$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa File: 2a0d65f4-0bf8-3733-8250-200e7634a82c.roa (raw, json) Hash identifier: /klPeSvoIperCXlrThvVCIw5OXXUgjkQAgn0E9SfgQE= Subject key identifier: F1:3F:F9:E0:D8:18:0E:E6:B4:E0:AA:1E:A2:0F:A6:2B:8D:6A:40:3D Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584B1F01758F0A030DC7FDF82380 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 10430 IP address blocks: 168.99.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:75:8f:0a:03:0d:c7:fd:f8:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=80dca0b4-3a54-479e-9242-7935b4570b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:53:85:37:2c:98:35:fd:ae:36:e1:cb:95: 43:70:9a:21:d2:a0:df:5c:13:be:ba:79:c6:82:c3: 4a:55:f5:2e:ba:65:e4:7d:da:c3:64:d8:18:e6:ce: c2:6b:87:f3:ab:24:cf:d4:4c:54:03:ef:40:31:b3: 92:60:d6:35:07:31:8b:f6:74:91:a1:0e:f0:d7:4f: 65:d2:de:c0:c9:cc:c0:75:4e:e2:85:5e:21:e0:44: 4c:67:9a:fb:bd:8a:52:2a:b0:96:67:a6:8a:49:8c: 81:bd:9e:d0:fb:ac:e5:55:f9:a0:77:75:6a:f0:e9: 5e:76:70:dc:dd:3c:b7:19:17:ee:4a:3e:a5:bc:7a: 2c:54:03:ae:a2:39:23:80:f6:08:44:2a:45:be:e0: 32:02:f5:15:1c:69:f4:da:08:cb:13:16:dd:b6:7f: 30:82:a5:cc:30:4e:4f:e8:bd:82:f8:38:06:58:2c: df:1d:cc:95:c9:00:a4:e0:d0:7a:ad:8e:c6:9e:d0: 45:68:57:6a:db:37:34:f8:5d:5d:21:23:ea:c3:08: 62:d1:dc:2c:0f:f5:c1:e1:50:e3:fe:06:d8:61:45: 6b:0a:cc:4d:21:30:dc:5c:49:75:a4:b9:fd:14:81: c7:7c:ee:1a:c2:d5:91:23:67:ba:bc:d1:0b:98:ef: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3F:F9:E0:D8:18:0E:E6:B4:E0:AA:1E:A2:0F:A6:2B:8D:6A:40:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 168.99.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f9:38:da:74:a5:f4:11:49:90:b4:98:fd:80:11:00:98:e9: 1e:48:50:99:e5:d0:10:44:f1:b8:3d:f5:59:c0:72:56:09:a7: 28:07:e5:19:75:e2:b2:85:36:05:45:cb:39:01:7f:8a:89:b6: 4a:5e:34:66:c5:c4:51:c4:d3:08:bb:45:8a:77:a6:32:79:b6: a5:84:bb:25:8e:e8:c6:e8:80:a2:c1:4c:25:db:23:cb:37:de: 51:25:ab:0c:16:57:19:59:08:be:9d:ae:dc:df:86:85:60:c8: 63:cf:57:8f:5e:0a:2a:87:ad:9b:a7:0c:02:8e:ff:b3:20:dc: b2:d3:d0:52:b6:74:e9:26:7f:1a:7a:9a:f6:76:a4:80:68:d0: 52:e0:42:f1:c4:9e:22:86:c6:9c:38:fb:99:a7:10:e9:0c:02: 4f:62:79:b0:74:23:3f:70:b2:e5:03:8a:e6:58:37:37:62:4f: 2c:52:31:66:8c:6f:51:d3:a5:4c:34:3f:20:97:30:ce:53:2f: 6a:98:8a:68:50:c2:15:e1:d1:a0:38:3f:93:5f:e4:67:fd:34: 4f:c5:06:4a:8a:c3:11:6a:97:42:c4:8d:89:d5:2b:46:16:0d: 46:42:81:89:4f:d7:06:9b:28:5a:28:f7:c2:68:88:2a:3c:5b: f0:c9:1e:c9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsfAXWPCgMNx/34I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODBkY2EwYjQtM2E1NC00NzllLTkyNDItNzkzNWI0NTcwYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifNThTcsmDX9rjbhy5VDcJoh0qDfXBO+unnG gsNKVfUuumXkfdrDZNgY5s7Ca4fzqyTP1ExUA+9AMbOSYNY1BzGL9nSRoQ7w109l 0t7AyczAdU7ihV4h4ERMZ5r7vYpSKrCWZ6aKSYyBvZ7Q+6zlVfmgd3Vq8OlednDc 3Ty3GRfuSj6lvHosVAOuojkjgPYIRCpFvuAyAvUVHGn02gjLExbdtn8wgqXMME5P 6L2C+DgGWCzfHcyVyQCk4NB6rY7GntBFaFdq2zc0+F1dISPqwwhi0dwsD/XB4VDj /gbYYUVrCsxNITDcXEl1pLn9FIHHfO4awtWRI2e6vNELmO8xJQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPE/+eDYGA7mtOCqHqIPpiuNakA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvMmEwZDY1ZjQtMGJmOC0z NzMzLTgyNTAtMjAwZTc2MzRhODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqGMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIvk42nSl9BFJkLSY/YARAJjpHkhQmeXQEETxuD31WcByVgmnKAflGXXi soU2BUXLOQF/iom2Sl40ZsXEUcTTCLtFinemMnm2pYS7JY7oxuiAosFMJdsjyzfe USWrDBZXGVkIvp2u3N+GhWDIY89Xj14KKoetm6cMAo7/syDcstPQUrZ06SZ/Gnqa 9nakgGjQUuBC8cSeIobGnDj7macQ6QwCT2J5sHQjP3Cy5QOK5lg3N2JPLFIxZoxv UdOlTDQ/IJcwzlMvapiKaFDCFeHRoDg/k1/kZ/00T8UGSorDEWqXQsSNidUrRhYN RkKBiU/XBpsoWij3wmiIKjxb8MkeyQ== -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:29 2025 by rpki-client