$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa File: db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa (raw, json) Hash identifier: IEJ+Y8fwCAJI9PS/Q/D94L1+CZHF8p1neLNTEaaG8RI= Subject key identifier: EE:04:34:83:F9:F3:9D:3A:BB:82:1E:26:84:0D:2D:5C:BD:3F:67:05 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5DD1F213208F72940D19FD00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11090 IP address blocks: 216.152.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f2:13:20:8f:72:94:0d:19:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=591d335e-c463-46a1-86a9-b9e0f4bbab41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:9b:01:84:96:97:d2:5e:93:1d:1d:2e:71: a5:9e:f3:33:39:82:54:87:cb:d7:03:6a:b8:bd:10: 0e:aa:12:3a:25:49:1c:d2:c0:83:b9:ae:5e:b0:86: 63:08:fc:d1:0e:77:4f:35:7a:f4:04:27:40:81:69: fb:d1:62:50:31:d0:d7:fe:9a:c3:8d:eb:b2:03:51: 68:c8:cb:a6:26:87:c6:39:40:c5:2d:a1:99:08:9a: 1c:7a:90:b3:46:b3:b1:2b:d8:d0:9d:9b:32:5c:f2: 1e:c8:0e:bb:a0:14:88:30:92:03:ab:43:ab:2a:b0: 51:93:f3:45:48:1f:fc:5c:1f:3a:8d:d2:2f:0d:92: fb:9c:b0:ef:60:02:e9:ce:cf:ec:90:fd:84:a5:cb: 97:3e:37:43:85:bc:27:3c:33:49:dd:ee:57:b4:c6: 50:08:83:97:22:55:da:70:a2:82:95:fb:c9:df:78: 55:13:af:49:13:00:f3:3d:ed:18:d7:4e:07:a9:6c: b0:b8:3c:ed:24:07:bc:4d:db:f2:1e:78:76:17:96: a6:67:0c:9b:0b:97:65:70:6b:4b:b5:c4:79:66:dd: ec:fb:3c:73:b4:b1:61:f6:c9:11:f2:a6:e6:e4:2e: c7:6d:87:65:e8:05:1d:57:e8:78:ae:7c:6e:6f:86: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:04:34:83:F9:F3:9D:3A:BB:82:1E:26:84:0D:2D:5C:BD:3F:67:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0f:20:ff:72:d6:cd:7c:c2:ea:bd:88:bc:26:8d:eb:09:ad: 64:04:c9:68:65:9f:4f:ff:67:90:90:a2:12:94:b0:37:42:5c: 6c:25:49:fc:53:b0:ed:52:41:78:84:5e:a9:5b:30:85:7b:77: 05:36:fb:89:20:14:1b:80:fc:f5:be:4f:a4:d9:0d:6b:34:ca: d7:a5:b1:f1:68:9e:8d:c2:94:f6:c8:db:50:59:46:8d:dc:99: 0b:b3:22:c2:e0:57:f0:b3:17:3a:8a:e4:03:a9:f2:e2:80:ea: d5:50:93:dc:58:ea:f4:91:61:95:ce:ca:2b:4a:19:0e:63:0e: f0:21:ae:7c:97:56:5a:fd:72:08:c1:5d:73:4f:95:28:91:47: 4b:de:dc:88:35:0d:14:19:4f:80:01:5e:28:40:ad:e4:6e:99: c7:d1:94:74:37:bc:9c:3d:1d:85:ea:62:75:f3:31:e6:91:81: 24:c4:0f:2a:4d:b6:d6:ef:79:07:b0:3a:c1:e4:0b:aa:67:07: d8:88:e5:c5:d3:2d:1d:c9:f8:d4:41:80:f1:43:ae:e5:11:73: f2:81:5a:e9:bb:e0:19:55:7d:0c:c7:4a:90:f2:34:2e:31:2a: f3:e2:53:5d:98:0d:a2:0c:ff:e9:15:bd:e6:ec:05:de:eb:8a: 11:50:16:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fITII9ylA0Z/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NTkxZDMzNWUtYzQ2My00NmExLTg2YTktYjllMGY0YmJhYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLqbAYSWl9Jekx0dLnGlnvMzOYJUh8vXA2q4 vRAOqhI6JUkc0sCDua5esIZjCPzRDndPNXr0BCdAgWn70WJQMdDX/prDjeuyA1Fo yMumJofGOUDFLaGZCJocepCzRrOxK9jQnZsyXPIeyA67oBSIMJIDq0OrKrBRk/NF SB/8XB86jdIvDZL7nLDvYALpzs/skP2EpcuXPjdDhbwnPDNJ3e5XtMZQCIOXIlXa cKKClfvJ33hVE69JEwDzPe0Y104HqWywuDztJAe8TdvyHnh2F5amZwybC5dlcGtL tcR5Zt3s+zxztLFh9skR8qbm5C7HbYdl6AUdV+h4rnxub4YT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4ENIP58506u4IeJoQNLVy9P2cFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGIwYWIzZjQtZjJhYi0z NDA2LWJjZWQtNjc1ODliOWUwYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIPIP9y1s18wuq9iLwmjesJrWQEyWhln0//Z5CQohKUsDdCXGwlSfxT sO1SQXiEXqlbMIV7dwU2+4kgFBuA/PW+T6TZDWs0ytelsfFono3ClPbI21BZRo3c mQuzIsLgV/CzFzqK5AOp8uKA6tVQk9xY6vSRYZXOyitKGQ5jDvAhrnyXVlr9cgjB XXNPlSiRR0ve3Ig1DRQZT4ABXihAreRumcfRlHQ3vJw9HYXqYnXzMeaRgSTEDypN ttbveQewOsHkC6pnB9iI5cXTLR3J+NRBgPFDruURc/KBWum74BlVfQzHSpDyNC4x KvPiU12YDaIM/+kVvebsBd7rihFQFm0= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:40 2025 by rpki-client