$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa File: dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json) Hash identifier: D9ekuzdcSYZTCLgeCnwEGtK4GYOsameQNgt4Ot1sJ5E= Subject key identifier: 74:65:C1:A1:1F:9B:9C:EE:BA:56:8B:9B:CB:28:49:25:E2:4F:95:BF Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC7539DBF0603ED602F1040 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:53:9d:bf:06:03:ed:60:2f:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6e23840d-8909-4c7f-9b57-660e681301aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:b6:54:0d:13:44:8f:00:b7:a8:fe:c9:90: 20:ef:75:36:e7:66:37:6c:f0:06:e4:55:a0:59:a4: dc:e6:0b:db:4f:ed:44:8a:f5:d7:05:bd:17:39:02: 05:9a:df:f8:bb:fd:e4:45:92:c9:7b:ec:46:54:0e: 53:ed:34:46:47:42:2a:5b:c8:fd:e4:37:1d:92:c2: cf:13:90:04:fa:d4:d4:a7:c1:a6:51:9a:07:55:8b: fc:56:db:37:0e:8c:e4:53:36:0d:1e:33:9b:68:66: 04:5f:bc:9c:ac:80:98:3f:ab:7a:3f:41:2e:a4:1e: b5:69:73:ff:ad:71:b1:1f:b7:19:73:06:6e:26:23: 93:b1:69:3d:c4:37:2f:53:23:23:ce:f9:04:2c:b8: 0f:fd:e3:f6:07:07:ae:bf:11:96:b0:d7:b8:40:22: 45:be:d7:a4:9d:c4:a7:f6:9c:08:23:88:d1:e7:76: 88:43:a7:6a:dc:af:f1:03:11:00:f5:bd:c3:60:cc: 9b:e0:a7:74:80:cc:e1:66:ed:98:6e:3b:e6:09:cb: 55:3c:38:1c:8c:28:90:6f:f6:19:1a:88:6d:ec:94: 0f:c7:5e:a0:53:78:7a:ab:38:69:0c:75:f1:fa:a6: 7c:e8:e7:a3:21:33:09:84:69:87:ae:5d:36:d9:7a: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:65:C1:A1:1F:9B:9C:EE:BA:56:8B:9B:CB:28:49:25:E2:4F:95:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ce:98:72:2e:66:96:0e:0b:80:c9:bf:7a:b9:dc:cd:8c:75: 44:41:42:be:f5:fc:8d:69:05:10:b7:6c:33:00:ae:71:af:e8: 77:12:92:8e:c9:40:b2:13:61:75:c5:03:f7:44:94:9a:4c:f3: 8e:20:ae:38:e3:55:47:9e:4d:fc:8e:52:1e:38:2c:75:22:87: fa:6c:fb:07:2e:39:b5:d8:d0:3d:34:5e:f0:3e:7d:27:14:b6: 29:31:bb:e8:2b:ab:b2:c5:28:09:5b:32:18:52:a3:cd:2d:51: 3b:ab:4f:5f:ef:fb:d4:2e:eb:78:c9:d0:3f:58:9d:2c:5b:80: cd:19:f1:8b:d2:58:2d:39:18:7e:8f:7d:34:8a:d3:44:cd:43: 2a:3a:82:de:1e:a3:5d:5c:14:6b:45:e0:b9:e5:8a:72:3f:7b: 21:ad:5d:ee:88:d9:9d:15:2c:bf:80:5c:4c:70:0b:71:01:ff: 45:3a:e2:48:d4:a7:cf:6e:ca:2c:51:d2:d9:bd:88:31:85:49: a9:39:f4:0c:1d:8f:af:d2:7c:7d:73:f9:cc:87:9a:ab:06:8f: 03:08:be:b2:33:1c:9f:b8:05:47:4e:35:81:14:03:78:e1:aa: 2b:63:ff:b2:97:55:db:ce:bb:1b:4b:b5:6b:62:91:8b:37:0d: 84:e6:6d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1OdvwYD7WAvEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NmUyMzg0MGQtODkwOS00YzdmLTliNTctNjYwZTY4MTMwMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+y2VA0TRI8At6j+yZAg73U252Y3bPAG5FWg WaTc5gvbT+1EivXXBb0XOQIFmt/4u/3kRZLJe+xGVA5T7TRGR0IqW8j95DcdksLP E5AE+tTUp8GmUZoHVYv8Vts3DozkUzYNHjObaGYEX7ycrICYP6t6P0EupB61aXP/ rXGxH7cZcwZuJiOTsWk9xDcvUyMjzvkELLgP/eP2BweuvxGWsNe4QCJFvtekncSn 9pwII4jR53aIQ6dq3K/xAxEA9b3DYMyb4Kd0gMzhZu2YbjvmCctVPDgcjCiQb/YZ Goht7JQPx16gU3h6qzhpDHXx+qZ86OejITMJhGmHrl022XqaEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRlwaEfm5zuulaLm8soSSXiT5W/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGZmYzk3ZmItNzg2ZS0z MThiLWI0ZWUtMjkzZDFhMGYxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbOmHIuZpYOC4DJv3q53M2MdURBQr71/I1pBRC3bDMArnGv6HcSko7J QLITYXXFA/dElJpM844grjjjVUeeTfyOUh44LHUih/ps+wcuObXY0D00XvA+fScU tikxu+grq7LFKAlbMhhSo80tUTurT1/v+9Qu63jJ0D9YnSxbgM0Z8YvSWC05GH6P fTSK00TNQyo6gt4eo11cFGtF4LnlinI/eyGtXe6I2Z0VLL+AXExwC3EB/0U64kjU p89uyixR0tm9iDGFSak59Awdj6/SfH1z+cyHmqsGjwMIvrIzHJ+4BUdONYEUA3jh qitj/7KXVdvOuxtLtWtikYs3DYTmbYI= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:11 2025 by rpki-client