$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa File: 9ec58a3b-8704-3120-b6b5-10e77d09643b.roa (raw, json) Hash identifier: p+Xp6lACbMSRLh7SNytBWJ32ujTl0waJgZINrd6S3iw= Subject key identifier: 4C:B4:C4:4C:2D:00:38:CA:C6:59:56:D3:05:10:14:55:47:43:88:48 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584B92DCEAAEF6D79FAC6916B780 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 11650 IP address blocks: 159.242.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:ea:ae:f6:d7:9f:ac:69:16:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=c0a5cb54-ee3a-4e22-835f-054ef7368a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:54:48:57:17:9b:92:1a:61:49:cd:c0:c7: 8f:5e:a7:3e:18:93:06:76:6c:63:91:8a:90:0b:e2: 3f:b7:92:0c:67:a1:f5:df:68:0f:c1:9a:e3:01:c8: 8a:d6:be:59:34:ef:69:25:43:9d:ed:12:be:71:83: 0f:15:86:ec:3d:ec:f3:5c:a9:52:cb:c3:b8:43:26: 3d:0b:e7:82:84:3f:6c:ac:3c:dd:4f:22:ed:bc:b7: d1:f8:a3:cf:2b:bd:1d:95:f8:98:d3:d3:e1:49:e0: 19:eb:bf:fb:42:6d:e2:9c:cf:37:3a:68:60:45:ce: 6e:cc:e5:35:70:bf:ea:79:f0:1e:27:52:a3:d6:c8: 11:b4:2f:96:a2:0c:a0:e0:7f:91:b8:dc:71:43:57: f5:4a:55:aa:dc:c3:a8:d2:82:ff:df:cb:d7:79:7a: 1a:cd:1e:a9:aa:02:97:1b:ba:52:c5:22:2a:e0:76: 55:7c:c3:f1:30:30:f5:5f:d3:30:85:44:23:c2:83: 63:4e:65:59:8e:2a:02:2b:1b:af:67:71:4a:14:81: 40:cb:6c:dd:94:b9:d9:12:9c:a7:b8:cd:30:44:b7: 43:6c:1d:ba:1f:13:ee:53:34:f3:c2:1e:08:c6:9b: 30:66:30:75:d9:29:be:6f:6d:9a:b3:a5:5b:0d:23: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B4:C4:4C:2D:00:38:CA:C6:59:56:D3:05:10:14:55:47:43:88:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 159.242.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f7:e3:27:0f:aa:37:70:81:7f:fd:65:37:68:79:49:88:fc: 4e:54:97:2a:d0:ec:0f:54:a0:34:5f:25:9d:73:bd:2f:44:8f: 16:6e:5f:66:e7:f0:d7:9f:6d:ab:c7:41:66:d7:d1:c4:34:d4: 0b:55:70:d9:28:03:7f:e3:1c:ef:16:65:bc:3c:62:29:25:45: 52:64:6b:8c:f1:14:28:b5:01:e1:d4:6b:bd:7b:39:55:1a:cc: 9b:45:e8:40:1e:d3:e3:61:73:bc:2c:d5:f9:a0:a8:b6:8f:4b: 44:56:0d:a7:d4:a9:1d:20:1f:ac:5a:e7:02:2f:65:bc:a5:d3: a5:49:e3:c9:9b:5c:bf:a8:fe:96:bd:a5:88:49:ff:83:35:37: 2b:50:d3:5f:85:82:1c:cc:06:5d:e2:49:ec:69:94:4f:96:fa: 4f:29:6f:c2:bc:46:3c:15:55:b3:2e:6c:d6:b6:46:b6:87:07: b6:90:cc:44:80:b3:fb:5c:58:05:69:64:d4:3a:69:1d:c3:dd: 9b:a8:9c:b6:0e:af:f4:0c:da:18:2e:74:73:e1:74:f0:95:0b: e7:89:83:e6:f9:94:13:b8:67:0f:04:b5:e0:8a:30:7b:9b:df: 1b:36:fd:e6:70:ab:64:87:4b:44:73:23:47:bf:51:76:c7:0c: 1c:e1:3c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Oqu9tefrGkWt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YzBhNWNiNTQtZWUzYS00ZTIyLTgzNWYtMDU0ZWY3MzY4YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvRUSFcXm5IaYUnNwMePXqc+GJMGdmxjkYqQ C+I/t5IMZ6H132gPwZrjAciK1r5ZNO9pJUOd7RK+cYMPFYbsPezzXKlSy8O4QyY9 C+eChD9srDzdTyLtvLfR+KPPK70dlfiY09PhSeAZ67/7Qm3inM83OmhgRc5uzOU1 cL/qefAeJ1Kj1sgRtC+Wogyg4H+RuNxxQ1f1SlWq3MOo0oL/38vXeXoazR6pqgKX G7pSxSIq4HZVfMPxMDD1X9MwhUQjwoNjTmVZjioCKxuvZ3FKFIFAy2zdlLnZEpyn uM0wRLdDbB26HxPuUzTzwh4IxpswZjB12Sm+b22as6VbDSMO2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy0xEwtADjKxllW0wUQFFVHQ4hIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvOWVjNThhM2ItODcwNC0z MTIwLWI2YjUtMTBlNzdkMDk2NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn/LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT34ycPqjdwgX/9ZTdoeUmI/E5UlyrQ7A9UoDRfJZ1zvS9EjxZuX2bn 8NefbavHQWbX0cQ01AtVcNkoA3/jHO8WZbw8YiklRVJka4zxFCi1AeHUa717OVUa zJtF6EAe0+Nhc7ws1fmgqLaPS0RWDafUqR0gH6xa5wIvZbyl06VJ48mbXL+o/pa9 pYhJ/4M1NytQ01+FghzMBl3iSexplE+W+k8pb8K8RjwVVbMubNa2RraHB7aQzESA s/tcWAVpZNQ6aR3D3ZuonLYOr/QM2hgudHPhdPCVC+eJg+b5lBO4Zw8EteCKMHub 3xs2/eZwq2SHS0RzI0e/UXbHDBzhPIo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:47 2025 by rpki-client