$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa File: b6e14efa-29c2-321e-91ea-20c36382b1b0.roa (raw, json) Hash identifier: /WhaL0W0wYGgT8HOYveGOcqro5RWOKKE5YTJLzCniLc= Subject key identifier: EA:53:83:A4:23:98:D2:F1:40:F3:02:BF:A8:D5:44:26:F3:AE:C4:0F Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584B8917739661CEEEDF195CAA80 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 46632 IP address blocks: 216.238.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:73:96:61:ce:ee:df:19:5c:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=476901fc-e6f6-429a-bd40-3540d9bb6f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:29:f5:c0:72:58:24:52:1b:7b:45:ab:3d: 7f:f4:f3:5f:0c:01:c4:d9:1f:9c:d5:ae:ec:79:ae: 86:ad:73:4e:2b:21:e9:a4:80:46:6b:e2:e3:62:25: 50:dd:6c:e2:58:0c:16:a4:66:e4:96:81:e2:74:dd: fb:b4:99:0e:09:03:ce:64:a0:f0:9a:77:07:d4:51: ae:c4:fb:0c:43:fb:f3:1a:da:a0:99:81:a2:0b:f1: 0d:de:d5:cc:9f:ea:53:3d:b3:f3:57:30:d6:2a:0b: 34:79:89:12:df:a1:30:09:f8:35:4a:bd:a7:95:8a: 24:e5:bb:ad:fd:45:8e:f7:eb:11:68:dc:83:47:d0: a4:41:5b:61:bc:e5:f3:b7:5d:a5:83:59:47:1a:e9: fe:9f:cd:4c:97:06:c5:d3:2a:13:3c:eb:7e:0b:9b: f9:92:2d:73:f0:f6:66:a1:c0:7a:72:38:09:43:6f: f2:a3:5d:5c:99:f2:ce:69:d8:ab:5b:5a:09:9b:0c: 5d:b2:8d:52:40:8c:61:5b:4b:81:83:e2:a2:b4:6a: f8:1d:1d:7d:4d:4c:af:e8:01:00:bd:88:f0:14:6d: b2:4d:19:39:64:c4:db:83:99:15:d8:9d:8b:e2:19: 79:de:95:d8:e5:01:d3:26:88:c1:be:62:d9:ef:51: 59:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:83:A4:23:98:D2:F1:40:F3:02:BF:A8:D5:44:26:F3:AE:C4:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:53:fc:aa:d8:34:e2:79:61:2c:ec:c6:d7:f6:32:38:c8:ac: 6a:c5:f6:b6:bd:98:bd:83:1e:53:4e:9e:32:ba:f2:c7:ee:a9: fa:20:bc:1d:00:79:0f:b2:74:4b:a9:9f:94:d5:80:cc:22:36: 9f:5f:88:6b:c9:1d:70:cb:e5:ba:31:0f:b5:21:7a:d1:17:a7: 39:7e:06:62:1a:0c:87:ce:95:b3:d8:ab:f9:7e:ac:b5:67:91: 34:32:c3:20:ba:51:fa:e8:57:b6:90:bf:f4:7b:91:2c:83:96: 08:4b:89:ab:e7:c7:bb:27:93:13:c2:da:3e:58:0c:15:23:97: 86:f4:6f:9f:6c:69:fe:9d:6a:8e:f8:b0:59:57:47:53:85:66: 0d:db:36:eb:f8:a5:15:1d:18:2c:9c:5d:eb:d8:42:f2:23:05: 95:35:a7:41:f2:b0:b8:b6:e5:71:08:0f:e6:a6:75:c8:58:11: 98:76:26:8c:1a:69:93:86:54:78:03:4a:2a:90:2a:23:c5:cd: 70:85:cd:38:85:a9:0e:af:c9:21:6b:a5:91:9c:bd:64:62:ef: d2:a7:a0:98:23:cc:53:1d:28:82:ad:e3:f2:e6:bf:10:ce:f8: 97:d3:fc:4f:ea:00:08:d4:69:de:eb:47:26:50:c4:11:ad:12: bc:eb:6c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3OWYc7u3xlcqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NDc2OTAxZmMtZTZmNi00MjlhLWJkNDAtMzU0MGQ5YmI2Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKkp9cByWCRSG3tFqz1/9PNfDAHE2R+c1a7s ea6GrXNOKyHppIBGa+LjYiVQ3WziWAwWpGbkloHidN37tJkOCQPOZKDwmncH1FGu xPsMQ/vzGtqgmYGiC/EN3tXMn+pTPbPzVzDWKgs0eYkS36EwCfg1Sr2nlYok5but /UWO9+sRaNyDR9CkQVthvOXzt12lg1lHGun+n81MlwbF0yoTPOt+C5v5ki1z8PZm ocB6cjgJQ2/yo11cmfLOadirW1oJmwxdso1SQIxhW0uBg+KitGr4HR19TUyv6AEA vYjwFG2yTRk5ZMTbg5kV2J2L4hl53pXY5QHTJojBvmLZ71FZYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpTg6QjmNLxQPMCv6jVRCbzrsQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvYjZlMTRlZmEtMjljMi0z MjFlLTkxZWEtMjBjMzYzODJiMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlT/KrYNOJ5YSzsxtf2MjjIrGrF9ra9mL2DHlNOnjK68sfuqfogvB0A eQ+ydEupn5TVgMwiNp9fiGvJHXDL5boxD7UhetEXpzl+BmIaDIfOlbPYq/l+rLVn kTQywyC6UfroV7aQv/R7kSyDlghLiavnx7snkxPC2j5YDBUjl4b0b59saf6dao74 sFlXR1OFZg3bNuv4pRUdGCycXevYQvIjBZU1p0HysLi25XEID+amdchYEZh2Jowa aZOGVHgDSiqQKiPFzXCFzTiFqQ6vySFrpZGcvWRi79KnoJgjzFMdKIKt4/LmvxDO +JfT/E/qAAjUad7rRyZQxBGtErzrbFc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:53:43 2025 by rpki-client