$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa File: 3fb48407-4606-35a4-99e8-1568ddbd9809.roa (raw, json) Hash identifier: HrJy62uv6vSvhxd2zaSuGUy/W9/WAYwhFOqkoCqu+2E= Subject key identifier: 1E:8C:08:03:63:93:D8:39:CF:D9:39:F7:8C:0A:78:CE:E7:06:51:E8 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584B6A61EAC151B2B690F5987000 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 55293 IP address blocks: 209.124.88.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ea:c1:51:b2:b6:90:f5:98:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=216b9af8-d9eb-4351-9df7-167f319107c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3c:d1:aa:6e:89:04:e6:b4:f0:b6:73:b7:5b: db:0f:15:95:f8:d6:8e:42:46:dc:c2:e0:5f:df:7e: 80:f9:98:25:1e:88:b0:2d:07:36:d5:97:b9:ab:b2: 9e:2f:33:98:32:c4:39:bf:fa:95:fd:39:1c:14:7c: b1:84:34:9d:d5:38:36:d9:89:19:17:10:f8:08:e4: 46:f8:e2:b9:a3:a5:28:df:95:ef:6f:1e:a6:58:d6: fa:e3:a0:eb:14:28:0a:99:3d:b3:cf:96:6e:d7:de: f7:f6:8a:65:0e:30:bc:89:5c:d3:8d:3a:5c:68:1c: ee:34:1f:a9:27:fd:d0:e1:2e:f5:a2:3f:1b:4f:08: 13:34:e8:44:af:24:91:f8:aa:11:7f:b5:7b:e9:1b: c9:73:cf:65:62:73:0c:25:e6:d4:71:8b:d0:97:91: 82:1d:de:3b:05:d6:2f:73:43:43:39:b2:a1:02:cb: 9c:e3:e9:4a:2b:34:c8:fb:92:c0:cf:d9:66:6c:53: 40:7b:b1:d5:44:e8:34:3c:37:23:ab:22:65:42:5b: c5:22:94:f7:a6:1d:5c:29:f9:07:4a:bc:71:0d:59: 35:e5:a6:66:5a:7e:4e:dd:1a:3a:55:f3:6f:e6:8c: 61:c8:fe:3e:44:87:f0:93:f6:32:57:ad:44:25:77: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8C:08:03:63:93:D8:39:CF:D9:39:F7:8C:0A:78:CE:E7:06:51:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 209.124.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:87:30:e4:73:3f:87:6b:0c:91:ff:3c:6d:6c:00:7c:d3:7f: b7:1d:c1:c8:17:84:75:7f:04:3b:78:91:29:d2:9a:f1:d8:2e: 2b:14:60:d2:b3:f7:66:86:1c:a2:bc:6b:16:35:71:0f:fb:67: 25:2b:13:19:58:21:b7:93:92:6c:fb:d4:23:3e:5d:a7:5c:aa: 68:81:35:8c:58:d9:1b:81:30:b2:b6:d6:cf:54:d7:82:61:b2: cf:3c:da:03:f6:57:ea:ff:9d:2d:9c:fd:0a:b0:14:d4:e1:55: d0:bc:6b:05:c5:dc:48:cb:0f:6e:0a:d5:0f:5f:77:5d:ee:88: fb:ac:f9:ac:cb:b8:f0:3b:1b:f3:37:0e:7f:7d:1e:e7:d6:23: d5:4e:7d:ad:78:e2:c5:cf:c5:8a:12:68:dd:86:9d:a2:b0:e5: 69:59:bf:f4:93:f3:5c:ad:22:9e:52:20:e3:6b:7f:67:e7:fa: ec:7f:16:0b:ee:96:7e:2d:a8:f8:72:59:7d:de:fe:4b:e8:73: 1d:06:73:53:f5:8e:55:c8:3a:73:0a:7b:40:69:d6:f6:89:2e: f2:0e:8a:7a:38:66:8c:7d:11:a0:39:9a:2b:a8:b5:26:57:b6: fa:a6:a9:f2:d1:42:9d:67:4b:c8:0a:2a:a7:4d:e1:15:47:a3: 8f:aa:ba:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYerBUbK2kPWYcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MjE2YjlhZjgtZDllYi00MzUxLTlkZjctMTY3ZjMxOTEwN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTzRqm6JBOa08LZzt1vbDxWV+NaOQkbcwuBf 336A+ZglHoiwLQc21Ze5q7KeLzOYMsQ5v/qV/TkcFHyxhDSd1Tg22YkZFxD4CORG +OK5o6Uo35Xvbx6mWNb646DrFCgKmT2zz5Zu19739oplDjC8iVzTjTpcaBzuNB+p J/3Q4S71oj8bTwgTNOhErySR+KoRf7V76RvJc89lYnMMJebUcYvQl5GCHd47BdYv c0NDObKhAsuc4+lKKzTI+5LAz9lmbFNAe7HVROg0PDcjqyJlQlvFIpT3ph1cKfkH SrxxDVk15aZmWn5O3Ro6VfNv5oxhyP4+RIfwk/YyV61EJXf2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6MCANjk9g5z9k594wKeM7nBlHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvM2ZiNDg0MDctNDYwNi0z NWE0LTk5ZTgtMTU2OGRkYmQ5ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6HMORzP4drDJH/PG1sAHzTf7cdwcgXhHV/BDt4kSnSmvHYLisUYNKz 92aGHKK8axY1cQ/7ZyUrExlYIbeTkmz71CM+XadcqmiBNYxY2RuBMLK21s9U14Jh ss882gP2V+r/nS2c/QqwFNThVdC8awXF3EjLD24K1Q9fd13uiPus+azLuPA7G/M3 Dn99HufWI9VOfa144sXPxYoSaN2GnaKw5WlZv/ST81ytIp5SIONrf2fn+ux/Fgvu ln4tqPhyWX3e/kvocx0Gc1P1jlXIOnMKe0Bp1vaJLvIOino4Zox9EaA5miuotSZX tvqmqfLRQp1nS8gKKqdN4RVHo4+qujo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:14 2025 by rpki-client