$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa File: be73bf96-e5bd-337c-93e4-4955acaa2e68.roa (raw, json) Hash identifier: 3mK/i8t2d3iFmFusGZmsn39RMWxr8AXD65f7Jdi24gE= Subject key identifier: FB:7E:CC:5E:91:17:3B:8E:01:BF:CF:5E:72:12:0E:DB:7E:D1:75:62 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC75C1B06DFF08AEEE2CAC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 216.137.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5c:1b:06:df:f0:8a:ee:e2:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=d6c89351-890d-4401-81d6-143048e6275a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:5c:80:0e:93:01:82:44:00:38:d8:e3:fa: d6:15:b0:cd:15:d0:27:65:3f:50:5f:d2:09:4b:9f: fd:09:5f:61:46:ba:54:ea:68:0e:22:45:22:ba:4d: 55:78:ca:73:f2:fd:26:22:87:fb:a2:a9:c7:59:a7: c3:e6:09:a1:bc:e7:c7:54:e4:c2:76:a5:db:a0:7a: b6:3f:84:17:91:bc:0c:ea:96:8a:fc:91:87:26:d2: ff:59:e3:2b:95:06:bc:7a:41:99:fb:eb:9e:90:c0: 21:27:19:67:9e:eb:f9:0e:f1:b6:67:c8:65:f9:16: aa:00:37:e2:58:16:10:0d:81:f9:58:be:61:92:70: 03:7e:78:2c:67:fc:60:35:92:2c:e0:a3:cf:5e:5c: bc:89:f2:9e:f5:9c:ed:64:d1:8a:07:37:a5:94:78: b5:71:e6:51:ea:9f:92:42:64:dd:bd:c8:ec:ea:dd: 61:4b:0c:51:d8:dc:12:d6:16:72:35:56:19:52:97: 01:c7:51:e2:0a:e2:c7:f2:e0:bd:ad:f4:41:8a:52: 62:23:8f:f3:ce:83:f7:b7:c2:91:6e:fa:0b:04:29: 6b:9b:a7:29:80:8c:e4:a4:dd:2a:f8:2b:ec:7e:67: 08:69:06:f1:f3:6a:9b:f6:64:40:12:21:9a:f7:29: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7E:CC:5E:91:17:3B:8E:01:BF:CF:5E:72:12:0E:DB:7E:D1:75:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a4:86:81:68:da:67:e2:5d:7c:f7:36:5e:c0:c3:59:f7:ef: c1:0b:f0:4c:03:b9:8d:07:b2:da:e1:55:0e:68:b2:f4:d9:cf: 29:04:0b:3c:e3:d2:e0:ed:aa:33:62:8b:92:94:c7:82:4a:50: 8e:ab:0f:fc:dd:d8:86:74:dc:7d:1f:7e:d6:86:3b:30:1f:85: 66:be:29:9a:9e:0a:e9:94:d0:30:56:81:b3:e3:1c:e2:38:6e: 09:41:1f:1a:b4:48:97:ed:db:d6:6e:27:a6:74:f8:f9:fa:06: 25:75:d1:e1:07:99:f6:b6:db:67:fe:3c:65:bc:02:cd:b0:b4: c7:cf:5b:3a:ad:2f:13:91:8f:00:da:e2:97:96:76:f3:96:54: 85:8d:bd:97:89:87:94:03:42:d6:af:23:2c:19:47:27:d5:0b: 0b:e7:90:b5:12:20:b3:b0:d3:c3:c1:39:34:de:de:9b:4f:7c: ef:b2:91:70:38:00:ee:b9:05:d0:18:a4:d8:5f:2d:d4:24:7a: f8:5d:2c:2e:3d:0f:c5:4a:4c:0b:e1:fd:af:7f:3a:f7:7a:45: 62:47:5c:36:e6:00:88:90:db:fe:1c:00:1f:06:56:9b:ad:8c: a2:4c:42:ae:e9:bf:c9:02:f3:64:a6:f6:d5:55:14:17:25:3c: e6:89:99:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1wbBt/wiu7iysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZDZjODkzNTEtODkwZC00NDAxLTgxZDYtMTQzMDQ4ZTYyNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJBcgA6TAYJEADjY4/rWFbDNFdAnZT9QX9IJ S5/9CV9hRrpU6mgOIkUiuk1VeMpz8v0mIof7oqnHWafD5gmhvOfHVOTCdqXboHq2 P4QXkbwM6paK/JGHJtL/WeMrlQa8ekGZ++uekMAhJxlnnuv5DvG2Z8hl+RaqADfi WBYQDYH5WL5hknADfngsZ/xgNZIs4KPPXly8ifKe9ZztZNGKBzellHi1ceZR6p+S QmTdvcjs6t1hSwxR2NwS1hZyNVYZUpcBx1HiCuLH8uC9rfRBilJiI4/zzoP3t8KR bvoLBClrm6cpgIzkpN0q+CvsfmcIaQbx82qb9mRAEiGa9ykdzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt+zF6RFzuOAb/PXnISDtt+0XViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmU3M2JmOTYtZTViZC0z MzdjLTkzZTQtNDk1NWFjYWEyZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABikhoFo2mfiXXz3Nl7Aw1n378EL8EwDuY0HstrhVQ5osvTZzykECzzj 0uDtqjNii5KUx4JKUI6rD/zd2IZ03H0fftaGOzAfhWa+KZqeCumU0DBWgbPjHOI4 bglBHxq0SJft29ZuJ6Z0+Pn6BiV10eEHmfa222f+PGW8As2wtMfPWzqtLxORjwDa 4peWdvOWVIWNvZeJh5QDQtavIywZRyfVCwvnkLUSILOw08PBOTTe3ptPfO+ykXA4 AO65BdAYpNhfLdQkevhdLC49D8VKTAvh/a9/Ovd6RWJHXDbmAIiQ2/4cAB8GVput jKJMQq7pv8kC82Sm9tVVFBclPOaJmTA= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:45 2025 by rpki-client