$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa File: 5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa (raw, json) Hash identifier: NyTlclyCtQzyuCMi4rXbD3TVYgibIG+76nLxQMFzg3g= Subject key identifier: FC:FA:17:63:9E:7A:E7:98:CA:25:00:FD:60:E8:1E:26:87:09:E5:E6 Certificate issuer: /CN=9b1bda0b-196d-4a62-82df-fdb3c9937cac Certificate serial: 010D0C9F4328584B3F1C601608457258A91E0880 Authority key identifier: 0F:83:0B:D8:2D:62:B7:F3:FF:1D:61:1A:6C:5B:9F:79:F0:99:D8:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 396280 IP address blocks: 170.76.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/9b1bda0b-196d-4a62-82df-fdb3c9937cac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/9b1bda0b-196d-4a62-82df-fdb3c9937cac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:60:16:08:45:72:58:a9:1e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b1bda0b-196d-4a62-82df-fdb3c9937cac Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=aaf6e428-224f-43d7-b35c-b645bf4ebd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:50:f3:41:fd:81:7d:8e:9b:88:0f:cc:d6: 7a:e7:fe:0d:6d:24:ef:9f:1c:33:59:02:c3:56:0b: 59:5a:83:aa:2b:bc:3d:77:0a:a4:17:68:59:0b:ad: 1e:4d:c4:ac:50:20:a0:7c:62:56:33:97:61:17:2c: ad:b4:a6:fa:42:75:cd:eb:7a:ed:f5:29:fd:a2:fc: 29:68:7f:b3:4b:7c:55:3e:b0:e4:a8:18:5e:34:46: e8:ee:b2:da:e9:0a:d3:70:b9:ce:29:4a:fd:b5:75: 60:7a:3e:9f:11:e9:b3:2d:86:b2:bd:3d:58:0e:cb: bd:76:a2:58:9c:39:e7:19:cb:23:24:df:72:03:21: bc:4b:65:98:42:37:4e:86:20:d0:45:8e:89:5d:70: 58:53:75:54:0a:9a:c1:b0:1d:dc:88:1b:1c:37:52: 73:d3:94:70:06:21:ff:3b:db:a6:ab:24:ff:4a:68: c5:b8:c8:f3:5f:67:8d:9a:28:41:8a:2c:b5:97:ca: 93:d3:19:1b:31:0a:53:95:2e:95:bf:e6:1f:02:23: 8b:d7:e6:a1:62:1d:4c:94:b8:a5:ac:d5:d1:25:4b: 05:06:11:f1:42:b5:66:b1:1c:fd:ef:91:a2:e9:4b: 16:48:fb:80:cd:6d:65:91:c1:4b:bf:6e:a2:d7:b8: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FA:17:63:9E:7A:E7:98:CA:25:00:FD:60:E8:1E:26:87:09:E5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/9b1bda0b-196d-4a62-82df-fdb3c9937cac.crl X509v3 Authority Key Identifier: keyid:0F:83:0B:D8:2D:62:B7:F3:FF:1D:61:1A:6C:5B:9F:79:F0:99:D8:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac.cer sbgp-ipAddrBlock: critical IPv4: 170.76.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:29:17:59:85:7b:10:92:1e:85:2a:b9:51:67:be:71:1c:57: 94:83:6f:f1:f3:fd:ad:26:e2:f7:15:24:a4:69:0b:a7:14:15: 09:cc:a9:33:ec:17:f1:1b:28:18:e0:72:6c:10:e5:a6:dc:4b: 3c:dc:fc:22:ac:31:a1:50:f5:c5:ca:b8:4b:fe:24:dd:e5:70: fc:07:7a:c4:a3:c9:30:74:b1:23:12:34:cf:96:a7:eb:bd:4d: f8:7a:5a:c9:0b:4a:67:39:33:98:21:80:77:16:fe:ba:c5:06: 0c:df:2e:7b:8f:69:c0:24:2c:df:12:df:41:43:5a:c1:8c:a2: c6:58:89:ca:d0:71:ee:f3:c3:a7:e9:96:ca:51:71:96:81:f0: 28:99:25:dc:76:3e:b5:c4:38:7b:45:61:ff:72:8f:4e:70:e7: 59:78:29:df:63:1c:ba:ba:80:f0:11:80:fe:0d:52:80:77:d1: a3:22:6c:04:47:a3:2f:16:c3:26:bc:b3:20:a7:4b:31:58:5c: ea:8d:b7:74:0a:36:4c:7e:b4:17:cf:17:c1:d1:3f:08:38:72: 33:e9:62:8f:41:3a:33:b2:ca:25:97:e6:81:5c:cc:2e:2e:78: b7:2d:13:b4:77:c0:9a:af:37:76:d2:7b:2e:3e:f7:9b:94:d7: 64:f0:c3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGAWCEVyWKkeCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxYmRhMGItMTk2ZC00YTYyLTgyZGYtZmRiM2M5OTM3 Y2FjMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk YWFmNmU0MjgtMjI0Zi00M2Q3LWIzNWMtYjY0NWJmNGViZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy75Q80H9gX2Om4gPzNZ65/4NbSTvnxwzWQLD VgtZWoOqK7w9dwqkF2hZC60eTcSsUCCgfGJWM5dhFyyttKb6QnXN63rt9Sn9ovwp aH+zS3xVPrDkqBheNEbo7rLa6QrTcLnOKUr9tXVgej6fEemzLYayvT1YDsu9dqJY nDnnGcsjJN9yAyG8S2WYQjdOhiDQRY6JXXBYU3VUCprBsB3ciBscN1Jz05RwBiH/ O9umqyT/SmjFuMjzX2eNmihBiiy1l8qT0xkbMQpTlS6Vv+YfAiOL1+ahYh1MlLil rNXRJUsFBhHxQrVmsRz975Gi6UsWSPuAzW1lkcFLv26i17i25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz6F2OeeueYyiUA/WDoHiaHCeXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YjFi ZGEwYi0xOTZkLTRhNjItODJkZi1mZGIzYzk5MzdjYWMvNTQwNWQwZGEtOTZkMS0z M2EzLWI3MTMtOWNmZThhMWYwY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWIxYmRhMGItMTk2ZC00YTYyLTgy ZGYtZmRiM2M5OTM3Y2FjLzliMWJkYTBiLTE5NmQtNGE2Mi04MmRmLWZkYjNjOTkz N2NhYy5jcmwwHwYDVR0jBBgwFoAUD4ML2C1it/P/HWEabFufefCZ2CMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YjFiZGEwYi0xOTZkLTRhNjItODJkZi1mZGIz Yzk5MzdjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIpF1mFexCSHoUquVFnvnEcV5SDb/Hz/a0m4vcVJKRpC6cUFQnMqTPs F/EbKBjgcmwQ5abcSzzc/CKsMaFQ9cXKuEv+JN3lcPwHesSjyTB0sSMSNM+Wp+u9 Tfh6WskLSmc5M5ghgHcW/rrFBgzfLnuPacAkLN8S30FDWsGMosZYicrQce7zw6fp lspRcZaB8CiZJdx2PrXEOHtFYf9yj05w51l4Kd9jHLq6gPARgP4NUoB30aMibARH oy8Wwya8syCnSzFYXOqNt3QKNkx+tBfPF8HRPwg4cjPpYo9BOjOyyiWX5oFczC4u eLctE7R3wJqvN3bSey4+95uU12Tww/0= -----END CERTIFICATE-----Generated at Wed Oct 22 02:46:51 2025 by rpki-client