$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa File: 3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa (raw, json) Hash identifier: 4zjEX9NcdzwGHm1CddDpf0MmG3Ykv99pAR4v4e8auys= Subject key identifier: 1B:8C:8A:E5:CE:30:43:B6:29:E3:B9:2A:3F:11:F2:1F:C1:1A:D7:0E Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5DD1F239A0188D0198BEE580 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11090 IP address blocks: 216.152.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f2:39:a0:18:8d:01:98:be:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=e08cd8d6-30a3-4cdd-a5c1-62fdc49dad50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:04:b5:63:fd:b0:5b:cb:ab:b5:95:02:e7: c6:fd:0b:5d:11:1e:26:95:15:28:a9:7c:bf:72:09: b1:a5:c1:9d:ea:02:2d:84:19:74:3b:0a:d2:59:54: 47:23:20:a9:3f:81:11:e0:09:9a:b4:d3:fa:f0:3f: 4c:1c:34:b6:0c:d1:05:1f:9b:02:34:ca:b5:47:b2: fa:f0:b0:53:72:3a:f7:43:07:30:ca:02:ab:24:af: 6b:49:c4:85:85:f5:b3:98:e3:de:dd:6f:d2:30:d1: aa:a5:44:f5:e5:56:91:4c:7d:bd:fc:67:87:a3:5a: b3:08:c9:e3:32:dd:72:75:06:bc:4f:71:d1:52:7d: 61:7e:44:0e:be:ba:6b:18:3d:e1:47:77:34:9b:83: 95:0b:9e:38:63:1e:c4:fb:c2:75:f7:64:38:a8:70: 15:b7:54:a6:38:52:e3:58:5b:ee:c6:9f:df:07:23: 34:ea:e5:53:11:12:2e:e3:e8:d7:b2:e2:69:e2:7d: c9:b1:be:2b:54:c9:d1:66:17:44:c1:30:14:b0:3a: ff:8c:9f:56:9e:c4:34:1c:d6:aa:81:c5:2a:66:96: ec:82:df:d8:28:b4:da:0d:38:33:41:bb:ae:1f:3c: c3:64:5a:92:2d:6c:ce:f6:d3:d7:9b:38:4d:74:6c: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8C:8A:E5:CE:30:43:B6:29:E3:B9:2A:3F:11:F2:1F:C1:1A:D7:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:1f:70:69:44:a1:e2:28:fc:06:c6:49:0b:09:b4:70:2b:f8: 72:14:10:7f:2a:5c:e0:8b:78:dd:2e:40:57:0d:7c:ba:bb:3e: 2e:e1:fc:06:1d:ce:d1:c1:e8:c3:5c:ea:31:53:fe:9d:ab:b3: d6:93:ac:56:cb:53:80:fc:b0:42:56:cb:22:85:b3:a4:e7:64: db:b5:10:ac:65:b8:35:1b:e5:f4:d7:f2:9a:88:b4:76:a9:72: 29:b8:bb:c5:95:ac:2c:4c:75:71:f8:48:bb:ea:a6:47:11:6f: cc:9d:17:c6:44:3a:96:78:67:5e:51:d0:cd:b0:80:6f:3a:54: 89:8c:b1:e8:b5:23:e7:f5:d8:30:78:e3:10:47:5a:1f:55:ed: ba:d8:f9:57:26:cd:4b:bf:da:7d:7f:97:65:ff:4c:24:84:58: f9:61:0e:ae:95:d7:f5:64:1d:2b:7c:9a:31:e3:d0:3f:0a:31: d7:b2:60:f8:f4:ea:dd:7b:c6:ce:b9:c2:44:1e:41:cf:b0:38: 11:61:d2:2c:c1:9f:8e:6f:7a:08:00:e1:91:ee:57:04:6d:dc: 0d:c4:f9:92:8c:04:eb:74:26:01:28:79:5f:69:f9:47:2c:34: 76:3e:9e:dd:25:f6:6c:68:90:5b:fc:12:d6:18:96:81:1e:f7: d2:5c:26:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fI5oBiNAZi+5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZTA4Y2Q4ZDYtMzBhMy00Y2RkLWE1YzEtNjJmZGM0OWRhZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiUEtWP9sFvLq7WVAufG/QtdER4mlRUoqXy/ cgmxpcGd6gIthBl0OwrSWVRHIyCpP4ER4AmatNP68D9MHDS2DNEFH5sCNMq1R7L6 8LBTcjr3QwcwygKrJK9rScSFhfWzmOPe3W/SMNGqpUT15VaRTH29/GeHo1qzCMnj Mt1ydQa8T3HRUn1hfkQOvrprGD3hR3c0m4OVC544Yx7E+8J192Q4qHAVt1SmOFLj WFvuxp/fByM06uVTERIu4+jXsuJp4n3Jsb4rVMnRZhdEwTAUsDr/jJ9WnsQ0HNaq gcUqZpbsgt/YKLTaDTgzQbuuHzzDZFqSLWzO9tPXmzhNdGz1QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuMiuXOMEO2KeO5Kj8R8h/BGtcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2IyNjhkMTQtN2VjMy0z ZjNjLWEwZDYtYWMyYTY2OWM2MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8fcGlEoeIo/AbGSQsJtHAr+HIUEH8qXOCLeN0uQFcNfLq7Pi7h/AYd ztHB6MNc6jFT/p2rs9aTrFbLU4D8sEJWyyKFs6TnZNu1EKxluDUb5fTX8pqItHap cim4u8WVrCxMdXH4SLvqpkcRb8ydF8ZEOpZ4Z15R0M2wgG86VImMsei1I+f12DB4 4xBHWh9V7brY+VcmzUu/2n1/l2X/TCSEWPlhDq6V1/VkHSt8mjHj0D8KMdeyYPj0 6t17xs65wkQeQc+wOBFh0izBn45veggA4ZHuVwRt3A3E+ZKMBOt0JgEoeV9p+Ucs NHY+nt0l9mxokFv8EtYYloEe99JcJm8= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:45 2025 by rpki-client