$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa File: cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa (raw, json) Hash identifier: eQ+DRvpVE3UaO2NyGfiQoMrjfJS8oep3lKSgbnmZUCQ= Subject key identifier: E4:87:C5:47:B4:80:D2:AB:AA:46:8D:F0:75:6E:28:75:B5:A2:3A:26 Certificate issuer: /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Certificate serial: 010D0C9F4328584B7A7965BB38FDD279E3B38D60 Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa Signing time: Fri 10 Oct 2025 18:01:27 +0000 ROA not before: Fri 10 Oct 2025 18:01:27 +0000 ROA not after: Thu 08 Jan 2026 19:01:27 +0000 asID: 16509 IP address blocks: 216.57.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:79:65:bb:38:fd:d2:79:e3:b3:8d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Validity Not Before: Oct 10 18:01:27 2025 GMT Not After : Jan 8 19:01:27 2026 GMT Subject: CN=a65c27c3-5cd0-4eae-9b89-f650c21e52c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:b2:dc:1b:03:81:70:e6:59:62:c6:2e:d2: 7d:e4:d3:6f:dd:51:52:12:95:8c:73:28:80:2a:ba: 4b:f5:b5:06:00:72:d8:33:ad:9b:dc:87:f7:60:0c: 4f:a4:ac:98:89:ce:21:41:08:55:90:20:cc:c6:9f: f0:7a:3a:59:4f:d7:b2:fb:4e:f1:8e:f4:d0:02:3c: 4b:f1:c5:31:40:81:b9:84:35:ec:cd:d9:23:18:78: 72:66:a9:1a:56:06:ee:65:01:62:d3:e3:c2:43:ec: 40:77:a9:71:16:53:8f:f2:04:82:fa:c5:d4:b0:f1: d1:03:81:51:1b:89:b7:93:99:45:f0:a4:a3:56:7c: b0:80:ab:80:e8:7e:f9:20:c6:a7:f8:32:56:79:c2: 5b:fb:19:46:47:04:80:73:ab:b1:5c:e8:ba:ff:b8: 2b:50:20:e2:96:fb:76:4e:ba:9a:44:e4:6f:0e:36: 68:74:c2:08:e8:d1:3f:3c:4a:85:cc:2e:f0:7f:7f: 2f:0a:bf:44:c4:1c:a7:39:74:d7:41:6a:4c:5d:dc: 96:9c:77:b9:c5:27:b9:cb:a2:3a:1d:04:99:30:3a: 8c:1f:2d:43:28:5a:68:93:4c:95:b1:b6:26:7c:48: 6b:d1:da:d7:e5:d4:59:d5:ca:c4:fb:b2:78:19:4f: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:87:C5:47:B4:80:D2:AB:AA:46:8D:F0:75:6E:28:75:B5:A2:3A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl X509v3 Authority Key Identifier: keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer sbgp-ipAddrBlock: critical IPv4: 216.57.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b4:04:de:27:83:f0:88:8a:98:7a:b6:bc:ba:d3:9e:a2:56: 18:e5:1d:07:8b:09:ea:4b:e5:4f:a5:4b:94:77:17:71:36:30: 9e:c3:c7:dc:7b:25:b8:a3:42:d3:ef:fa:10:d5:08:c1:6d:1b: 7a:c5:da:d4:f6:b3:be:bf:60:d3:08:15:c3:91:83:7b:f8:d4: b5:95:da:14:b5:0a:15:e2:b7:b8:20:9c:20:81:88:b1:0d:08: 98:37:53:09:9e:64:b6:0a:b0:d1:c9:c0:c3:05:5c:35:8a:32: cd:03:e6:9b:61:6f:bd:90:c9:c5:84:91:92:b9:1e:0c:cb:02: 42:5d:8c:56:01:5c:95:95:3b:0f:04:29:b0:8d:5c:3d:ae:32: d7:95:c0:f3:4e:de:3c:cd:ee:a9:1d:59:4b:96:a6:3e:0f:a4: 76:dd:39:07:ed:ad:01:25:14:1d:bb:30:0e:83:f3:37:f9:4e: 92:f1:ca:1d:c2:7b:f2:4d:fa:50:ec:fc:41:46:32:e8:c3:d8: 1d:62:04:1a:e2:48:01:e5:b1:cd:54:97:12:49:90:92:81:e0: 8e:d1:6c:46:13:69:d2:13:a2:09:4f:18:67:c5:d9:d1:e4:dc: 93:30:a8:97:d0:75:70:52:58:da:4e:92:38:c4:75:76:dc:fd: 7d:16:e2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6eWW7OP3SeeOzjWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA1NjcwN2QtODM4YS00YjhiLWJkOGUtOGE4NzRlYTA2 ODRkMB4XDTI1MTAxMDE4MDEyN1oXDTI2MDEwODE5MDEyN1owLzEtMCsGA1UEAxMk YTY1YzI3YzMtNWNkMC00ZWFlLTliODktZjY1MGMyMWU1MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvey3BsDgXDmWWLGLtJ95NNv3VFSEpWMcyiA KrpL9bUGAHLYM62b3If3YAxPpKyYic4hQQhVkCDMxp/wejpZT9ey+07xjvTQAjxL 8cUxQIG5hDXszdkjGHhyZqkaVgbuZQFi0+PCQ+xAd6lxFlOP8gSC+sXUsPHRA4FR G4m3k5lF8KSjVnywgKuA6H75IMan+DJWecJb+xlGRwSAc6uxXOi6/7grUCDilvt2 TrqaRORvDjZodMII6NE/PEqFzC7wf38vCr9ExBynOXTXQWpMXdyWnHe5xSe5y6I6 HQSZMDqMHy1DKFpok0yVsbYmfEhr0drX5dRZ1crE+7J4GU81JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSHxUe0gNKrqkaN8HVuKHW1ojomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2 NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3NGVhMDY4NGQvY2FlOWU4YTUtMmZlNS0z NTI1LWJlMDAtZDg1ZThiYTZiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA1NjcwN2QtODM4YS00YjhiLWJk OGUtOGE4NzRlYTA2ODRkL2UwNTY3MDdkLTgzOGEtNGI4Yi1iZDhlLThhODc0ZWEw Njg0ZC5jcmwwHwYDVR0jBBgwFoAUIXMnzKdXCq+bU/ZHofTuozYyHHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3 NGVhMDY4NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC0BN4ng/CIiph6try6056iVhjlHQeLCepL5U+lS5R3F3E2MJ7Dx9x7 JbijQtPv+hDVCMFtG3rF2tT2s76/YNMIFcORg3v41LWV2hS1ChXit7ggnCCBiLEN CJg3UwmeZLYKsNHJwMMFXDWKMs0D5pthb72QycWEkZK5HgzLAkJdjFYBXJWVOw8E KbCNXD2uMteVwPNO3jzN7qkdWUuWpj4PpHbdOQftrQElFB27MA6D8zf5TpLxyh3C e/JN+lDs/EFGMujD2B1iBBriSAHlsc1UlxJJkJKB4I7RbEYTadIToglPGGfF2dHk 3JMwqJfQdXBSWNpOkjjEdXbc/X0W4jk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:46 2025 by rpki-client