$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json) Hash identifier: g23cM2YeQdUALE8raarykUiCmOB8xS7Vin8tHfaiLZQ= Subject key identifier: 62:5D:23:63:96:5B:07:92:E3:26:C3:A1:7F:A3:CE:D8:60:8D:9B:19 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB66B757998B2847F7B00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 208.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b6:6b:75:79:98:b2:84:7f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9ca536e2-7e44-4789-84d5-98b0dc046ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:6e:63:13:bd:c4:ad:54:c9:7b:30:4a:06: ea:43:ce:fa:e4:14:d8:45:d7:38:f8:eb:63:97:ae: d2:33:a2:0d:4e:3b:92:33:7c:0f:e8:b2:80:b0:8a: 2c:3f:8d:0b:f6:f9:68:82:f2:07:29:03:32:2d:98: 8a:68:61:24:f7:00:c9:21:4b:bd:58:e0:01:cb:dd: e6:35:66:6f:1a:98:f2:72:01:37:01:3a:f9:8d:2e: 42:ae:48:df:ef:07:81:11:be:2d:49:70:60:9e:56: fc:ca:89:6f:c8:18:59:37:68:fa:b1:62:1e:3f:33: bf:24:a6:7c:b6:53:13:6e:6b:a4:2d:22:ed:fb:c7: be:9e:f7:0d:7a:eb:d1:9f:a3:28:a6:c3:77:04:c5: 97:b4:72:ad:bd:4b:2a:f6:d8:a9:61:22:78:10:56: fc:94:67:5f:87:f1:bc:ba:3f:cf:a1:59:81:f0:87: 8b:b2:53:06:53:9f:ec:0d:2d:38:5d:33:74:28:01: 72:e1:ca:8c:41:1f:2a:bc:ba:d5:05:97:1b:6b:df: c3:7e:72:da:88:4b:85:f4:8f:a0:66:46:1d:5d:2d: 9c:c6:65:b4:01:f6:de:8d:42:cd:bd:21:28:49:7b: fc:a2:86:1f:97:72:94:06:a5:22:2e:20:28:7c:77: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:23:63:96:5B:07:92:E3:26:C3:A1:7F:A3:CE:D8:60:8D:9B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2f:2f:e2:2b:db:18:72:8e:46:37:8c:5a:82:7d:c3:3a:4f: cc:40:ca:1c:10:7e:f5:f5:78:45:a3:83:31:ac:09:ae:a9:37: d3:a6:aa:a7:ef:64:18:31:37:e2:ed:88:4f:81:67:5f:9f:f4: 30:13:6d:d2:b0:6b:35:ed:35:0c:3e:80:ae:b2:d7:1b:c2:18: 54:49:56:56:0b:67:3b:49:f0:80:53:53:da:9c:aa:59:77:f7: 6e:44:3b:ee:54:64:7f:ef:39:62:f6:03:a4:53:28:5e:64:9c: fc:42:8b:5a:68:7b:3d:47:77:1f:3b:a6:f9:f3:57:4f:b6:bb: e6:5b:2d:5a:03:02:06:9f:3b:a0:ce:93:99:fa:e8:d4:56:9d: 0c:32:0c:59:60:df:eb:95:cc:15:3e:e3:0c:a2:e1:04:ea:21: 74:e9:3b:12:2a:6d:c3:b9:90:be:50:ac:b6:fd:a6:54:ac:9a: f7:94:14:78:1a:6e:38:dc:d5:9d:86:87:3b:21:31:e6:42:3f: 0b:24:6c:7d:63:ac:4c:e8:3b:d6:61:61:7c:89:d1:31:65:4d: 01:81:55:16:bb:4e:3f:3d:1b:82:e7:6f:53:20:3d:82:a6:67: c7:1a:e7:15:5f:ea:63:7e:f4:b9:50:ee:64:46:fc:49:85:f7: 3f:6b:99:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLZrdXmYsoR/ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWNhNTM2ZTItN2U0NC00Nzg5LTg0ZDUtOThiMGRjMDQ2YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6xuYxO9xK1UyXswSgbqQ8765BTYRdc4+Otj l67SM6INTjuSM3wP6LKAsIosP40L9vlogvIHKQMyLZiKaGEk9wDJIUu9WOABy93m NWZvGpjycgE3ATr5jS5Crkjf7weBEb4tSXBgnlb8yolvyBhZN2j6sWIePzO/JKZ8 tlMTbmukLSLt+8e+nvcNeuvRn6MopsN3BMWXtHKtvUsq9tipYSJ4EFb8lGdfh/G8 uj/PoVmB8IeLslMGU5/sDS04XTN0KAFy4cqMQR8qvLrVBZcba9/DfnLaiEuF9I+g ZkYdXS2cxmW0AfbejULNvSEoSXv8ooYfl3KUBqUiLiAofHfGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJdI2OWWweS4ybDoX+jzthgjZsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIvL+Ir2xhyjkY3jFqCfcM6T8xAyhwQfvX1eEWjgzGsCa6pN9Omqqfv ZBgxN+LtiE+BZ1+f9DATbdKwazXtNQw+gK6y1xvCGFRJVlYLZztJ8IBTU9qcqll3 925EO+5UZH/vOWL2A6RTKF5knPxCi1poez1Hdx87pvnzV0+2u+ZbLVoDAgafO6DO k5n66NRWnQwyDFlg3+uVzBU+4wyi4QTqIXTpOxIqbcO5kL5QrLb9plSsmveUFHga bjjc1Z2GhzshMeZCPwskbH1jrEzoO9ZhYXyJ0TFlTQGBVRa7Tj89G4Lnb1MgPYKm Z8ca5xVf6mN+9LlQ7mRG/EmF9z9rmZk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:44:11 2025 by rpki-client