$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa File: a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa (raw, json) Hash identifier: cFHk/RXHVNkBr9xBtmpQcSX9x5sDX2T/dEKC2uFNY9k= Subject key identifier: 4B:B1:2A:AC:14:C6:9F:53:D9:93:7A:E9:9F:C0:D0:0D:8B:70:5D:70 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B41E7163D48002FD60A5A1CC0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 65.39.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:16:3d:48:00:2f:d6:0a:5a:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0f79b825-abe8-4973-be5a-3d0c39a3a745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:e3:67:8d:1a:f5:0b:31:7f:5b:f0:a4:91: 32:05:7c:72:5f:54:8d:da:60:0b:14:d4:d7:08:08: d9:8d:f6:f3:ac:57:0b:e7:0f:af:0a:82:f0:68:ff: 41:41:d5:1d:79:66:2b:24:f5:dd:b9:29:82:36:d0: 0c:52:0c:f6:2b:06:a2:6e:45:da:e4:50:8c:83:2e: f3:d6:b6:f0:24:6f:4c:3c:69:4f:34:c7:6f:64:66: 62:f7:89:26:b3:b8:98:d0:8f:05:0c:fb:f7:4d:71: ce:2a:72:b9:89:fa:5c:58:1a:a6:b5:37:72:3b:cf: c6:7b:ef:a8:0f:1f:42:1d:2c:0d:99:80:66:8e:27: 43:74:57:ae:de:5b:1e:f7:5e:c6:11:2c:bc:59:d0: 1d:b4:fc:d1:af:ad:c5:e6:be:15:7f:06:29:58:46: f0:83:3b:fb:7b:1b:5b:a7:b8:5c:46:50:2a:12:b6: 62:5e:be:d7:30:c3:d5:ef:29:ad:88:c3:bc:bf:08: 65:58:13:fa:5a:57:14:83:df:7c:73:72:33:9b:ff: 3b:3b:35:03:ac:5c:f1:1e:60:63:27:0e:d4:00:3a: c3:7b:d5:85:13:96:4e:b3:ea:71:3d:53:19:ae:8c: 2a:f1:37:89:b7:b9:d5:9f:0c:2d:8e:15:60:ab:11: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B1:2A:AC:14:C6:9F:53:D9:93:7A:E9:9F:C0:D0:0D:8B:70:5D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:eb:0a:c4:38:f4:16:ca:c7:a9:6e:7d:6e:f7:53:eb:e8:80: 30:c5:b5:cc:42:15:39:19:f5:09:04:aa:e8:77:f7:e7:3d:d0: ed:c8:eb:95:47:21:e4:82:3f:f6:84:e1:d5:6e:ef:ae:9c:f3: a7:2f:85:31:4b:b6:00:af:2c:78:ac:fe:07:84:78:29:20:d3: 21:8a:99:03:48:13:6d:84:87:61:56:2f:db:73:6b:a5:d2:38: 5e:a5:81:31:7b:74:8c:64:9f:c6:53:14:53:9e:65:f7:c4:00: ea:6b:e3:2d:df:c0:88:ec:ef:94:94:73:91:b8:30:22:97:93: c1:15:57:ec:ef:e1:9a:67:20:de:cf:98:a0:49:bc:0e:60:34: 88:0d:1e:57:5a:27:25:3a:23:77:e0:63:3f:e1:cc:24:ec:46: ab:b3:23:dd:f7:8a:72:b7:eb:98:56:0a:72:bc:53:19:b0:db: 3e:ac:20:f3:0e:4e:ee:e3:ca:25:6e:5f:25:cb:66:2d:65:4e: 84:90:20:56:bd:71:34:1d:b2:c1:4e:d2:3a:05:5c:1f:b4:ba: 1b:b0:2e:c6:5c:9c:5e:83:b2:0f:45:0a:7a:83:6c:ef:9a:bc: 30:5b:6c:cf:89:50:f9:a2:54:81:2f:a5:a2:e5:70:e1:22:ad: 45:e5:d3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xY9SAAv1gpaHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MGY3OWI4MjUtYWJlOC00OTczLWJlNWEtM2QwYzM5YTNhNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipLjZ40a9Qsxf1vwpJEyBXxyX1SN2mALFNTX CAjZjfbzrFcL5w+vCoLwaP9BQdUdeWYrJPXduSmCNtAMUgz2KwaibkXa5FCMgy7z 1rbwJG9MPGlPNMdvZGZi94kms7iY0I8FDPv3TXHOKnK5ifpcWBqmtTdyO8/Ge++o Dx9CHSwNmYBmjidDdFeu3lse917GESy8WdAdtPzRr63F5r4VfwYpWEbwgzv7extb p7hcRlAqErZiXr7XMMPV7ymtiMO8vwhlWBP6WlcUg998c3Izm/87OzUDrFzxHmBj Jw7UADrDe9WFE5ZOs+pxPVMZrowq8TeJt7nVnwwtjhVgqxEWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuxKqwUxp9T2ZN66Z/A0A2LcF1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYTYxNzRkZDktYzg5YS0z NjdmLWEyYzUtOTZmOTM0NGU1MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQSeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvrCsQ49BbKx6lufW73U+vogDDFtcxCFTkZ9QkEquh39+c90O3I65VH IeSCP/aE4dVu766c86cvhTFLtgCvLHis/geEeCkg0yGKmQNIE22Eh2FWL9tza6XS OF6lgTF7dIxkn8ZTFFOeZffEAOpr4y3fwIjs75SUc5G4MCKXk8EVV+zv4ZpnIN7P mKBJvA5gNIgNHldaJyU6I3fgYz/hzCTsRquzI933inK365hWCnK8Uxmw2z6sIPMO Tu7jyiVuXyXLZi1lToSQIFa9cTQdssFO0joFXB+0uhuwLsZcnF6Dsg9FCnqDbO+a vDBbbM+JUPmiVIEvpaLlcOEirUXl09A= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:19 2025 by rpki-client