$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ad32cf5c-d6cb-3a07-9d6e-fe68b6d0eef9.roa File: ad32cf5c-d6cb-3a07-9d6e-fe68b6d0eef9.roa (raw, json) Hash identifier: 9kCKqBxRw2711aKHIJqXMV/ylQs/dhGYKS4pbd6kdM8= Subject key identifier: BF:34:01:81:64:AE:09:D8:C9:87:E2:85:5B:F3:46:20:39:D1:BB:29 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584B25FC3573FEF668ED55916C80 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ad32cf5c-d6cb-3a07-9d6e-fe68b6d0eef9.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 6181 IP address blocks: 208.102.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:35:73:fe:f6:68:ed:55:91:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=3dd03a3f-a49e-4b14-8b91-6f280f2a0e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:95:93:17:37:d5:c7:8b:de:df:a7:c4:09: 3c:ad:86:62:57:9c:87:43:34:d5:ca:07:ba:99:5c: b9:54:2f:c2:1c:fe:6b:48:fb:83:62:d4:c5:fb:a0: a1:3f:5d:23:f4:a6:8b:f1:09:c0:98:89:29:ad:fd: 5d:9a:77:6b:f5:e7:84:07:da:52:bc:e6:b5:bd:5f: 7d:3b:bf:b6:53:84:52:68:d5:ed:17:fd:f4:c1:21: c3:e7:bd:d9:0c:62:99:1a:ae:50:b0:17:ea:1d:02: 3a:62:8c:67:32:66:91:1b:12:ce:c0:28:3d:9e:06: 37:9a:4a:25:d3:9e:b0:f2:d8:8b:cd:5a:c7:82:8c: b8:57:1a:15:ef:19:9d:ea:84:c3:aa:a7:0d:b6:8b: bd:7c:3e:5c:82:39:3a:43:70:e4:18:9c:ad:3d:7d: 55:c4:0a:e9:95:0f:2f:c5:f9:47:33:64:f4:56:f6: c2:23:f1:8a:c6:a0:3a:8e:1f:da:e7:55:e4:9a:00: ca:19:52:12:b6:16:cb:e8:71:89:8d:d0:03:55:47: 6d:4a:23:20:da:d3:45:77:fe:ba:81:59:94:50:e8: 96:c2:ea:8c:31:96:06:e2:7f:5b:54:cb:17:ee:0f: 03:85:40:32:bd:b9:0a:48:8f:87:14:d7:d5:ca:8e: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:01:81:64:AE:09:D8:C9:87:E2:85:5B:F3:46:20:39:D1:BB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ad32cf5c-d6cb-3a07-9d6e-fe68b6d0eef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 208.102.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a6:5f:53:11:0c:01:2f:37:74:34:07:b5:76:cf:24:8d:e5: 38:ca:f6:e9:4c:84:29:bc:41:26:de:dd:ae:76:a0:92:5d:ee: e7:61:11:fd:fb:5d:ca:59:d1:be:56:f1:cf:fc:51:4c:a8:51: 35:c7:80:36:33:4c:31:9e:58:b8:2d:f2:d1:e5:c8:e1:d2:a7: f6:30:12:5d:3e:1b:56:e4:c8:1d:fc:49:1d:39:c7:da:87:0b: 18:99:29:4b:bc:31:46:2a:7e:2e:1c:ef:0a:38:d7:4c:fd:4f: 85:c9:b4:c2:dd:21:54:b6:01:31:9d:dd:b7:d9:f9:26:d7:e8: 81:b2:f8:38:8f:07:67:f2:f6:de:db:1c:71:ea:9f:86:25:50: b2:e6:8a:1a:9d:9d:0c:23:bc:a6:27:83:fc:0d:44:90:d5:a3: 1e:13:82:b1:f1:16:ba:73:e1:6c:ae:5b:77:5b:32:6f:e3:28: 51:e0:29:9a:44:85:87:08:05:c7:51:6d:64:0e:b1:0c:90:6d: 9a:ab:57:c5:7e:a0:05:2b:49:d7:ac:6e:8f:92:0b:3c:ba:43: 7f:17:77:12:69:b1:d6:dd:2d:2c:99:85:bf:69:09:4d:60:4f: e3:f8:67:0a:7e:6a:cc:6a:1e:59:23:bf:1b:17:a5:43:42:02: 32:a7:a5:9d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsl/DVz/vZo7VWRbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk M2RkMDNhM2YtYTQ5ZS00YjE0LThiOTEtNmYyODBmMmEwZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT+Vkxc31ceL3t+nxAk8rYZiV5yHQzTVyge6 mVy5VC/CHP5rSPuDYtTF+6ChP10j9KaL8QnAmIkprf1dmndr9eeEB9pSvOa1vV99 O7+2U4RSaNXtF/30wSHD573ZDGKZGq5QsBfqHQI6YoxnMmaRGxLOwCg9ngY3mkol 056w8tiLzVrHgoy4VxoV7xmd6oTDqqcNtou9fD5cgjk6Q3DkGJytPX1VxArplQ8v xflHM2T0VvbCI/GKxqA6jh/a51XkmgDKGVISthbL6HGJjdADVUdtSiMg2tNFd/66 gVmUUOiWwuqMMZYG4n9bVMsX7g8DhUAyvbkKSI+HFNfVyo5ZpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL80AYFkrgnYyYfihVvzRiA50bspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvYWQzMmNmNWMtZDZjYi0z YTA3LTlkNmUtZmU2OGI2ZDBlZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0GYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFKZfUxEMAS83dDQHtXbPJI3lOMr26UyEKbxBJt7drnagkl3u52ER/ftd ylnRvlbxz/xRTKhRNceANjNMMZ5YuC3y0eXI4dKn9jASXT4bVuTIHfxJHTnH2ocL GJkpS7wxRip+LhzvCjjXTP1Phcm0wt0hVLYBMZ3dt9n5JtfogbL4OI8HZ/L23tsc ceqfhiVQsuaKGp2dDCO8pieD/A1EkNWjHhOCsfEWunPhbK5bd1syb+MoUeApmkSF hwgFx1FtZA6xDJBtmqtXxX6gBStJ16xuj5ILPLpDfxd3Emmx1t0tLJmFv2kJTWBP 4/hnCn5qzGoeWSO/GxelQ0ICMqelnQ== -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:22 2025 by rpki-client