$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa File: 4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa (raw, json) Hash identifier: vjqeWvTy2yolMZRjA8Sg7GGu9rv/Uve5MYndfw0l5YM= Subject key identifier: 6F:59:F1:A3:CE:9E:23:DF:B3:71:D0:66:0E:E2:AF:47:CB:D9:FA:91 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B36BC4AD9B473B72319E0BC00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 65.39.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4a:d9:b4:73:b7:23:19:e0:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=41a2fa48-a383-4963-a9f1-333ebf42be14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:b0:3d:de:29:0e:28:e2:d8:72:db:b6:e1: c4:c2:88:82:56:04:d6:08:29:5d:5d:bd:75:d6:2f: 8b:2e:56:2c:5a:28:3f:72:33:f8:66:f1:95:21:a4: 8f:7b:92:08:70:4b:aa:7a:04:53:e6:fd:ba:3b:29: 65:5f:2e:f3:cf:8b:d8:2d:2f:6d:78:0c:d6:5b:61: ad:13:61:07:14:81:78:a1:a5:d8:48:8a:69:a5:9e: 01:65:f4:97:45:92:94:41:ba:c8:53:b2:98:6d:7e: 34:50:46:56:ae:8a:20:07:92:e2:a1:51:a0:11:46: 6e:87:9a:79:ed:b3:23:a0:6b:35:ab:3f:ff:09:f9: 0e:ad:66:61:38:2c:57:e9:1e:41:65:c3:35:5d:85: bd:c7:9d:d2:6a:86:ea:82:41:3e:ce:a8:67:3c:ae: a9:de:91:39:90:c7:03:88:8d:1f:1e:d0:42:8a:b6: bb:da:44:dd:b6:b0:49:3b:78:e6:89:e6:d6:08:86: 65:bf:a5:1b:c2:82:5f:cf:da:41:cd:ec:40:13:b6: b6:85:db:9f:e6:b1:29:0d:f8:27:c1:38:d2:ac:bf: 38:f3:8d:12:67:f6:76:d7:78:04:c1:d6:2c:1f:00: d2:69:13:e0:ac:86:41:8f:03:69:67:99:ec:ad:76: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:F1:A3:CE:9E:23:DF:B3:71:D0:66:0E:E2:AF:47:CB:D9:FA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e3:5f:3e:d3:73:c4:e6:cc:da:1b:14:05:d0:6c:56:55:91: 36:5c:7a:1e:06:a9:78:a5:41:53:4c:c6:41:fc:8b:24:57:f4: f1:30:d5:f0:e8:78:d8:35:7e:1d:1e:ae:6e:9f:ca:81:b6:29: 19:95:cb:7a:16:0e:41:ac:67:cf:5a:34:e2:db:e6:87:2c:fc: 78:b8:b0:35:91:7a:ab:d9:90:1d:c8:92:c0:7e:79:5e:57:80: 25:09:67:72:69:5f:23:78:2a:da:42:a0:7b:20:85:bf:ab:24: a6:f3:44:e4:27:5b:a3:89:26:1e:ae:09:73:39:c4:59:be:16: fb:ce:75:66:e4:e7:67:73:41:7f:59:ed:46:e5:12:a9:3d:da: d1:c3:2e:b0:ee:3c:d9:c9:3f:0c:0a:13:ba:20:ff:0f:6e:2b: 90:5d:23:64:74:41:b1:38:cd:c5:b5:0a:63:a2:28:f5:e0:cc: 5a:5e:2b:52:13:d2:75:c3:59:3b:eb:e7:f4:dc:8b:72:1d:d0: 16:c8:77:96:c5:92:00:0a:7c:e6:a5:98:7b:d1:30:40:04:c0: 3b:6e:cb:9c:b0:5d:3b:e8:71:5a:b4:94:88:07:01:5e:b1:8f: 62:a8:77:fa:9d:f0:5f:52:2e:70:64:2d:36:93:03:8b:66:06: fd:fc:70:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vErZtHO3IxngvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NDFhMmZhNDgtYTM4My00OTYzLWE5ZjEtMzMzZWJmNDJiZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWqwPd4pDiji2HLbtuHEwoiCVgTWCCldXb11 1i+LLlYsWig/cjP4ZvGVIaSPe5IIcEuqegRT5v26OyllXy7zz4vYLS9teAzWW2Gt E2EHFIF4oaXYSIpppZ4BZfSXRZKUQbrIU7KYbX40UEZWroogB5LioVGgEUZuh5p5 7bMjoGs1qz//CfkOrWZhOCxX6R5BZcM1XYW9x53SaobqgkE+zqhnPK6p3pE5kMcD iI0fHtBCira72kTdtrBJO3jmiebWCIZlv6UbwoJfz9pBzexAE7a2hduf5rEpDfgn wTjSrL84840SZ/Z213gEwdYsHwDSaRPgrIZBjwNpZ5nsrXYfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9Z8aPOniPfs3HQZg7ir0fL2fqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNGIxNTNkMTktMmI1Mi0z N2NjLWI0MjMtY2E1YWZjMWU4ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzjXz7Tc8TmzNobFAXQbFZVkTZceh4GqXilQVNMxkH8iyRX9PEw1fDo eNg1fh0erm6fyoG2KRmVy3oWDkGsZ89aNOLb5ocs/Hi4sDWReqvZkB3IksB+eV5X gCUJZ3JpXyN4KtpCoHsghb+rJKbzROQnW6OJJh6uCXM5xFm+FvvOdWbk52dzQX9Z 7UblEqk92tHDLrDuPNnJPwwKE7og/w9uK5BdI2R0QbE4zcW1CmOiKPXgzFpeK1IT 0nXDWTvr5/Tci3Id0BbId5bFkgAKfOalmHvRMEAEwDtuy5ywXTvocVq0lIgHAV6x j2Kod/qd8F9SLnBkLTaTA4tmBv38cFE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:58 2025 by rpki-client