$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa File: 39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa (raw, json) Hash identifier: 25DyQHeEvmZ4tV5vxoD7+3CRwIG76rGWHVWRCFaqiDs= Subject key identifier: 2B:2E:10:38:EB:33:46:10:89:9C:72:9C:4C:DB:45:FD:1B:0C:AC:DB Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B583C8EAEE53B4B2B8DA86380 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 198.160.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:ae:e5:3b:4b:2b:8d:a8:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=d94b5a47-d0ff-48ef-9645-b5157dccf5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:d1:f7:bb:25:b6:2d:14:4a:cb:9a:24:21: 71:d1:c4:ad:58:a0:3c:25:47:e2:7c:cc:be:9b:8d: d4:ac:52:ce:7d:56:e3:98:fd:0e:cd:cc:5b:4a:3e: 38:72:ab:98:3c:05:e9:64:d4:65:b7:79:c9:a6:94: d4:ad:16:20:af:f3:2b:33:8d:59:33:fb:1b:ae:a0: 52:d0:7d:c9:f6:35:71:f9:92:32:41:b3:79:eb:03: f1:f6:35:8c:36:af:8c:69:24:72:b5:74:09:8d:e2: 7a:11:c7:83:ca:1b:f3:c4:5a:b0:0a:a6:c9:5e:80: 39:7d:8d:8a:44:ee:f8:60:10:21:69:fd:c0:a4:c2: a0:bb:7a:f0:e3:ba:da:65:7b:ff:bd:81:d4:b9:60: 21:89:0b:23:a1:59:4f:e9:3d:0a:e3:b1:7e:79:d7: 63:b1:04:7a:a5:f1:4c:63:ae:54:ad:c2:c7:e6:5a: d6:1f:a3:99:ca:99:20:39:cd:20:11:18:e8:11:88: af:2e:4c:dc:2e:b5:34:80:f6:c2:02:4d:ce:9c:72: 0e:e2:13:76:fb:b2:11:80:97:1c:c4:c8:1b:d5:c2: 76:8e:72:06:b4:34:e8:b4:55:df:88:9e:88:5a:b2: 62:8f:b1:eb:68:c7:0e:84:44:47:7e:3e:de:15:4a: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2E:10:38:EB:33:46:10:89:9C:72:9C:4C:DB:45:FD:1B:0C:AC:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.160.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3b:12:e9:ad:45:66:ec:71:3b:fe:0f:dd:e6:a2:c0:d3:d2: 89:cc:bf:d5:12:37:6e:a9:97:bd:b0:22:47:64:a9:34:29:1d: f0:06:ca:8c:8b:9e:9e:94:68:67:b5:c8:db:17:d8:b4:d9:69: 3d:fc:44:b6:96:2e:69:38:d2:3a:66:29:3c:57:88:47:22:73: ff:94:75:d8:69:95:9d:6c:f4:f5:1d:dc:eb:8d:54:1c:4d:7a: 4b:d7:2e:2d:ee:42:58:5a:eb:7c:59:c9:95:67:4b:ec:a7:58: c9:e5:81:54:e3:1b:c7:52:1f:5b:4a:8a:9a:4a:fb:33:ab:84: b2:b7:63:0e:15:1d:ed:38:8d:17:92:89:1d:a2:94:bc:83:65: 84:13:2d:8a:56:4c:0f:f6:2e:c8:9d:1c:1b:d8:8e:1c:a9:1c: 72:9a:80:c0:e8:71:89:b6:3e:c1:cb:68:df:c9:2a:48:73:e1: 98:4d:44:8d:d9:5f:75:3c:9e:92:ec:a6:b7:ff:a6:5f:4f:dd: fb:da:ba:92:65:e8:91:6f:12:7e:4c:42:33:f9:4e:ca:c9:c4: a2:d0:de:f7:e7:09:d0:9d:8e:aa:32:3d:fa:0d:a1:b2:57:d9: ee:7c:77:00:41:f2:2c:a3:ed:2c:fc:51:fc:4d:89:1b:43:4b: 7e:3d:e2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI6u5TtLK42oY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDk0YjVhNDctZDBmZi00OGVmLTk2NDUtYjUxNTdkY2NmNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4nR97slti0USsuaJCFx0cStWKA8JUfifMy+ m43UrFLOfVbjmP0OzcxbSj44cquYPAXpZNRlt3nJppTUrRYgr/MrM41ZM/sbrqBS 0H3J9jVx+ZIyQbN56wPx9jWMNq+MaSRytXQJjeJ6EceDyhvzxFqwCqbJXoA5fY2K RO74YBAhaf3ApMKgu3rw47raZXv/vYHUuWAhiQsjoVlP6T0K47F+eddjsQR6pfFM Y65UrcLH5lrWH6OZypkgOc0gERjoEYivLkzcLrU0gPbCAk3OnHIO4hN2+7IRgJcc xMgb1cJ2jnIGtDTotFXfiJ6IWrJij7HraMcOhERHfj7eFUpkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsuEDjrM0YQiZxynEzbRf0bDKzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzliMjM0NmQtMTI0Zi0z NzNhLWE5YTMtNDFhM2FjMWUzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ7EumtRWbscTv+D93mosDT0onMv9USN26pl72wIkdkqTQpHfAGyoyL np6UaGe1yNsX2LTZaT38RLaWLmk40jpmKTxXiEcic/+UddhplZ1s9PUd3OuNVBxN ekvXLi3uQlha63xZyZVnS+ynWMnlgVTjG8dSH1tKippK+zOrhLK3Yw4VHe04jReS iR2ilLyDZYQTLYpWTA/2LsidHBvYjhypHHKagMDocYm2PsHLaN/JKkhz4ZhNRI3Z X3U8npLsprf/pl9P3fvaupJl6JFvEn5MQjP5TsrJxKLQ3vfnCdCdjqoyPfoNobJX 2e58dwBB8iyj7Sz8UfxNiRtDS3494oc= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:46 2025 by rpki-client