$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa File: 3f9ad2a5-8547-3650-a790-25df90ed3852.roa (raw, json) Hash identifier: uds6p7R+nAJDI1DzlOZtVQaR0ZBZKhMZZETIk7mww9g= Subject key identifier: FA:07:A9:41:45:D8:3E:82:E1:93:84:58:BA:22:BC:E4:54:1C:90:E5 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584B7C875E973A4D7D43E51BF700 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 395807 IP address blocks: 199.60.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5e:97:3a:4d:7d:43:e5:1b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=70b50061-c375-419c-a722-36d176b8e7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:5c:56:7e:2f:90:a3:3e:94:9b:b6:e7:2e: 4b:4c:b4:cd:b6:6d:77:27:75:04:ed:b6:c5:6a:82: b1:83:58:d3:4b:9d:6e:97:f3:b2:bc:05:82:de:af: 01:aa:81:c0:bd:6e:d0:b1:f9:e9:8c:cd:d5:ce:e1: e9:c3:b5:27:75:bf:14:74:4e:cb:a6:e2:a2:ae:33: 87:4e:7d:31:00:ba:fb:49:9d:db:d5:21:33:1f:71: db:3d:68:f1:87:17:ed:59:6b:bf:9d:22:22:e5:78: 05:4c:0e:13:90:d9:f1:4a:a6:40:bc:fb:60:dc:a3: 24:c9:1d:ee:f3:02:46:8a:12:0e:c0:e4:ea:b8:a8: 0f:7c:b9:9d:de:be:f4:bb:92:25:19:85:93:ef:02: 81:31:f5:72:43:67:32:b8:c8:13:c1:3f:24:c9:36: 39:26:12:3a:02:3e:46:7e:0a:ab:ba:20:37:e0:37: ad:a4:bc:23:d7:98:20:29:e4:7e:20:1c:34:f4:e0: 36:9e:fe:23:44:1a:df:4c:99:58:ce:2b:9f:a3:ea: 73:ea:4a:4f:c3:17:4e:96:bd:a9:12:54:92:83:d6: 4f:7a:35:09:84:bf:70:5f:39:78:a7:d4:0a:80:a0: b9:ba:74:9d:7a:5f:b7:33:ae:06:27:8f:2f:c8:34: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:07:A9:41:45:D8:3E:82:E1:93:84:58:BA:22:BC:E4:54:1C:90:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:83:76:b4:93:dd:bf:1b:c3:fb:6c:2d:0d:f6:9c:35:27:65: 5e:66:3a:d6:26:37:e8:fd:3f:6b:8f:b9:87:a7:57:f1:6d:8d: f7:8e:d6:c4:9e:de:6e:5a:18:c0:58:6e:82:b3:f5:5f:7a:5d: 3a:04:38:a1:9f:97:40:74:fc:f3:e0:46:2f:f8:8d:1c:ef:6d: 32:72:49:f0:a6:12:25:a0:e4:fd:25:cd:1f:a6:3f:da:e8:68: 50:62:3b:0e:8f:13:03:a9:37:b5:50:df:09:08:21:54:5e:44: f0:06:1f:49:20:fa:1f:27:b1:3d:0f:43:f9:74:0e:a5:c2:f8: 39:20:a8:87:94:7c:45:6b:35:39:cc:ad:e1:3a:c9:71:07:34: f8:1b:e9:29:e0:6c:40:50:a5:9c:00:15:df:0c:89:17:9a:2a: ed:bf:41:83:8a:c5:c1:2f:18:17:7b:44:56:fd:23:e1:ed:de: 33:81:50:c4:ae:47:b3:51:a5:b2:33:42:a0:76:02:7f:1c:e7: 53:51:6a:21:f9:ec:ca:44:e8:46:70:e1:2b:1e:e2:38:cb:06: 65:da:ef:18:09:5a:0b:1e:c5:a2:15:e9:1b:3c:69:e9:9b:8d: 1b:51:3b:e1:36:9e:28:8e:d2:9d:5c:a3:19:4f:0e:55:61:d4: f7:13:38:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h16XOk19Q+Ub9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NzBiNTAwNjEtYzM3NS00MTljLWE3MjItMzZkMTc2YjhlN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhVcVn4vkKM+lJu25y5LTLTNtm13J3UE7bbF aoKxg1jTS51ul/OyvAWC3q8BqoHAvW7QsfnpjM3VzuHpw7Undb8UdE7LpuKirjOH Tn0xALr7SZ3b1SEzH3HbPWjxhxftWWu/nSIi5XgFTA4TkNnxSqZAvPtg3KMkyR3u 8wJGihIOwOTquKgPfLmd3r70u5IlGYWT7wKBMfVyQ2cyuMgTwT8kyTY5JhI6Aj5G fgqruiA34DetpLwj15ggKeR+IBw09OA2nv4jRBrfTJlYziufo+pz6kpPwxdOlr2p ElSSg9ZPejUJhL9wXzl4p9QKgKC5unSdel+3M64GJ48vyDSBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoHqUFF2D6C4ZOEWLoivORUHJDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvM2Y5YWQyYTUtODU0Ny0z NjUwLWE3OTAtMjVkZjkwZWQzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxzyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGDdrST3b8bw/tsLQ32nDUnZV5mOtYmN+j9P2uPuYenV/FtjfeO1sSe 3m5aGMBYboKz9V96XToEOKGfl0B0/PPgRi/4jRzvbTJySfCmEiWg5P0lzR+mP9ro aFBiOw6PEwOpN7VQ3wkIIVReRPAGH0kg+h8nsT0PQ/l0DqXC+DkgqIeUfEVrNTnM reE6yXEHNPgb6SngbEBQpZwAFd8MiReaKu2/QYOKxcEvGBd7RFb9I+Ht3jOBUMSu R7NRpbIzQqB2An8c51NRaiH57MpE6EZw4Sse4jjLBmXa7xgJWgsexaIV6Rs8aemb jRtRO+E2niiO0p1coxlPDlVh1PcTOGE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:03:25 2025 by rpki-client