$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa File: cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa (raw, json) Hash identifier: MpKtPGtUyd874Zg531bmN9mPBKPcjk3s0n8ZA3S+uRg= Subject key identifier: 7C:AB:8A:F2:EF:E0:09:E2:FC:DC:2D:F1:34:46:38:D0:A7:09:03:40 Certificate issuer: /CN=0fadf4aa-e313-41fe-a7a1-685c7681ead2 Certificate serial: 010D0C9F4328584B21CC1A9CD0A19290D798B900 Authority key identifier: B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 394015 IP address blocks: 172.93.124.0/22 maxlen: 24 2620:131:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1a:9c:d0:a1:92:90:d7:98:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fadf4aa-e313-41fe-a7a1-685c7681ead2 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=9f87d597-d054-4eca-8727-a8d7222e6354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:f7:a7:36:59:6b:12:23:51:98:58:72:ba: 86:3d:12:c0:45:21:eb:2b:2f:db:bf:32:93:b1:3b: 4d:29:18:3c:d4:dd:f7:5f:e7:73:5b:44:a9:7b:98: ce:34:47:80:de:33:4c:de:e0:6f:40:08:aa:e6:da: 04:ff:c2:0d:c0:5f:85:e4:e5:f4:d0:c3:47:ca:01: a6:8e:c4:d3:ef:1c:dc:4d:0d:64:eb:c6:81:4a:d2: fb:66:30:45:4c:23:3b:da:54:18:87:c0:74:3f:99: 50:2d:a5:e6:03:d7:78:a6:60:db:5c:3c:01:20:fb: a6:31:04:4c:57:71:87:e9:2c:ab:41:cf:ee:36:6d: 89:67:fc:10:65:ea:c2:b6:36:08:d8:b4:7e:c2:67: d4:69:8d:02:e2:3c:10:a2:f7:c1:b8:80:11:2b:05: 31:67:e3:ce:a9:c3:75:0a:4a:2a:f4:d4:ee:8f:e3: 44:0e:99:0e:c2:49:14:06:b0:53:66:d4:9b:65:ba: 30:80:d0:6d:b1:62:1d:f3:d3:ce:66:f2:16:b7:0b: 09:48:97:44:a8:37:a2:0b:a1:41:6c:ac:85:ba:2c: 53:ab:f1:9f:c8:fc:df:72:32:cb:af:35:c5:17:c9: 45:91:cc:51:35:bb:ed:7b:88:43:21:7a:e8:86:95: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AB:8A:F2:EF:E0:09:E2:FC:DC:2D:F1:34:46:38:D0:A7:09:03:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.crl X509v3 Authority Key Identifier: keyid:B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer sbgp-ipAddrBlock: critical IPv4: 172.93.124.0/22 IPv6: 2620:131:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:cf:55:83:b0:5a:19:f5:38:92:64:6d:6b:1c:ed:6a:38:ed: c6:86:1a:46:b5:f8:e8:f6:40:eb:11:db:3e:b9:8a:f8:56:e2: 83:24:22:33:06:22:4a:6b:cb:45:77:47:e2:38:98:72:e5:28: 8d:a1:16:b3:8f:7c:4b:a9:b1:1a:00:cf:28:ea:36:f4:df:ac: d4:8a:99:0c:64:1a:d4:f1:1e:30:33:e0:05:b1:fe:e1:96:d3: ea:78:6b:0d:52:b5:ee:72:95:bb:87:4d:5e:f4:e9:4d:cc:cb: 88:78:f3:7e:57:87:4a:00:a7:bd:5b:8a:2d:82:2d:be:f3:3c: a6:02:8f:85:b1:8a:6f:0a:dc:23:9b:2f:81:12:05:1b:0c:21: 1c:5e:67:6e:f4:ba:d5:cf:c1:8f:41:78:8e:c7:dc:a8:c9:17: c3:4b:71:8c:a2:d8:ac:15:fb:6f:bc:46:ea:b4:c4:99:39:02: c8:1a:6f:88:42:18:74:da:93:00:38:37:6e:77:c9:bf:26:90: fb:49:3b:61:7a:21:ae:8f:55:05:11:c2:bf:b2:04:a9:23:ed: f4:6f:b3:69:b4:63:49:43:4e:a2:11:fc:4f:f8:bc:67:df:a6: 82:a4:ab:ad:bc:27:b1:42:25:48:45:97:8b:38:3e:35:aa:55: 3e:54:49:a6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEshzBqc0KGSkNeYuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZhZGY0YWEtZTMxMy00MWZlLWE3YTEtNjg1Yzc2ODFl YWQyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OWY4N2Q1OTctZDA1NC00ZWNhLTg3MjctYThkNzIyMmU2MzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrT3pzZZaxIjUZhYcrqGPRLARSHrKy/bvzKT sTtNKRg81N33X+dzW0Spe5jONEeA3jNM3uBvQAiq5toE/8INwF+F5OX00MNHygGm jsTT7xzcTQ1k68aBStL7ZjBFTCM72lQYh8B0P5lQLaXmA9d4pmDbXDwBIPumMQRM V3GH6SyrQc/uNm2JZ/wQZerCtjYI2LR+wmfUaY0C4jwQovfBuIARKwUxZ+POqcN1 Ckoq9NTuj+NEDpkOwkkUBrBTZtSbZbowgNBtsWId89POZvIWtwsJSJdEqDeiC6FB bKyFuixTq/GfyPzfcjLLrzXFF8lFkcxRNbvte4hDIXrohpUx0QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHyrivLv4Ani/Nwt8TRGONCnCQNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZmFk ZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVjNzY4MWVhZDIvY2Q3ZDU1ZTEtNTJmZi0z NmU3LWE2ZTktMWZiZGRjYTE0ZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGZhZGY0YWEtZTMxMy00MWZlLWE3 YTEtNjg1Yzc2ODFlYWQyLzBmYWRmNGFhLWUzMTMtNDFmZS1hN2ExLTY4NWM3Njgx ZWFkMi5jcmwwHwYDVR0jBBgwFoAUs0jP/uyql5C29/0u9TMA4A1u8ekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZmFkZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVj NzY4MWVhZDIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCrF18MA4E AgACMAgDBgAmIAExQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDPz1WDsFoZ9TiSZG1rHO1qOO3GhhpGtfjo 9kDrEds+uYr4VuKDJCIzBiJKa8tFd0fiOJhy5SiNoRazj3xLqbEaAM8o6jb036zU ipkMZBrU8R4wM+AFsf7hltPqeGsNUrXucpW7h01e9OlNzMuIePN+V4dKAKe9W4ot gi2+8zymAo+FsYpvCtwjmy+BEgUbDCEcXmdu9LrVz8GPQXiOx9yoyRfDS3GMotis FftvvEbqtMSZOQLIGm+IQhh02pMAODdud8m/JpD7STtheiGuj1UFEcK/sgSpI+30 b7NptGNJQ06iEfxP+Lxn36aCpKutvCexQiVIRZeLOD41qlU+VEmm -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:43 2025 by rpki-client