0E:73:5A:10:8E:E4:1D:20:67:52:0F:29:95:00:F9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/f2f0f036-6e97-358a-ae84-4ea51f08e916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 216.126.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:54:98:ac:55:32:cb:1a:be:08:0d:38:a2:c1:e6:9c:1b:00: 36:78:e4:b1:09:e9:12:6c:30:86:f5:94:c4:3e:f0:d2:c9:e7: b5:80:21:6f:cf:ea:64:ce:1f:31:3b:e9:8a:cf:63:84:ff:67: 3e:da:16:99:f3:49:e9:ad:12:97:74:e2:1f:c6:a2:04:ed:93: de:ab:1c:fe:5e:f9:43:1f:76:9b:f4:1f:1a:dd:c8:14:0b:c8: b6:a4:2c:a3:94:ab:c1:56:22:81:aa:c7:a2:4f:f0:99:5d:f9: 36:79:d8:30:cd:7f:db:c4:f9:3e:71:54:d5:c9:eb:53:ba:8b: 36:d9:3c:73:c3:72:82:1f:9e:a6:b6:21:21:6c:91:1b:ab:d4: 28:e3:5e:1f:af:de:c5:b9:bf:12:e9:1a:eb:d3:74:be:05:55: 08:18:fe:cb:bc:d5:08:83:d6:41:84:00:8a:e9:e2:65:a6:c7: e9:79:49:63:ad:64:5d:6e:c0:87:d6:08:f5:bd:1b:94:8f:91: 9e:c1:85:d4:87:50:cc:84:fb:f8:ab:f4:3c:29:48:1e:a0:97: 05:45:8e:4c:70:32:7a:00:87:f7:2b:68:7f:2e:09:e6:fd:b4: a4:7e:da:89:d8:ec:b7:a3:ff:23:17:af:30:50:7f:28:43:1e: 84:f5:cc:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8mfW2jbIWCaZ6tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MTAxMTEzMzgwOVoXDTI2MDEwOTE0MzgwOVowLzEtMCsGA1UEAxMk MDlkMGRjNjUtNjFkZC00MGQ3LWJmODktZWIyMWE0OWNlMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbfQiO7HawCRKsYjC7FTgHq5lWj/nig8y3H/ xSJ/0IAF/cu4NWN92aGhxYi/xnQp89CvJZNpGx/hW8zLQa9zR4htvv56ngKWj3mp n45AAkHiQuVyEBtM44izGb5Esie+2enMoo6on/P87Aq6eKIvTJQlh1uYxJ3ZMmdO dkaWLp/zjxf4AjZYVsA3s1rKCGru92UH13Mu0wDoZ1aDYDv7KGgH4eiINCTpMNmg JHLnOIx1oSb2uS4CgalGTobmUmWYgT3h3LyxiUm5gtMIRyxgE3WjQ5Xt2J27Vv2P x2vYR4fD3vm5g8F2yT8Old98D+KopCu1Teqo1ploLQvjeasvpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV2Z8UOc1oQjuQdIGdSDymVAPlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvZjJmMGYwMzYtNmU5Ny0z NThhLWFlODQtNGVhNTFmMDhlOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H47MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9UmKxVMssavggNOKLB5pwbADZ45LEJ6RJsMIb1lMQ+8NLJ57WAIW/P 6mTOHzE76YrPY4T/Zz7aFpnzSemtEpd04h/GogTtk96rHP5e+UMfdpv0HxrdyBQL yLakLKOUq8FWIoGqx6JP8Jld+TZ52DDNf9vE+T5xVNXJ61O6izbZPHPDcoIfnqa2 ISFskRur1CjjXh+v3sW5vxLpGuvTdL4FVQgY/su81QiD1kGEAIrp4mWmx+l5SWOt ZF1uwIfWCPW9G5SPkZ7BhdSHUMyE+/ir9DwpSB6glwVFjkxwMnoAh/craH8uCeb9 tKR+2onY7Lej/yMXrzBQfyhDHoT1zOQ= -----END CERTIFICATE-----Generated at Mon Oct 20 01:30:14 2025 by rpki-client