$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa File: 2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa (raw, json) Hash identifier: pJDcRRTs9Hwgdx/XHX6CqCHSgwYyOvnMx2xCWRWaHVc= Subject key identifier: A1:0B:E1:01:AD:44:E4:FB:B5:70:B3:9E:EE:F4:E3:87:15:5A:CE:40 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC7538E0AB5CF7E210B9F00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:53:8e:0a:b5:cf:7e:21:0b:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6b2b2730-3334-4815-9f6c-421c1c75f125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:55:d2:1a:58:9f:72:33:2a:33:9b:49:85: 57:e2:b2:c7:9a:ff:02:61:14:16:22:7b:74:e7:41: 8b:b4:44:72:14:a3:74:cf:b8:bd:bd:89:d9:17:d8: 25:27:29:7f:d2:b5:be:40:a9:15:93:35:48:4b:eb: 82:31:11:56:3c:16:09:d5:09:98:f4:bf:ae:d7:55: 13:51:85:a1:5e:8e:7c:ca:68:9a:5a:39:25:37:de: d3:8d:fc:26:28:76:d3:07:52:9d:13:3f:f5:70:00: 61:21:05:11:6a:8a:33:1f:15:d1:2d:3a:a4:de:f8: 65:09:90:b0:3a:3d:ff:8c:6a:b6:b1:90:10:5c:f7: 08:b0:c9:0a:b2:c0:57:84:c8:af:0b:64:12:aa:7c: 45:41:d0:20:f3:0f:99:85:55:b8:e2:5d:4e:2a:a8: 1b:85:1f:d8:c7:95:54:48:dc:5f:4e:4b:36:7b:b5: 95:40:71:5e:36:9d:67:4f:d0:ee:78:ac:69:2f:d6: 86:d8:11:34:61:27:6e:e5:42:f9:97:a7:a9:1b:db: ed:08:ba:36:8c:d1:29:11:a3:9b:54:97:f6:df:eb: 1a:1d:0d:b8:a5:b4:b8:a2:05:73:b2:48:13:70:8d: 25:15:6d:c4:6b:5b:ad:b8:ae:29:f3:83:5e:81:7d: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0B:E1:01:AD:44:E4:FB:B5:70:B3:9E:EE:F4:E3:87:15:5A:CE:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fd:5a:65:b3:f8:4b:d7:86:57:1b:3f:21:56:f7:e6:52:e6: 93:7e:a6:53:1a:ce:7e:ce:9a:c4:6e:b1:18:5c:bd:ad:9d:b6: 55:93:34:37:a3:0b:c7:21:b3:eb:c1:62:20:37:9b:a8:64:c6: 50:c2:e1:a9:d0:fe:c2:df:bc:9f:b2:65:37:d5:e0:b8:8c:c7: 92:a7:7d:85:df:86:00:6d:8f:af:9d:4c:8f:a2:8a:0f:d1:4f: e1:a3:01:24:0a:75:c1:19:54:00:3c:26:a3:f9:69:e6:1b:56: a2:46:44:cf:8a:f9:4a:0f:15:bb:99:e9:89:eb:ba:44:cc:22: 10:34:e7:28:f8:8b:3f:5e:e4:94:ac:30:13:d7:d7:58:59:0c: 38:6a:c9:ad:21:e9:cd:db:5c:d8:19:82:e6:94:b6:1b:19:0a: 4a:69:ac:d4:a4:f9:5e:ba:9c:3c:bc:8f:77:ec:aa:20:72:50: b1:34:15:a4:a4:11:24:23:e9:be:24:04:94:86:63:d3:44:7d: d9:d2:41:11:d0:ce:f1:51:87:7a:5c:cd:3c:c7:43:b8:57:21: ba:f4:35:0c:0d:d3:cb:0d:a2:57:84:e9:d9:21:ec:4f:50:a3: 9d:00:fc:f9:6f:a9:8e:ac:d8:03:af:5f:11:3b:09:35:a9:48: 10:6f:8f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1OOCrXPfiELnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NmIyYjI3MzAtMzMzNC00ODE1LTlmNmMtNDIxYzFjNzVmMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsVV0hpYn3IzKjObSYVX4rLHmv8CYRQWInt0 50GLtERyFKN0z7i9vYnZF9glJyl/0rW+QKkVkzVIS+uCMRFWPBYJ1QmY9L+u11UT UYWhXo58ymiaWjklN97TjfwmKHbTB1KdEz/1cABhIQURaoozHxXRLTqk3vhlCZCw Oj3/jGq2sZAQXPcIsMkKssBXhMivC2QSqnxFQdAg8w+ZhVW44l1OKqgbhR/Yx5VU SNxfTks2e7WVQHFeNp1nT9DueKxpL9aG2BE0YSdu5UL5l6epG9vtCLo2jNEpEaOb VJf23+saHQ24pbS4ogVzskgTcI0lFW3Ea1utuK4p84NegX0h6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEL4QGtROT7tXCznu7044cVWs5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjgxNWUyZmItMDk5NS0z YTJkLTg0YjktODlhOGU3ZWViNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH9WmWz+EvXhlcbPyFW9+ZS5pN+plMazn7OmsRusRhcva2dtlWTNDej C8chs+vBYiA3m6hkxlDC4anQ/sLfvJ+yZTfV4LiMx5KnfYXfhgBtj6+dTI+iig/R T+GjASQKdcEZVAA8JqP5aeYbVqJGRM+K+UoPFbuZ6YnrukTMIhA05yj4iz9e5JSs MBPX11hZDDhqya0h6c3bXNgZguaUthsZCkpprNSk+V66nDy8j3fsqiByULE0FaSk ESQj6b4kBJSGY9NEfdnSQRHQzvFRh3pczTzHQ7hXIbr0NQwN08sNoleE6dkh7E9Q o50A/PlvqY6s2AOvXxE7CTWpSBBvj78= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:09 2025 by rpki-client