$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa File: 378569c9-d696-3fef-8aac-cd7b7915a9fd.roa (raw, json) Hash identifier: qUEcEjFtqUpkNOOIaunHWQxWh9xmxqTYzyqn2BzZi9k= Subject key identifier: 5B:0B:BB:A1:94:0F:2D:56:4F:C2:EB:EB:B5:82:A7:8A:0E:42:31:26 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5DD1F25CD9D53BECFD77EDC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11090 IP address blocks: 216.152.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f2:5c:d9:d5:3b:ec:fd:77:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=4ea35112-a89c-4f60-a4b9-46522bb4f6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:65:5f:03:91:51:d8:66:8b:73:fb:60:d4: c4:bd:ad:d9:e7:74:24:06:0f:e1:6e:d1:0c:3c:38: 95:15:51:b2:ab:97:68:9f:a5:a1:97:9b:97:74:11: 98:a9:8e:ae:0d:11:a8:14:9a:c7:b5:fc:82:f4:c3: fc:31:b6:cd:63:37:04:18:d6:19:61:62:ce:fa:fd: 61:73:06:a9:3a:f6:d0:cf:3e:80:f1:f1:76:24:9b: 7f:99:75:44:d3:10:8a:84:d9:6b:9e:36:49:23:15: c4:18:8c:7a:12:77:3f:41:5f:bc:5e:37:6d:66:2a: ed:be:cb:99:f9:23:f7:1e:b2:c4:4e:90:73:f1:33: e3:7c:78:13:c7:e5:f3:ee:fd:0b:9b:3f:c4:40:82: 31:09:b4:fa:1b:fd:4e:fc:d0:52:b2:64:03:0f:f6: f6:47:69:67:af:a0:dc:9d:65:0f:63:ed:d3:bb:7f: 02:b0:d5:66:9e:6e:20:5f:fd:c8:d2:36:d0:25:a8: 7f:bb:44:50:d0:7c:f4:ce:9c:dd:78:a2:28:a9:a2: 49:10:69:d9:3e:6b:e8:7b:49:c8:05:1a:63:d9:8e: ec:20:2d:f9:be:c3:1f:12:ae:fe:ee:a3:0e:ac:1f: 86:3d:01:18:57:2d:53:23:c7:33:32:6a:e9:bb:ee: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:BB:A1:94:0F:2D:56:4F:C2:EB:EB:B5:82:A7:8A:0E:42:31:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:68:3e:84:12:fe:38:40:4d:a0:dd:c4:0c:46:2f:4e:94:0e: 6a:22:5c:92:30:74:ac:79:ea:54:aa:35:b7:0c:c7:57:61:50: e1:36:2c:96:07:79:c8:df:de:d3:07:96:b9:30:fe:c5:65:17: 31:36:f1:ce:6b:40:0d:c9:c6:0e:00:74:59:4c:5b:63:cf:e5: e9:7a:ee:e5:01:77:14:eb:06:4c:20:97:e7:4a:9f:26:71:db: 70:87:e7:3f:10:f6:c6:10:5c:a4:a5:a7:75:75:65:e1:bc:e4: 71:f8:c8:49:45:62:cc:46:3b:5a:cf:27:d1:22:86:fb:3b:ed: 21:26:e7:a7:98:d3:73:f3:8f:e3:a9:42:d0:0f:0d:9a:af:3d: 6c:b8:aa:f3:21:90:c7:6a:04:63:b7:24:78:2e:0f:7b:54:23: 26:52:71:d3:a3:57:5d:fd:17:5b:e1:6c:3a:84:45:6d:b4:be: 24:ed:78:19:1b:02:6a:00:1f:cc:d3:fe:63:3e:c3:9a:30:fb: 4c:ee:7d:84:38:81:b5:ef:ac:fa:88:2f:42:29:b1:cf:00:87: 7e:5a:8e:ba:68:a8:48:6b:6e:92:69:81:d5:9b:31:65:5f:9d: 4b:72:6f:24:41:67:63:52:0c:c2:73:c5:ff:b1:27:69:a0:bd: 4c:1f:84:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fJc2dU77P137cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NGVhMzUxMTItYTg5Yy00ZjYwLWE0YjktNDY1MjJiYjRmNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJplXwORUdhmi3P7YNTEva3Z53QkBg/hbtEM PDiVFVGyq5don6Whl5uXdBGYqY6uDRGoFJrHtfyC9MP8MbbNYzcEGNYZYWLO+v1h cwapOvbQzz6A8fF2JJt/mXVE0xCKhNlrnjZJIxXEGIx6Enc/QV+8XjdtZirtvsuZ +SP3HrLETpBz8TPjfHgTx+Xz7v0Lmz/EQIIxCbT6G/1O/NBSsmQDD/b2R2lnr6Dc nWUPY+3Tu38CsNVmnm4gX/3I0jbQJah/u0RQ0Hz0zpzdeKIoqaJJEGnZPmvoe0nI BRpj2Y7sIC35vsMfEq7+7qMOrB+GPQEYVy1TI8czMmrpu+4lxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsLu6GUDy1WT8Lr67WCp4oOQjEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzc4NTY5YzktZDY5Ni0z ZmVmLThhYWMtY2Q3Yjc5MTVhOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJoPoQS/jhATaDdxAxGL06UDmoiXJIwdKx56lSqNbcMx1dhUOE2LJYH ecjf3tMHlrkw/sVlFzE28c5rQA3Jxg4AdFlMW2PP5el67uUBdxTrBkwgl+dKnyZx 23CH5z8Q9sYQXKSlp3V1ZeG85HH4yElFYsxGO1rPJ9Eihvs77SEm56eY03Pzj+Op QtAPDZqvPWy4qvMhkMdqBGO3JHguD3tUIyZScdOjV139F1vhbDqERW20viTteBkb AmoAH8zT/mM+w5ow+0zufYQ4gbXvrPqIL0Ipsc8Ah35ajrpoqEhrbpJpgdWbMWVf nUtybyRBZ2NSDMJzxf+xJ2mgvUwfhLU= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:19 2025 by rpki-client