$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa File: 8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa (raw, json) Hash identifier: ZjKe6ukyLJTt+aoXoO8S14yq+vkJfdN0qzoiYEzXpG8= Subject key identifier: CB:68:0A:55:38:53:0F:E8:93:98:28:AB:3B:7E:81:79:B7:2C:CF:69 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB695BE2E5AA98EBE9280 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 209.237.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b6:95:be:2e:5a:a9:8e:be:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=d841faaf-54cd-4b1a-b9cc-82b795cbf365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:5e:ab:ab:b3:56:c9:1a:84:47:d2:e8:85: 88:3c:71:24:b8:97:de:21:ac:7f:bd:fb:d3:eb:2a: 22:8d:cd:13:69:a4:85:7d:1b:e2:28:e0:6a:66:f9: 70:0c:f8:8c:f9:74:15:b1:87:ca:2c:4e:9a:a6:09: c5:03:1e:4d:6b:17:b0:3b:5c:4c:01:72:e6:51:aa: 00:3d:eb:ae:ed:6d:25:1d:fa:31:47:c5:01:1a:0f: 1c:ae:a4:a5:74:cd:a3:ee:ce:d6:fb:c1:0f:2b:78: 73:8b:d4:f1:54:b6:3b:0c:8e:c7:b2:03:19:68:d5: b3:a5:05:70:69:85:fb:4f:f2:df:fb:56:3d:12:a4: d6:33:5b:f8:f4:bc:b7:3e:02:cf:e4:10:a6:1e:a9: ee:21:d0:83:74:d2:d8:fd:b3:cd:2f:9b:e5:d3:e0: 68:72:2e:f1:42:56:4e:bb:df:2b:96:fa:a1:db:ed: 80:c4:c3:b7:01:b2:72:89:4d:95:ce:bd:e4:90:82: 64:7f:15:41:2d:c3:4d:4d:2f:8f:da:cb:14:78:f0: b0:f8:ca:e7:fb:40:ee:8c:e8:fc:d1:c5:74:fe:6f: 01:10:29:b4:0f:16:f6:bc:0e:56:ff:a4:6e:85:a5: 59:e4:bd:cf:b0:aa:78:64:a9:a9:b7:03:1a:e7:35: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:0A:55:38:53:0F:E8:93:98:28:AB:3B:7E:81:79:B7:2C:CF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:18:53:5c:fe:70:15:b1:83:5e:d7:89:a4:6c:9c:f1:49:bd: db:1b:32:6f:18:7b:83:0c:23:1d:37:92:4f:bd:d0:2f:18:79: 8a:ed:82:99:3f:2f:fa:0d:7c:8f:6b:43:7b:be:0e:55:4a:7a: 05:26:f7:aa:67:81:03:03:94:90:04:89:d2:00:1b:4e:69:e2: e6:64:3d:e7:f3:65:a9:33:6e:b9:e4:01:74:5c:ad:a8:e1:e4: 8a:25:db:88:6a:11:82:cb:76:2a:47:bf:4f:17:09:51:83:fe: 15:53:dc:7e:24:b7:81:c8:36:9d:a2:55:eb:28:44:0e:e3:bc: a3:b9:d4:7d:b5:49:2d:e6:83:24:2c:49:06:36:83:73:f4:c3: 45:b5:c0:32:00:27:73:10:e7:60:e4:5a:25:f5:48:c0:3c:82: 17:76:f0:f6:58:9a:21:13:47:5b:3f:88:d9:73:f7:b3:66:6a: d6:30:a7:a2:bf:df:97:ac:cf:a7:96:54:fd:56:1c:e6:09:09: 8e:0a:81:03:5b:fe:c3:ee:80:70:e0:c0:ff:62:ca:73:48:2b: 18:25:4e:9a:ad:97:56:47:45:64:ed:46:bf:04:f8:ed:d0:12: 32:f3:1b:12:52:11:1f:c9:ab:72:a2:c4:7b:9a:6e:24:71:ec: 10:06:0f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLaVvi5aqY6+koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZDg0MWZhYWYtNTRjZC00YjFhLWI5Y2MtODJiNzk1Y2JmMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHleq6uzVskahEfS6IWIPHEkuJfeIax/vfvT 6yoijc0TaaSFfRviKOBqZvlwDPiM+XQVsYfKLE6apgnFAx5NaxewO1xMAXLmUaoA Peuu7W0lHfoxR8UBGg8crqSldM2j7s7W+8EPK3hzi9TxVLY7DI7HsgMZaNWzpQVw aYX7T/Lf+1Y9EqTWM1v49Ly3PgLP5BCmHqnuIdCDdNLY/bPNL5vl0+Boci7xQlZO u98rlvqh2+2AxMO3AbJyiU2Vzr3kkIJkfxVBLcNNTS+P2ssUePCw+Mrn+0DujOj8 0cV0/m8BECm0Dxb2vA5W/6RuhaVZ5L3PsKp4ZKmptwMa5zXnMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtoClU4Uw/ok5goqzt+gXm3LM9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOGMzMzk1YzItOWE1Zi0z Zjg4LWEyZmItMzcwMmM4Zjc1YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoYU1z+cBWxg17XiaRsnPFJvdsbMm8Ye4MMIx03kk+90C8YeYrtgpk/ L/oNfI9rQ3u+DlVKegUm96pngQMDlJAEidIAG05p4uZkPefzZakzbrnkAXRcrajh 5Iol24hqEYLLdipHv08XCVGD/hVT3H4kt4HINp2iVesoRA7jvKO51H21SS3mgyQs SQY2g3P0w0W1wDIAJ3MQ52DkWiX1SMA8ghd28PZYmiETR1s/iNlz97NmatYwp6K/ 35esz6eWVP1WHOYJCY4KgQNb/sPugHDgwP9iynNIKxglTpqtl1ZHRWTtRr8E+O3Q EjLzGxJSER/Jq3KixHuabiRx7BAGD98= -----END CERTIFICATE-----Generated at Mon Oct 20 20:35:33 2025 by rpki-client