$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa File: e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa (raw, json) Hash identifier: 62QtBGsulFZ9eyBhTfxenmHeDoydNogJJ+Ueq4wdri4= Subject key identifier: 7E:A5:1C:81:56:C5:0E:0A:0C:A8:25:89:91:22:B3:5E:2D:7D:F0:98 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC7533409A693B63D2E3100 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:53:34:09:a6:93:b6:3d:2e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=26eb6808-c11b-4638-8962-ff69997c3274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:07:f3:30:a4:40:d7:52:ac:36:8a:c7:ad: 98:97:b3:93:85:b6:4c:60:fa:17:07:66:4e:18:c6: 16:24:fb:1c:f4:3d:79:fe:2d:54:6f:55:33:34:95: 7d:9d:10:9d:df:34:da:3a:0a:a6:98:ef:37:26:47: 6c:6d:e7:80:5b:f5:64:9e:e8:00:dc:9d:f0:2c:49: 4a:a2:c3:6b:22:e8:f2:e1:6d:d0:56:f3:89:e3:5e: 0e:d8:2c:2b:ca:3b:ea:61:da:c5:48:a0:dc:fc:ea: 8e:52:8d:3c:17:f4:55:66:1e:b6:17:7e:88:27:69: 5f:e5:6e:08:23:60:2a:ac:d9:ba:be:2f:e4:57:59: df:8e:a0:bd:9b:63:64:f3:da:d5:7e:9e:be:f7:fd: a5:4b:18:c3:56:0c:ee:65:9a:53:f1:b4:ce:ef:a8: 7a:2e:3c:d3:3d:72:c2:4b:92:bb:3f:b3:61:a1:a7: bb:c8:32:36:ac:6c:da:a4:d0:42:7e:99:16:be:fa: da:8b:bd:1c:08:e4:c6:3f:f4:e3:34:c7:55:18:c6: c8:21:15:32:7c:44:15:b4:22:ca:2c:90:1f:13:fa: 99:02:33:d3:64:c4:e9:8d:61:43:89:d4:9b:ea:d1: 48:83:20:40:90:5c:fb:f3:be:d1:e3:f7:af:17:c7: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A5:1C:81:56:C5:0E:0A:0C:A8:25:89:91:22:B3:5E:2D:7D:F0:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:0d:f2:e9:37:2c:97:77:4d:cd:a1:33:21:23:ed:a8:e6:25: bd:91:a5:4f:c5:62:ae:f3:8b:c6:1e:cf:a7:00:f9:b9:07:c5: 6e:a1:29:a1:28:c7:02:81:35:e3:47:5b:9f:9d:ff:dc:50:c8: 51:e0:98:14:21:b2:b9:70:30:2f:82:2f:05:58:dc:a5:3b:43: 85:87:a9:cc:5d:c4:22:0c:0c:7d:3d:cd:fa:bc:f4:43:9f:aa: 59:6e:4b:e6:8d:2f:de:e6:08:0e:13:2a:64:5a:a5:1d:56:19: 06:b0:84:60:be:b7:4b:b8:20:ad:3b:13:89:3b:d0:3c:ce:5d: d8:1d:51:97:31:92:9e:49:fe:b1:e9:95:1d:6f:94:37:4d:9b: 03:9d:be:d9:03:35:40:2a:10:f7:b3:21:0a:e3:6f:a4:60:7b: bd:53:8f:8b:56:c1:75:af:69:3c:21:5e:a8:43:86:16:13:df: c8:ce:e7:c4:04:d4:5f:1b:61:4f:a5:d9:03:22:f4:64:4c:2f: 98:2e:03:3e:ac:df:9f:c4:d9:8c:55:14:a1:8e:c7:9a:02:1c: 10:86:2f:92:cd:0c:a9:a9:d8:f3:4c:80:9b:a6:a1:c3:22:42: 58:b5:3b:5c:aa:21:63:21:24:c7:f6:68:32:48:63:48:27:b6: a9:df:cf:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1M0CaaTtj0uMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjZlYjY4MDgtYzExYi00NjM4LTg5NjItZmY2OTk5N2MzMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArekH8zCkQNdSrDaKx62Yl7OThbZMYPoXB2ZO GMYWJPsc9D15/i1Ub1UzNJV9nRCd3zTaOgqmmO83JkdsbeeAW/VknugA3J3wLElK osNrIujy4W3QVvOJ414O2CwryjvqYdrFSKDc/OqOUo08F/RVZh62F36IJ2lf5W4I I2AqrNm6vi/kV1nfjqC9m2Nk89rVfp6+9/2lSxjDVgzuZZpT8bTO76h6LjzTPXLC S5K7P7Nhoae7yDI2rGzapNBCfpkWvvrai70cCOTGP/TjNMdVGMbIIRUyfEQVtCLK LJAfE/qZAjPTZMTpjWFDidSb6tFIgyBAkFz7877R4/evF8cwKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6lHIFWxQ4KDKgliZEis14tffCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZTRmZjFiZmEtODdmZi0z OTdjLWI4ODctMGE4ZjhkYWZkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkN8uk3LJd3Tc2hMyEj7ajmJb2RpU/FYq7zi8Yez6cA+bkHxW6hKaEo xwKBNeNHW5+d/9xQyFHgmBQhsrlwMC+CLwVY3KU7Q4WHqcxdxCIMDH09zfq89EOf qlluS+aNL97mCA4TKmRapR1WGQawhGC+t0u4IK07E4k70DzOXdgdUZcxkp5J/rHp lR1vlDdNmwOdvtkDNUAqEPezIQrjb6Rge71Tj4tWwXWvaTwhXqhDhhYT38jO58QE 1F8bYU+l2QMi9GRML5guAz6s35/E2YxVFKGOx5oCHBCGL5LNDKmp2PNMgJumocMi Qli1O1yqIWMhJMf2aDJIY0gntqnfz2c= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:43 2025 by rpki-client