$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa File: 309c3472-4fdd-36c6-9a07-443722d1eabd.roa (raw, json) Hash identifier: u3Uqy9z5ksosNDW5xK+tCoWR0jduwFCKMWU3iIEC+qc= Subject key identifier: EC:6C:5F:C3:61:7C:01:36:4F:CC:87:DF:CD:29:D8:AD:38:77:C0:CC Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584B540C663E49911D52724800C0 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 4213 IP address blocks: 76.8.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:66:3e:49:91:1d:52:72:48:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=7445952b-e216-4a7f-9b3a-4ea7e3188952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:92:7a:b4:a5:07:26:af:ba:98:f8:f8:33: bc:58:fa:64:53:57:28:19:69:a7:54:cf:19:5b:4b: f7:fb:3d:fb:be:56:99:2b:6f:9c:d3:97:cb:4e:e4: 95:bf:de:2a:fd:b4:9a:9f:4e:02:3b:97:5a:f5:ac: 5c:07:90:44:a2:d1:24:ea:88:9b:d4:34:59:c5:d7: 69:73:80:f4:72:4c:23:f7:ae:d6:53:c4:2a:a9:91: 02:63:81:b4:79:10:bd:d3:83:dc:d0:3e:09:2f:22: 88:c4:1b:5d:38:25:a9:ee:f7:c5:17:ff:8a:dc:e0: 83:79:c4:b1:a2:be:d9:45:d3:2d:42:40:a6:1a:62: dd:65:c3:79:e5:00:02:9f:29:bb:6d:67:71:16:47: 6c:48:f6:82:fb:07:01:de:a0:f0:39:24:83:89:60: 67:51:4e:fd:0d:c5:ad:8b:d8:50:55:ca:3e:5d:49: 99:eb:e1:76:f6:99:49:86:99:19:b8:c2:30:b3:ae: d6:e8:66:6d:86:ac:be:d8:02:5a:46:6b:32:2b:59: 3e:64:bd:11:90:32:e7:73:72:8f:d0:50:c3:2a:1f: 46:0a:5c:ab:99:d3:62:2b:28:6c:a6:14:b3:b3:d5: 27:b4:43:2e:de:c1:90:55:07:3d:09:60:14:7c:38: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6C:5F:C3:61:7C:01:36:4F:CC:87:DF:CD:29:D8:AD:38:77:C0:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 76.8.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:52:29:60:83:c4:2b:a7:e3:9f:48:42:1f:75:88:5f:9e:e5: 96:96:a4:e4:c6:06:38:3b:0b:5a:59:86:3c:20:ba:b0:c2:05: be:6b:c2:15:2b:6e:0a:85:74:3b:2f:b6:0d:c8:77:75:c9:6d: 4b:f2:c0:fe:4c:61:63:5d:ad:51:39:f1:14:c3:da:54:3e:33: 51:ab:6a:d1:df:6b:c2:a3:42:ed:38:a5:80:ac:b4:96:a4:78: 8d:b7:5a:08:b7:fa:a1:22:aa:b5:91:6a:42:6c:74:57:a6:e3: 83:c9:b0:7f:61:9b:ef:2a:95:2d:76:b4:fb:03:ff:a6:95:3e: a6:fb:5d:c3:52:7b:1b:42:d1:21:4e:99:6e:25:f6:9f:a2:8a: cd:4d:52:3a:b2:e8:da:42:54:74:be:f2:c9:be:03:dc:42:c8: 25:92:b1:3f:bc:92:12:be:0e:3c:48:33:31:e8:34:93:d8:7c: 9a:2c:62:e7:32:bf:30:3e:57:d3:7c:31:1b:f5:22:4d:2a:11: 51:e3:65:cd:c2:20:4c:79:7a:ae:54:57:59:fd:f5:16:a3:a9: 82:a0:12:dc:2b:3e:4f:ac:ce:b7:9c:99:cf:42:3c:90:f5:d5: f7:f3:12:6a:93:3d:d8:cf:a7:77:c3:e3:1d:f1:8d:ba:df:f6: 07:73:31:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGY+SZEdUnJIAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NzQ0NTk1MmItZTIxNi00YTdmLTliM2EtNGVhN2UzMTg4OTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzySerSlByavupj4+DO8WPpkU1coGWmnVM8Z W0v3+z37vlaZK2+c05fLTuSVv94q/bSan04CO5da9axcB5BEotEk6oib1DRZxddp c4D0ckwj967WU8QqqZECY4G0eRC904Pc0D4JLyKIxBtdOCWp7vfFF/+K3OCDecSx or7ZRdMtQkCmGmLdZcN55QACnym7bWdxFkdsSPaC+wcB3qDwOSSDiWBnUU79DcWt i9hQVco+XUmZ6+F29plJhpkZuMIws67W6GZthqy+2AJaRmsyK1k+ZL0RkDLnc3KP 0FDDKh9GClyrmdNiKyhsphSzs9UntEMu3sGQVQc9CWAUfDhECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxsX8NhfAE2T8yH380p2K04d8DMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMzA5YzM0NzItNGZkZC0z NmM2LTlhMDctNDQzNzIyZDFlYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETAgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhSKWCDxCun459IQh91iF+e5ZaWpOTGBjg7C1pZhjwgurDCBb5rwhUr bgqFdDsvtg3Id3XJbUvywP5MYWNdrVE58RTD2lQ+M1GratHfa8KjQu04pYCstJak eI23Wgi3+qEiqrWRakJsdFem44PJsH9hm+8qlS12tPsD/6aVPqb7XcNSextC0SFO mW4l9p+iis1NUjqy6NpCVHS+8sm+A9xCyCWSsT+8khK+DjxIMzHoNJPYfJosYucy vzA+V9N8MRv1Ik0qEVHjZc3CIEx5eq5UV1n99RajqYKgEtwrPk+szrecmc9CPJD1 1ffzEmqTPdjPp3fD4x3xjbrf9gdzMaw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:24 2025 by rpki-client