$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa File: 3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa (raw, json) Hash identifier: o9432Iu5ZN33OmhIyzIrs8S8Ee/RH9WN5pbt1WLr81Y= Subject key identifier: 82:56:B4:B5:0B:F0:97:AF:3E:CE:14:3F:34:6F:FE:57:5A:A4:A1:85 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC7536E10BB8AD075B3FF00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:53:6e:10:bb:8a:d0:75:b3:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b3aaa987-64ea-4444-b7ba-2a3b995a56ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:dc:17:38:e8:aa:bb:3a:cd:2f:63:c7:ba: f2:06:13:06:c7:70:e1:45:e7:0e:18:fc:13:bc:45: 66:0c:f0:da:8a:c6:29:7d:62:98:e5:dc:6f:4e:50: 0d:27:dd:fa:28:be:c5:34:2f:9d:52:ee:6d:9b:ba: b8:ee:ee:37:1a:5b:ad:5e:45:d9:7c:1c:33:c4:16: 6b:aa:5f:33:18:03:a2:b1:22:44:a0:12:0a:d3:dd: ca:e7:b4:e5:9d:8e:a1:2b:8d:de:c2:5d:53:4f:de: 8a:e3:c8:d4:bd:97:65:7e:af:eb:dd:8a:81:ce:9c: ac:cf:49:9b:69:f0:a8:a2:67:f8:b1:f5:29:11:db: 21:2e:3c:50:91:0a:2e:72:b0:86:5f:5f:8d:fc:40: f0:6a:2e:f0:c4:d4:ce:5d:1d:f2:56:04:ad:20:81: 81:bd:3a:e5:39:7a:63:b2:94:15:e2:da:57:06:5c: 4b:fa:0f:18:10:e9:93:17:a5:fb:0f:69:a0:b6:6a: 86:d0:a9:9b:37:4b:a6:d2:cf:56:41:22:99:9b:e7: d7:50:b4:a4:73:12:09:1f:fb:d6:ee:5e:4b:79:7f: 0a:3c:38:e7:c8:60:f6:d3:57:32:ee:47:d5:8f:3b: 18:a7:8a:d8:c3:49:48:ba:b5:7b:b0:82:fd:d8:c1: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:B4:B5:0B:F0:97:AF:3E:CE:14:3F:34:6F:FE:57:5A:A4:A1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:db:6b:52:6d:76:cb:6d:50:76:33:d0:c4:a9:b1:77:42:8c: a9:c3:49:5d:9e:53:66:51:1d:16:e3:82:66:d6:56:74:d3:f2: 21:d9:b3:e8:17:f2:8f:eb:15:a6:64:69:37:8d:3c:a8:2b:c1: 56:7a:c9:48:f6:6f:24:ca:5a:e5:65:6f:15:8b:de:6f:ed:b6: 32:8c:7b:78:1a:73:dc:6a:05:06:fa:9f:83:b2:d7:d4:d2:a8: 45:04:0f:15:82:a2:7a:a8:c8:f8:16:17:10:8a:b4:49:1f:92: 27:1a:2a:cc:25:a7:50:71:bc:4b:57:56:37:2d:a6:30:74:fa: 2d:b9:0c:45:2a:b0:9d:d9:f8:04:de:a4:05:e7:e8:c6:44:ac: 3b:99:88:e2:c5:6b:df:f5:80:a8:d0:a2:80:15:77:e8:d6:62: 45:4d:87:78:30:36:9d:86:b4:da:da:e3:77:04:de:49:c7:75: 4c:d7:6c:70:e8:30:47:51:0d:d5:de:ac:df:6d:61:e5:94:d7: fa:38:2a:6e:3d:a4:90:c1:d7:ca:53:b9:9d:0a:54:69:82:f7: 73:7d:69:d7:7e:51:3d:9a:14:ff:c1:d4:dc:73:98:43:fe:17: 36:ca:c5:5f:72:84:e0:07:ec:4e:49:8b:cd:b0:5e:4c:cf:fe: 7e:d7:6a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1NuELuK0HWz/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjNhYWE5ODctNjRlYS00NDQ0LWI3YmEtMmEzYjk5NWE1NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWLcFzjoqrs6zS9jx7ryBhMGx3DhRecOGPwT vEVmDPDaisYpfWKY5dxvTlANJ936KL7FNC+dUu5tm7q47u43GlutXkXZfBwzxBZr ql8zGAOisSJEoBIK093K57TlnY6hK43ewl1TT96K48jUvZdlfq/r3YqBzpysz0mb afCoomf4sfUpEdshLjxQkQoucrCGX1+N/EDwai7wxNTOXR3yVgStIIGBvTrlOXpj spQV4tpXBlxL+g8YEOmTF6X7D2mgtmqG0KmbN0um0s9WQSKZm+fXULSkcxIJH/vW 7l5LeX8KPDjnyGD201cy7kfVjzsYp4rYw0lIurV7sIL92MHe2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJWtLUL8JevPs4UPzRv/ldapKGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2NmNDFmY2ItYTk4NS0z NDczLTllNjktZDkyZTNlN2FjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnba1JtdsttUHYz0MSpsXdCjKnDSV2eU2ZRHRbjgmbWVnTT8iHZs+gX 8o/rFaZkaTeNPKgrwVZ6yUj2byTKWuVlbxWL3m/ttjKMe3gac9xqBQb6n4Oy19TS qEUEDxWConqoyPgWFxCKtEkfkicaKswlp1BxvEtXVjctpjB0+i25DEUqsJ3Z+ATe pAXn6MZErDuZiOLFa9/1gKjQooAVd+jWYkVNh3gwNp2GtNra43cE3knHdUzXbHDo MEdRDdXerN9tYeWU1/o4Km49pJDB18pTuZ0KVGmC93N9add+UT2aFP/B1NxzmEP+ FzbKxV9yhOAH7E5Ji82wXkzP/n7XaqM= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:46 2025 by rpki-client