$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfefdc5-534b-3003-bf6a-145020fb5808.roa File: 6dfefdc5-534b-3003-bf6a-145020fb5808.roa (raw, json) Hash identifier: iRT9sfSWUuxutO5mom7omMFa1He8zjsbUakMlDq/zuY= Subject key identifier: 8D:E0:93:D2:86:5E:6F:84:31:53:54:DD:09:6A:24:EE:D0:9A:94:76 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC75C38DB847285B0233180 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfefdc5-534b-3003-bf6a-145020fb5808.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 216.137.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5c:38:db:84:72:85:b0:23:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=46d2ef98-73ab-43cc-a6c9-c1a7b8cc14fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:ae:57:0b:82:1b:20:d1:64:2e:28:3e:d0: ba:48:78:75:18:01:62:e7:cf:40:68:6b:10:9c:57: 98:20:48:d0:d5:ff:8a:d2:50:0e:ca:80:95:1b:84: d1:b3:04:30:6f:d3:f2:10:b7:91:39:8f:3d:1c:b5: 37:d2:79:da:20:81:90:0e:77:67:2f:8a:0c:f8:f7: c5:31:d8:ba:98:7f:50:4b:2e:75:76:bb:7e:23:a0: 46:7d:d1:16:3d:a3:7a:38:82:4c:74:f6:12:f0:0b: cd:f7:79:0e:8e:49:c9:78:cf:65:ad:20:d0:ae:89: 52:43:e7:40:7c:d0:79:80:6e:be:19:5d:97:23:53: d4:62:6a:0c:24:96:ba:d1:8b:86:81:a3:81:9f:c4: c2:e2:e8:41:13:f2:f4:84:e9:ce:01:3f:94:51:df: 66:20:44:82:d8:c6:f6:92:be:9e:ed:89:f0:26:72: 35:be:14:fd:16:4f:30:53:d3:c4:16:88:77:07:52: 1f:1f:36:70:ea:ce:6a:83:01:c5:b9:03:fc:99:0f: e0:f0:a2:fb:37:7b:77:4e:b2:43:89:2d:2a:d8:70: d1:55:92:cc:ad:ac:a3:4c:32:ee:8e:b0:e8:36:0b: ea:0a:f5:49:55:97:73:03:be:fb:35:2e:b2:45:80: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E0:93:D2:86:5E:6F:84:31:53:54:DD:09:6A:24:EE:D0:9A:94:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfefdc5-534b-3003-bf6a-145020fb5808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d6:fe:de:95:f8:65:7a:f2:cc:3c:71:34:84:77:c6:7a:5d: 6a:03:02:e1:b4:77:a2:17:6e:4b:b2:dd:b3:2c:24:f4:f9:a9: 9d:40:33:31:9d:0f:6e:fb:6a:27:23:dc:58:20:0e:b7:08:16: 23:70:e2:50:bf:74:ce:db:55:df:be:33:a7:cb:3f:d6:4b:ff: 65:4b:85:41:2a:2c:ec:0e:2e:c9:a3:02:46:a4:13:e8:58:58: cd:b0:f5:90:ba:47:db:91:65:17:51:7d:7e:ac:9a:b1:dd:0f: 87:f6:22:38:5f:27:d4:0f:31:fd:e0:03:f8:a4:b5:c2:82:25: bc:e9:ce:11:84:65:bd:d4:20:7c:54:72:21:e6:c5:3e:39:5f: fe:5b:6d:ca:d4:0b:ca:18:33:fa:60:c0:6f:ed:ae:58:64:f4: 21:35:45:80:0e:b8:71:2c:f4:e0:3b:73:d9:1a:54:a1:81:0c: fe:f7:5f:d0:1f:48:70:72:40:84:8c:71:b2:6c:60:e6:16:de: 59:d5:f4:57:70:94:76:2b:6c:63:29:82:89:3d:9a:6c:b2:c8: c1:de:6a:78:89:94:45:01:68:e4:02:98:00:a2:99:f7:5c:d4: fb:34:d8:2e:97:67:b4:e2:a2:09:a0:54:de:94:e1:a1:e4:be: 59:61:aa:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1w424RyhbAjMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDZkMmVmOTgtNzNhYi00M2NjLWE2YzktYzFhN2I4Y2MxNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU+uVwuCGyDRZC4oPtC6SHh1GAFi589AaGsQ nFeYIEjQ1f+K0lAOyoCVG4TRswQwb9PyELeROY89HLU30nnaIIGQDndnL4oM+PfF Mdi6mH9QSy51drt+I6BGfdEWPaN6OIJMdPYS8AvN93kOjknJeM9lrSDQrolSQ+dA fNB5gG6+GV2XI1PUYmoMJJa60YuGgaOBn8TC4uhBE/L0hOnOAT+UUd9mIESC2Mb2 kr6e7YnwJnI1vhT9Fk8wU9PEFoh3B1IfHzZw6s5qgwHFuQP8mQ/g8KL7N3t3TrJD iS0q2HDRVZLMrayjTDLujrDoNgvqCvVJVZdzA777NS6yRYCj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3gk9KGXm+EMVNU3QlqJO7QmpR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmRmZWZkYzUtNTM0Yi0z MDAzLWJmNmEtMTQ1MDIwZmI1ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfW/t6V+GV68sw8cTSEd8Z6XWoDAuG0d6IXbkuy3bMsJPT5qZ1AMzGd D277aicj3FggDrcIFiNw4lC/dM7bVd++M6fLP9ZL/2VLhUEqLOwOLsmjAkakE+hY WM2w9ZC6R9uRZRdRfX6smrHdD4f2IjhfJ9QPMf3gA/iktcKCJbzpzhGEZb3UIHxU ciHmxT45X/5bbcrUC8oYM/pgwG/trlhk9CE1RYAOuHEs9OA7c9kaVKGBDP73X9Af SHByQISMcbJsYOYW3lnV9FdwlHYrbGMpgok9mmyyyMHeaniJlEUBaOQCmACimfdc 1Ps02C6XZ7TiogmgVN6U4aHkvllhqrE= -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:19 2025 by rpki-client