$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/5bd26345-5846-382f-bf53-570b12e3f990.roa File: 5bd26345-5846-382f-bf53-570b12e3f990.roa (raw, json) Hash identifier: EcFHdkPC/CsXqGk0YNB0QmF8wZDusw+oV4zwuNf5itI= Subject key identifier: 66:64:6A:F5:A6:24:6C:76:09:7C:D6:B4:18:86:18:84:5C:8A:E8:AE Certificate issuer: /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Certificate serial: 010D0C9F4328584B7A78B40D27E85337960B4100 Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/5bd26345-5846-382f-bf53-570b12e3f990.roa Signing time: Fri 10 Oct 2025 18:02:41 +0000 ROA not before: Fri 10 Oct 2025 18:02:41 +0000 ROA not after: Thu 08 Jan 2026 19:02:41 +0000 asID: 14618 IP address blocks: 216.57.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:78:b4:0d:27:e8:53:37:96:0b:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Validity Not Before: Oct 10 18:02:41 2025 GMT Not After : Jan 8 19:02:41 2026 GMT Subject: CN=5cbb0784-a4b6-48e4-804e-44d94052b7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:54:94:8d:8b:b5:82:ad:09:28:bb:70:0e: d9:9b:b0:03:1f:26:da:11:ef:fa:0b:00:9d:d0:77: 3d:53:71:46:96:d9:24:b4:36:a3:53:d4:52:b9:0f: 43:0a:0d:36:7a:0f:ad:36:ff:a5:9c:b9:17:d8:7e: ea:20:06:e8:8f:76:fe:ac:13:d2:24:84:d4:e8:6a: 37:96:9f:08:96:34:31:05:3e:f0:8d:8d:6d:75:f3: b1:3d:99:65:70:d4:4f:da:e4:df:cc:de:7a:35:c9: 62:a0:1e:9f:2d:6f:9a:3e:28:a9:e4:72:42:98:68: 7f:83:67:7e:42:b4:05:8a:37:b2:3e:8b:31:57:d6: cb:d8:1c:64:62:4c:1d:8e:74:a7:59:dd:e9:46:fb: 98:ee:3a:3c:26:ec:e3:29:f3:44:89:db:e9:52:3f: 7d:86:e2:88:e0:32:80:cb:03:31:df:db:c1:89:b2: 4a:ab:a8:d3:a5:7c:d3:65:9f:86:88:c9:0e:a2:8f: 22:73:4f:ec:64:71:98:d4:a6:5c:be:8d:f4:cd:d4: 3b:18:0d:00:60:f4:2d:07:ca:62:65:00:3b:31:1f: c0:e9:08:fc:d5:4e:6e:a6:fd:af:81:1f:31:ab:ef: 79:5e:22:3a:db:aa:11:83:ac:30:ca:5d:5b:9a:2a: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:64:6A:F5:A6:24:6C:76:09:7C:D6:B4:18:86:18:84:5C:8A:E8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/5bd26345-5846-382f-bf53-570b12e3f990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl X509v3 Authority Key Identifier: keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer sbgp-ipAddrBlock: critical IPv4: 216.57.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:70:9b:f6:af:87:aa:c0:a0:96:03:f5:14:98:1c:36:c2:90: 4d:71:1d:31:be:c5:30:bc:f2:5b:c0:83:30:4b:20:26:d2:25: b6:9b:4e:ba:35:57:ac:1e:cd:32:af:25:88:63:c2:19:f1:6c: d9:6e:e4:8f:f1:5a:78:9c:ac:94:a7:e5:fa:64:db:2e:66:4a: 43:bf:64:7c:fb:02:a9:c8:ed:e1:0f:dd:80:49:b8:1b:a5:9d: 83:eb:a2:a0:82:93:7e:d4:19:c5:c8:24:a4:d4:bf:c6:af:1c: 53:69:88:aa:41:84:fb:ef:f6:24:86:67:d9:6b:4a:e8:6c:66: b2:43:8a:85:be:18:18:17:78:8b:50:12:cf:16:69:67:b1:67: 28:2e:89:ba:69:e1:d4:a4:d9:e8:e9:6e:01:bd:05:e5:01:65: 5a:89:65:e5:81:9b:4b:35:d5:a8:e1:a3:a2:12:e1:28:6c:2c: 7c:e2:36:90:32:30:f6:f9:9d:3e:47:ff:e9:6a:54:89:9d:6c: 40:bd:23:1a:9b:40:9f:d4:ae:5c:ee:f7:f1:ac:5d:38:6a:3e: 50:f7:5e:61:59:3c:2c:6a:47:b5:9f:31:78:06:01:0e:94:5b: 88:9a:1b:6b:31:41:2c:ab:3e:20:8e:b6:1a:5a:af:c6:7b:78: e0:80:3f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6eLQNJ+hTN5YLQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA1NjcwN2QtODM4YS00YjhiLWJkOGUtOGE4NzRlYTA2 ODRkMB4XDTI1MTAxMDE4MDI0MVoXDTI2MDEwODE5MDI0MVowLzEtMCsGA1UEAxMk NWNiYjA3ODQtYTRiNi00OGU0LTgwNGUtNDRkOTQwNTJiN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrJUlI2LtYKtCSi7cA7Zm7ADHybaEe/6CwCd 0Hc9U3FGltkktDajU9RSuQ9DCg02eg+tNv+lnLkX2H7qIAboj3b+rBPSJITU6Go3 lp8IljQxBT7wjY1tdfOxPZllcNRP2uTfzN56NclioB6fLW+aPiip5HJCmGh/g2d+ QrQFijeyPosxV9bL2BxkYkwdjnSnWd3pRvuY7jo8JuzjKfNEidvpUj99huKI4DKA ywMx39vBibJKq6jTpXzTZZ+GiMkOoo8ic0/sZHGY1KZcvo30zdQ7GA0AYPQtB8pi ZQA7MR/A6Qj81U5upv2vgR8xq+95XiI626oRg6wwyl1bmiopaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZkavWmJGx2CXzWtBiGGIRciuiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2 NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3NGVhMDY4NGQvNWJkMjYzNDUtNTg0Ni0z ODJmLWJmNTMtNTcwYjEyZTNmOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA1NjcwN2QtODM4YS00YjhiLWJk OGUtOGE4NzRlYTA2ODRkL2UwNTY3MDdkLTgzOGEtNGI4Yi1iZDhlLThhODc0ZWEw Njg0ZC5jcmwwHwYDVR0jBBgwFoAUIXMnzKdXCq+bU/ZHofTuozYyHHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3 NGVhMDY4NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBwm/avh6rAoJYD9RSYHDbCkE1xHTG+xTC88lvAgzBLICbSJbabTro1 V6wezTKvJYhjwhnxbNlu5I/xWnicrJSn5fpk2y5mSkO/ZHz7AqnI7eEP3YBJuBul nYProqCCk37UGcXIJKTUv8avHFNpiKpBhPvv9iSGZ9lrSuhsZrJDioW+GBgXeItQ Es8WaWexZyguibpp4dSk2ejpbgG9BeUBZVqJZeWBm0s11ajho6IS4ShsLHziNpAy MPb5nT5H/+lqVImdbEC9IxqbQJ/Urlzu9/GsXThqPlD3XmFZPCxqR7WfMXgGAQ6U W4iaG2sxQSyrPiCOthpar8Z7eOCAP1c= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:26 2025 by rpki-client