$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa File: a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa (raw, json) Hash identifier: Cysw0CU0vU8R53u3uHsZAF+sX2Zvbm+7i+YvWxHu2Uc= Subject key identifier: 0A:D5:BE:57:6D:DF:62:92:D5:88:2A:A5:28:D1:BD:7F:E2:90:AB:E4 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC75C4AC21653C27DB81000 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 216.137.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5c:4a:c2:16:53:c2:7d:b8:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=03afee85-fe6f-4d59-9919-cc463865fb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:24:da:5f:a2:17:e9:5f:1a:8d:49:e4:71: bf:c3:3b:49:02:1c:65:4f:7b:1c:4b:1b:0b:74:74: 42:1b:13:fd:ac:b0:17:1a:9b:31:f7:44:eb:86:b6: 40:9f:a4:a0:f6:5c:31:a8:e7:b8:e0:3f:e5:b7:85: f8:20:33:26:4d:ee:f5:d5:de:27:ff:f3:05:9a:2b: b1:26:3d:5e:2a:dc:91:25:ed:41:40:f4:6f:79:6f: 2f:ba:9f:d8:fd:5d:ae:70:33:bc:e3:9c:16:56:5a: 77:59:c0:75:08:1e:e3:39:45:71:9d:af:a3:54:e1: e7:02:0a:67:bf:a4:65:f9:3c:a0:85:d7:d0:66:bb: 76:70:87:a2:49:04:6c:9f:a6:d1:09:59:9d:13:9b: 37:3a:39:22:ed:ab:27:ec:53:9f:ff:c1:ca:c9:fc: 64:cd:c2:2e:f5:9a:59:80:39:e8:76:a0:ae:c8:c7: 57:82:45:dc:67:48:80:b6:61:55:19:24:0b:09:f8: 52:62:f3:b0:3c:f7:88:f3:67:16:d3:61:44:ba:6c: be:af:f9:17:da:68:0e:01:39:c3:c9:39:6a:54:28: 8d:d8:2d:7f:00:e6:f0:94:2b:27:87:a1:44:73:3f: 2a:db:2d:3d:06:df:17:7f:8d:ce:ef:86:1e:52:5d: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:BE:57:6D:DF:62:92:D5:88:2A:A5:28:D1:BD:7F:E2:90:AB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b0:8e:f0:41:24:5b:49:02:d0:88:ba:d3:95:2e:5e:af:7f: f5:f7:93:0d:95:41:77:d3:8f:c8:fa:57:8c:76:0e:48:c4:2e: 7a:56:7b:85:5a:02:22:f2:7a:c8:f7:72:31:c7:1c:10:ee:57: 8a:4e:22:32:0f:00:1b:5d:36:9d:f7:6a:cc:83:9f:7e:30:6e: 49:e5:c6:72:c8:9b:94:e3:ef:f1:3b:a1:ad:f6:6f:f1:3e:46: 2a:30:92:a6:20:c3:7e:52:50:ce:e9:a8:fd:3e:6b:0e:53:1d: c8:84:40:58:b5:7f:30:75:73:cd:e3:af:bb:f7:df:67:6d:85: 7e:2d:0f:72:9d:6d:ca:53:c5:3f:14:b8:54:f9:0c:11:fe:85: 6c:d2:c6:f7:9f:20:7a:79:8e:3a:15:ab:f9:e2:b1:7b:f2:61: eb:f2:17:44:85:f6:36:7c:b5:66:cf:f9:d5:bb:e6:fc:da:76: c0:2b:e8:ae:5a:31:fc:a3:c1:25:0b:80:0b:07:3a:24:81:c7: 28:c8:0d:85:25:2e:3c:58:b2:3f:10:e3:4c:70:9e:41:b7:c6: 23:bd:bb:83:c1:0f:7e:c9:a8:4b:a9:4e:3b:1c:d3:79:f2:0c: ff:18:d5:33:4e:51:1e:89:b1:8f:66:24:3c:25:0c:32:48:89: c0:66:ed:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1xKwhZTwn24EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MDNhZmVlODUtZmU2Zi00ZDU5LTk5MTktY2M0NjM4NjVmYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDMk2l+iF+lfGo1J5HG/wztJAhxlT3scSxsL dHRCGxP9rLAXGpsx90TrhrZAn6Sg9lwxqOe44D/lt4X4IDMmTe711d4n//MFmiux Jj1eKtyRJe1BQPRveW8vup/Y/V2ucDO845wWVlp3WcB1CB7jOUVxna+jVOHnAgpn v6Rl+TyghdfQZrt2cIeiSQRsn6bRCVmdE5s3Ojki7asn7FOf/8HKyfxkzcIu9ZpZ gDnodqCuyMdXgkXcZ0iAtmFVGSQLCfhSYvOwPPeI82cW02FEumy+r/kX2mgOATnD yTlqVCiN2C1/AObwlCsnh6FEcz8q2y09Bt8Xf43O74YeUl1ZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArVvldt32KS1YgqpSjRvX/ikKvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYTc1MjRjOWQtZmZkYy0z NGQ5LWE1YjEtY2VjZDc1MGI5ZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2InAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGwjvBBJFtJAtCIutOVLl6vf/X3kw2VQXfTj8j6V4x2DkjELnpWe4Va AiLyesj3cjHHHBDuV4pOIjIPABtdNp33asyDn34wbknlxnLIm5Tj7/E7oa32b/E+ RiowkqYgw35SUM7pqP0+aw5THciEQFi1fzB1c83jr7v332dthX4tD3KdbcpTxT8U uFT5DBH+hWzSxvefIHp5jjoVq/nisXvyYevyF0SF9jZ8tWbP+dW75vzadsAr6K5a MfyjwSULgAsHOiSBxyjIDYUlLjxYsj8Q40xwnkG3xiO9u4PBD37JqEupTjsc03ny DP8Y1TNOUR6JsY9mJDwlDDJIicBm7ZE= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:07 2025 by rpki-client