$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa File: 211726d9-186c-32fa-9269-934166f8a1be.roa (raw, json) Hash identifier: EFeya5w0SMgCN4ts5Q5iVxlWwdxBc6ltK/Es1hiD540= Subject key identifier: E2:85:D8:B2:8B:E6:E2:14:38:3E:9A:1A:77:91:AF:CE:6E:03:E5:E5 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC75BCE9520892196FE3000 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 216.137.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5b:ce:95:20:89:21:96:fe:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=282e67d9-6080-4c88-a1d5-fc71786f20e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:f2:d4:60:0f:19:c8:75:43:c4:cf:1f:ec: 4a:cc:04:1a:e7:31:5e:ad:66:8b:84:13:49:c7:91: 92:58:5d:2a:d7:13:3c:87:fd:3b:0c:b8:a9:42:83: 45:7c:aa:89:a7:52:68:67:1c:f5:4a:13:cb:59:8a: 52:66:7d:5d:39:68:6a:e8:82:f6:22:bf:77:4e:ee: 67:6c:15:65:a8:85:02:e6:f1:0f:2a:92:c9:3b:34: 46:e0:6d:18:b0:c7:71:e8:0f:9b:56:4e:f1:54:52: 8b:d6:24:e6:cb:ef:ca:8c:00:47:86:0b:ca:35:dd: 9f:af:a2:3d:bf:c4:32:0e:fa:9d:e4:e1:6e:d1:63: f1:da:4d:0c:24:af:61:10:3f:42:b9:4c:25:21:b6: ca:7d:56:95:46:14:31:49:ba:32:b0:ed:e5:98:ef: 81:03:b9:76:1d:3d:61:cb:29:34:92:02:b1:66:a8: 65:6c:41:e5:e8:f6:ac:1b:48:eb:d6:de:35:9a:91: 80:f4:14:96:71:47:b8:da:9f:e1:70:0b:59:2a:16: 02:01:d2:69:6c:85:d6:17:73:73:ba:58:0c:d0:5c: c7:51:ed:63:1b:74:0c:a4:02:73:ff:31:52:38:d1: d5:ee:82:b5:e1:b9:4b:c0:b4:c3:52:0f:e9:f1:9c: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:D8:B2:8B:E6:E2:14:38:3E:9A:1A:77:91:AF:CE:6E:03:E5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d3:e0:87:8c:7c:01:5c:20:a5:b2:ab:2f:51:6b:d4:15:2b: be:a7:82:e1:33:0f:64:a0:7d:17:a6:72:89:93:45:8d:7a:a1: 70:ad:7d:fc:1d:1c:18:33:41:ec:e8:46:a8:08:7c:0f:0d:26: 53:91:22:c6:f8:fa:1e:ec:a4:c7:52:94:85:03:38:63:80:2e: e2:0c:52:11:fe:db:d7:41:3b:f8:4a:b1:2b:85:3c:ec:d6:5d: e8:de:56:28:a2:71:d0:b8:c2:17:4f:dc:76:7a:9c:9d:db:00: ba:a8:4d:12:9d:b1:b5:8b:6a:85:ae:56:76:80:3a:c7:88:dc: 98:48:cd:8e:16:91:77:7e:96:ed:4c:8d:d0:98:ac:62:85:6d: 2e:9f:88:eb:c8:68:4d:ae:66:27:b5:7a:63:0c:3c:6b:b2:5f: 7f:7f:89:9d:6c:e7:47:2b:16:37:9a:8d:8b:10:cb:d7:fd:b5: 34:87:9d:21:5a:3c:96:02:86:fd:3f:28:1e:9d:30:54:da:0c: c4:1a:d4:b0:39:08:1a:66:6a:bd:60:a3:99:2c:4a:96:1c:38: de:ce:5b:47:ed:bc:d9:b9:6c:0f:99:62:da:c4:50:2b:f0:2f: 1b:c1:1f:54:e3:49:fd:12:fc:ac:eb:f5:83:25:ea:e7:6a:bb: 4d:10:fa:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1vOlSCJIZb+MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjgyZTY3ZDktNjA4MC00Yzg4LWExZDUtZmM3MTc4NmYyMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSjy1GAPGch1Q8TPH+xKzAQa5zFerWaLhBNJ x5GSWF0q1xM8h/07DLipQoNFfKqJp1JoZxz1ShPLWYpSZn1dOWhq6IL2Ir93Tu5n bBVlqIUC5vEPKpLJOzRG4G0YsMdx6A+bVk7xVFKL1iTmy+/KjABHhgvKNd2fr6I9 v8QyDvqd5OFu0WPx2k0MJK9hED9CuUwlIbbKfVaVRhQxSboysO3lmO+BA7l2HT1h yyk0kgKxZqhlbEHl6PasG0jr1t41mpGA9BSWcUe42p/hcAtZKhYCAdJpbIXWF3Nz ulgM0FzHUe1jG3QMpAJz/zFSONHV7oK14blLwLTDUg/p8ZwfzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKF2LKL5uIUOD6aGneRr85uA+XlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjExNzI2ZDktMTg2Yy0z MmZhLTkyNjktOTM0MTY2ZjhhMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLT4IeMfAFcIKWyqy9Ra9QVK76nguEzD2SgfRemcomTRY16oXCtffwd HBgzQezoRqgIfA8NJlORIsb4+h7spMdSlIUDOGOALuIMUhH+29dBO/hKsSuFPOzW XejeViiicdC4whdP3HZ6nJ3bALqoTRKdsbWLaoWuVnaAOseI3JhIzY4WkXd+lu1M jdCYrGKFbS6fiOvIaE2uZie1emMMPGuyX39/iZ1s50crFjeajYsQy9f9tTSHnSFa PJYChv0/KB6dMFTaDMQa1LA5CBpmar1go5ksSpYcON7OW0ftvNm5bA+ZYtrEUCvw LxvBH1TjSf0S/Kzr9YMl6udqu00Q+iI= -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:09 2025 by rpki-client