$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa File: be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa (raw, json) Hash identifier: 80QpnkG9RN4YXE2zx1Xx+skxdmSN2F5Zlhc2Rw0sph8= Subject key identifier: FB:92:9D:36:8E:BC:6C:C8:F1:CB:EE:92:1D:CC:3E:21:42:FC:56:20 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B328C3E199AE28C363AA484E0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 26565 IP address blocks: 209.237.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3e:19:9a:e2:8c:36:3a:a4:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=564442bb-72a4-4913-8df2-81f96d8970e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:14:00:54:5a:ff:36:ed:d2:d1:08:ad:53: 34:e2:03:7c:ae:16:7c:20:e6:7f:5d:d5:71:2e:51: 0b:20:35:2e:1a:82:4f:c9:5a:0b:60:ea:ed:38:75: 05:a3:6f:bd:08:cc:31:7b:e8:b0:21:f9:b8:1d:73: 44:71:57:60:89:8c:c4:d3:de:76:4a:0e:09:e1:88: 45:ab:dd:a6:10:3c:cc:c3:02:1b:ef:da:b2:ce:73: 52:ff:60:8b:20:6c:1b:d2:c1:e0:8d:d4:ab:6b:19: 95:bb:47:22:4b:99:04:00:7a:34:1c:62:06:fe:cc: 57:a5:e8:9c:d3:ec:8b:a3:1d:80:32:1d:5f:93:e1: 31:7c:05:a9:e7:94:1a:3a:5e:f8:1d:5a:38:f0:ea: d6:08:78:8d:f0:32:99:e5:12:6d:dd:2a:a2:e8:a7: 26:7f:5a:58:42:8c:bd:01:bb:a3:df:a3:af:99:1c: c2:53:f4:6b:1b:d3:dc:5a:24:ee:cb:a2:c7:fb:1c: aa:cf:2c:12:ae:e9:5c:8a:d2:a5:7b:ad:32:67:b4: 1d:f4:c4:53:1c:4c:f0:e0:e0:0c:41:ea:fe:20:c4: 79:ec:04:dc:06:57:bc:2c:80:2e:22:21:3f:0f:b5: d4:19:41:51:40:03:aa:54:f4:a1:fd:a7:00:f3:63: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:92:9D:36:8E:BC:6C:C8:F1:CB:EE:92:1D:CC:3E:21:42:FC:56:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c7:a4:15:84:4b:bc:cd:75:08:84:f4:41:eb:74:36:b0:05: dd:dd:21:02:33:4f:d2:ee:dd:a6:34:8a:a9:0f:12:40:60:95: 3c:dc:95:fa:49:91:70:57:b9:82:9a:b8:ae:f7:f1:e4:4b:2c: 6f:8a:b1:90:78:d1:28:42:82:2b:72:ab:c9:0b:c6:e6:5a:cf: 78:29:f0:68:34:44:8f:f2:47:71:58:ac:0b:d7:79:9e:f9:f2: 05:0c:f1:2b:3c:20:b4:f1:f9:3c:61:ae:ae:57:55:5c:f2:16: 46:63:9a:1a:1b:87:5c:87:e8:41:83:ed:28:63:c6:76:a2:b4: ae:c4:1f:66:62:18:d2:63:d6:ba:11:e0:a4:8f:de:a1:ad:b6: 48:8b:e6:81:58:cf:b9:95:5d:0a:4a:c1:ca:37:92:4e:80:95: 81:d3:58:96:04:12:9c:15:32:e4:63:66:0c:68:62:fc:37:95: 76:97:f6:a2:4f:66:49:5d:7f:b1:12:12:28:7a:25:48:b6:3e: dd:f2:9e:21:c2:dc:73:cb:b5:80:d4:0e:af:dd:74:f1:00:d6: de:2b:e5:a1:ac:94:a5:be:20:1b:52:d2:66:18:1d:01:61:d0: 07:79:34:20:e6:6b:0c:bb:4c:aa:e4:03:bc:19:0c:a8:4c:e8: d5:2e:0a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjD4ZmuKMNjqkhOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NTY0NDQyYmItNzJhNC00OTEzLThkZjItODFmOTZkODk3MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWIUAFRa/zbt0tEIrVM04gN8rhZ8IOZ/XdVx LlELIDUuGoJPyVoLYOrtOHUFo2+9CMwxe+iwIfm4HXNEcVdgiYzE0952Sg4J4YhF q92mEDzMwwIb79qyznNS/2CLIGwb0sHgjdSraxmVu0ciS5kEAHo0HGIG/sxXpeic 0+yLox2AMh1fk+ExfAWp55QaOl74HVo48OrWCHiN8DKZ5RJt3Sqi6Kcmf1pYQoy9 Abuj36OvmRzCU/RrG9PcWiTuy6LH+xyqzywSrulcitKle60yZ7Qd9MRTHEzw4OAM Qer+IMR57ATcBle8LIAuIiE/D7XUGUFRQAOqVPSh/acA82MnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuSnTaOvGzI8cvukh3MPiFC/FYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmUyYjE4ODAtY2U5ZC0z YjE2LTlhOWEtYjViNzEzZWYyYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjHpBWES7zNdQiE9EHrdDawBd3dIQIzT9Lu3aY0iqkPEkBglTzclfpJ kXBXuYKauK738eRLLG+KsZB40ShCgityq8kLxuZaz3gp8Gg0RI/yR3FYrAvXeZ75 8gUM8Ss8ILTx+Txhrq5XVVzyFkZjmhobh1yH6EGD7ShjxnaitK7EH2ZiGNJj1roR 4KSP3qGttkiL5oFYz7mVXQpKwco3kk6AlYHTWJYEEpwVMuRjZgxoYvw3lXaX9qJP Zkldf7ESEih6JUi2Pt3yniHC3HPLtYDUDq/ddPEA1t4r5aGslKW+IBtS0mYYHQFh 0Ad5NCDmawy7TKrkA7wZDKhM6NUuCiU= -----END CERTIFICATE-----Generated at Tue Oct 21 02:21:55 2025 by rpki-client