$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa File: cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa (raw, json) Hash identifier: ufirSoODPaV8Eo7ZFvM/bY6Js7XXhmbvP35jjVOsmNE= Subject key identifier: CB:EE:0D:E8:E0:04:A4:32:4A:3E:1D:A9:DD:D7:16:3B:1A:3B:70:D3 Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Certificate serial: 010D0C9F4328584B0B76B752CF7E6FA33CAD6000 Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 44273 IP address blocks: 208.109.139.0/24 maxlen: 24 208.109.140.0/24 maxlen: 24 2603:4:1014::/48 maxlen: 48 2603:4:1015::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b7:52:cf:7e:6f:a3:3c:ad:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ecb4711c-da48-4c15-9453-b8b48ee6ceb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:85:b1:91:ca:61:b4:f4:ad:26:3c:63:94: 45:20:24:12:75:86:43:18:1c:aa:0c:7d:a0:66:79: 6f:cf:62:bc:53:5b:59:7c:e6:4c:96:d9:f0:29:f3: ea:73:64:f1:f7:3b:5e:8d:92:49:f7:21:dd:13:56: dc:50:61:43:37:bd:2f:e1:86:37:33:2d:00:a7:7e: 46:bf:71:a1:50:48:12:d8:d8:59:80:18:55:6f:26: 2e:bf:1c:5b:f8:88:06:bd:6d:84:e8:d6:ad:c1:58: 87:b0:56:fa:ef:62:05:2b:5b:5f:6d:2e:7c:96:a1: a3:f5:43:cb:b0:3b:a5:78:e6:97:f9:3a:a8:fa:b5: 55:63:31:8d:d9:1a:5f:2f:9b:69:35:04:27:98:89: 70:ca:17:c0:ee:77:47:37:c5:92:ac:3d:ff:c4:64: 0a:7e:7e:60:cb:22:ce:bc:51:d5:40:90:32:81:a0: dd:0d:5f:f3:d9:cf:53:b0:ed:f5:8f:a6:03:c7:84: e6:e1:bc:de:da:ff:0d:2a:10:a7:c3:e5:9c:45:3f: dc:d1:b2:0f:2c:ee:03:d8:f4:3e:48:b6:51:ae:b7: 15:c1:2c:75:55:4b:1d:9b:c4:81:b5:13:27:d2:30: 14:fb:4a:ff:c6:06:a5:f6:e3:38:10:3b:0b:66:1a: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:0D:E8:E0:04:A4:32:4A:3E:1D:A9:DD:D7:16:3B:1A:3B:70:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl X509v3 Authority Key Identifier: keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer sbgp-ipAddrBlock: critical IPv4: 208.109.139.0-208.109.140.255 IPv6: 2603:4:1014::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c0:71:34:b9:05:af:8c:3d:79:9f:20:16:c8:ae:ba:a9:a0: 18:c0:51:d8:9d:b4:55:a3:2f:ed:df:02:86:bb:be:41:71:6c: c1:30:e3:ab:00:32:8a:ad:c9:49:ea:ad:04:a8:34:48:fa:74: 50:0f:8c:76:da:d3:5a:09:62:06:43:eb:6e:72:d8:99:e6:ba: 3d:5a:75:ff:6e:1a:40:f5:ae:90:d5:b3:2b:7c:cb:9c:7e:5f: 94:93:ba:c3:0a:a9:7c:83:a1:bc:78:62:38:1f:d7:b4:8f:c4: 5d:99:a1:25:c9:ca:2c:29:4c:53:d4:93:c8:3a:ef:e9:29:6f: 15:0e:27:ab:e7:07:f4:6d:10:ee:d4:21:83:6e:46:59:13:c3: c1:aa:cd:1c:af:7f:28:fc:f8:01:7a:29:c1:e1:37:89:e2:14: 9c:84:55:04:ef:49:26:b7:d2:3f:c1:ef:2e:8c:72:f5:40:93: 85:32:14:1f:f3:c2:00:04:b2:33:83:09:70:0f:31:e2:ba:83: 8b:4b:df:98:5d:98:c1:90:48:6e:98:db:60:c9:46:08:52:33: 82:9d:44:82:b8:81:a0:6e:40:21:0a:a8:ec:5d:c4:40:59:23: 17:4c:1e:dc:c1:2d:86:15:56:d4:5a:5a:a8:9f:6f:66:74:d5: e4:94:7b:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsLdrdSz35vozytYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm MTNmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZWNiNDcxMWMtZGE0OC00YzE1LTk0NTMtYjhiNDhlZTZjZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0biFsZHKYbT0rSY8Y5RFICQSdYZDGByqDH2g Znlvz2K8U1tZfOZMltnwKfPqc2Tx9ztejZJJ9yHdE1bcUGFDN70v4YY3My0Ap35G v3GhUEgS2NhZgBhVbyYuvxxb+IgGvW2E6NatwViHsFb672IFK1tfbS58lqGj9UPL sDuleOaX+Tqo+rVVYzGN2RpfL5tpNQQnmIlwyhfA7ndHN8WSrD3/xGQKfn5gyyLO vFHVQJAygaDdDV/z2c9TsO31j6YDx4Tm4bze2v8NKhCnw+WcRT/c0bIPLO4D2PQ+ SLZRrrcVwSx1VUsdm8SBtRMn0jAU+0r/xgal9uM4EDsLZhqJEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMvuDejgBKQySj4dqd3XFjsaO3DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1 Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvY2I3ZDhkZmEtYmEyYS0z NGNjLTgzZjktOWYxNzNlZTcwNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0 ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj ZThjY2YxM2YuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBADQbYsD BADQbYwwDwQCAAIwCQMHASYDAAQQFDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPwHE0uQWvjD15nyAWyK66 qaAYwFHYnbRVoy/t3wKGu75BcWzBMOOrADKKrclJ6q0EqDRI+nRQD4x22tNaCWIG Q+tuctiZ5ro9WnX/bhpA9a6Q1bMrfMucfl+Uk7rDCql8g6G8eGI4H9e0j8RdmaEl ycosKUxT1JPIOu/pKW8VDier5wf0bRDu1CGDbkZZE8PBqs0cr38o/PgBeinB4TeJ 4hSchFUE70kmt9I/we8ujHL1QJOFMhQf88IABLIzgwlwDzHiuoOLS9+YXZjBkEhu mNtgyUYIUjOCnUSCuIGgbkAhCqjsXcRAWSMXTB7cwS2GFVbUWlqon29mdNXklHsv -----END CERTIFICATE-----Generated at Mon Oct 20 05:30:15 2025 by rpki-client