$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa File: a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa (raw, json) Hash identifier: Qp98pDtb6WTZ9sKNG8lMynVUAvmiTn2l9BoXR4PsHlg= Subject key identifier: 47:56:CC:04:A3:7F:F0:81:1C:D2:4F:11:BB:6C:85:50:E6:0E:0C:FB Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC7531FF7FBDF0834C19340 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:53:1f:f7:fb:df:08:34:c1:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=f603aa3a-f01b-43ec-b623-b974ac505890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0c:3c:ef:4a:f8:de:57:1b:8d:51:37:26:b4: ba:a3:91:d3:00:ab:0f:33:b7:b3:af:95:85:dd:91: 79:e5:da:d7:a6:53:97:d1:a2:28:32:df:3d:98:e4: 34:c3:59:fb:5a:78:ba:75:8e:8c:cf:7b:32:27:4e: 30:f7:74:dd:70:63:59:71:60:05:ff:65:b0:3a:9c: ef:66:86:07:1d:72:71:f4:c5:90:5a:18:8e:81:d3: fe:df:10:dd:ff:f3:ad:ac:0d:0e:9a:dd:df:42:9d: c3:d9:55:87:59:38:60:97:6b:fa:77:81:70:f5:db: 51:c1:bb:b8:67:b5:94:5f:99:1d:9d:7f:2d:2e:85: 79:51:85:a0:ca:7c:01:8d:49:0c:e6:cc:fc:bc:ba: f3:d6:32:56:75:97:ec:ff:8c:84:b4:32:f1:03:54: 7e:79:58:69:88:44:65:e8:46:27:68:28:21:0c:c3: 31:95:60:80:ff:f3:0c:28:84:6a:56:71:44:86:ac: 3c:5c:dc:e7:4a:ac:4f:9b:35:12:e7:ac:b2:5b:3f: 0d:cc:3a:60:08:af:b5:d0:31:a7:ed:0e:80:14:ff: 06:a1:98:c8:17:8a:55:7f:68:68:cf:2b:87:22:2a: a0:db:fc:d8:34:e5:08:e3:e9:05:10:dd:80:93:f5: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:56:CC:04:A3:7F:F0:81:1C:D2:4F:11:BB:6C:85:50:E6:0E:0C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4f:6e:55:c9:43:d3:4e:b1:4e:33:3c:3a:e7:d2:31:40:8c: 71:0c:4b:b4:8f:5a:ea:bf:7f:2b:66:43:0d:d7:7d:8d:25:0d: 07:70:46:41:7b:28:8b:69:8b:e8:f5:bb:c2:98:75:c6:25:90: e8:bd:76:b9:76:94:ca:9a:4f:0f:d0:6a:41:c4:ee:d2:ca:59: c9:fb:c6:1a:10:49:0a:fb:1e:cd:ce:59:90:4b:08:73:a2:3f: 8d:7b:3c:4e:10:40:ac:77:61:a4:dc:9a:a1:5e:bc:8f:a6:43: fe:00:90:cc:9f:bd:3f:0e:83:c2:5e:12:0c:b0:58:44:7c:d1: 60:95:94:53:55:95:95:c2:e8:1b:0a:04:bb:9f:bb:bd:09:d7: 93:40:6b:e3:f0:f9:97:3f:fe:1d:44:83:4f:0a:78:79:b9:5e: 0c:65:be:fa:7d:f3:a2:03:b1:38:fe:e2:3a:b5:f6:d2:a5:68: b2:b1:3f:fa:93:1e:39:8e:91:81:5e:79:54:98:36:93:b3:a0: de:84:bc:86:34:53:eb:c1:bb:76:90:c3:9a:f6:5d:41:a5:d3: 16:67:de:35:aa:c3:ba:2a:31:bd:f4:2b:84:b3:9e:8b:a0:6c: 04:72:71:d8:80:9f:7b:b0:7a:31:55:50:18:54:15:e5:41:e5: 0e:bc:d4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1Mf9/vfCDTBk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZjYwM2FhM2EtZjAxYi00M2VjLWI2MjMtYjk3NGFjNTA1ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQw870r43lcbjVE3JrS6o5HTAKsPM7ezr5WF 3ZF55drXplOX0aIoMt89mOQ0w1n7Wni6dY6Mz3syJ04w93TdcGNZcWAF/2WwOpzv ZoYHHXJx9MWQWhiOgdP+3xDd//OtrA0Omt3fQp3D2VWHWThgl2v6d4Fw9dtRwbu4 Z7WUX5kdnX8tLoV5UYWgynwBjUkM5sz8vLrz1jJWdZfs/4yEtDLxA1R+eVhpiERl 6EYnaCghDMMxlWCA//MMKIRqVnFEhqw8XNznSqxPmzUS56yyWz8NzDpgCK+10DGn 7Q6AFP8GoZjIF4pVf2hozyuHIiqg2/zYNOUI4+kFEN2Ak/VruQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdWzASjf/CBHNJPEbtshVDmDgz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYTVkNjZhODctZjhhOS0z NmNjLWI5YzAtNTA2Y2EwM2U2NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClPblXJQ9NOsU4zPDrn0jFAjHEMS7SPWuq/fytmQw3XfY0lDQdwRkF7 KItpi+j1u8KYdcYlkOi9drl2lMqaTw/QakHE7tLKWcn7xhoQSQr7Hs3OWZBLCHOi P417PE4QQKx3YaTcmqFevI+mQ/4AkMyfvT8Og8JeEgywWER80WCVlFNVlZXC6BsK BLufu70J15NAa+Pw+Zc//h1Eg08KeHm5Xgxlvvp986IDsTj+4jq19tKlaLKxP/qT HjmOkYFeeVSYNpOzoN6EvIY0U+vBu3aQw5r2XUGl0xZn3jWqw7oqMb30K4Sznoug bARycdiAn3uwejFVUBhUFeVB5Q681IE= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:01 2025 by rpki-client