$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a9df810-b5f3-39ba-8521-898fadd0ba3e.roa File: 3a9df810-b5f3-39ba-8521-898fadd0ba3e.roa (raw, json) Hash identifier: iDTg3y+ut0M/YVQr0ipndmnZreOVA5nPLBfPVEbrUdY= Subject key identifier: FD:98:66:BB:A3:32:0A:71:1C:C8:C4:46:B0:14:AD:43:09:93:28:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB79F7108FB84E26D265580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a9df810-b5f3-39ba-8521-898fadd0ba3e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 173.8.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:9f:71:08:fb:84:e2:6d:26:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a84432e8-f3e5-4e21-8713-b65a3983fd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:e9:0d:c5:fc:45:39:ef:0b:d3:7f:5f:91: 43:6c:df:51:aa:b7:f3:b5:7d:45:05:66:fc:30:53: 27:27:53:e2:e6:ed:74:cd:36:1a:b9:d4:5d:30:ef: 3c:17:fa:ab:8c:a4:cc:fc:38:42:1f:a4:a3:ec:13: d0:85:13:43:d3:b6:84:39:d5:01:a1:c9:84:4b:2b: 11:77:80:a2:56:db:3c:f2:4b:e6:71:ae:b9:86:b6: 87:de:dc:b2:ba:c1:e0:df:a8:70:42:f2:fa:05:a5: df:eb:08:74:ee:de:96:f6:c9:db:b6:92:54:ef:c6: 06:7b:63:b8:95:c7:0e:7d:39:46:3e:6b:af:7a:24: 5f:69:a7:be:cc:2f:8b:01:00:95:64:17:3c:91:1d: 22:2e:2a:b5:95:ae:89:a4:8c:8d:c0:94:03:6b:89: 0a:a5:cb:a4:93:04:d8:fa:61:6c:d4:7f:ce:dd:79: 8d:5f:e2:22:95:ed:d0:9f:62:30:68:11:7f:7f:50: 94:24:b4:14:7a:e6:76:75:cb:dc:04:64:ca:aa:bd: bd:46:eb:ea:69:9c:c7:39:ff:25:91:b8:94:44:cf: 40:46:8c:c4:81:5a:82:50:64:4b:62:38:39:66:ae: 77:94:f1:80:7c:54:7e:ce:0f:ac:8a:c6:74:2a:fc: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:98:66:BB:A3:32:0A:71:1C:C8:C4:46:B0:14:AD:43:09:93:28:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a9df810-b5f3-39ba-8521-898fadd0ba3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.8.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f1:b7:ba:0f:84:20:74:f0:45:9e:6e:04:f4:12:49:28:29: fc:5c:d9:e3:69:29:b4:85:de:81:9b:c8:29:8c:51:f0:6b:ce: eb:fb:32:26:d5:ac:1f:ec:d1:7b:40:a3:15:f5:08:1e:d4:b8: 77:33:a0:c1:83:cd:19:a9:ce:9c:18:6e:83:0f:d6:a9:e4:95: f4:aa:e0:ee:1e:fa:90:ee:60:72:dc:ec:66:c5:42:55:77:c6: 15:f7:06:19:1f:55:b0:d2:98:d4:a2:ca:a9:96:6d:b8:67:16: fd:de:b7:86:d1:6d:cb:c2:fe:02:50:b8:d7:e9:cd:6e:7b:55: b4:70:ee:de:e9:66:37:ee:4c:17:d3:26:a5:db:78:23:b8:20: 2a:a9:af:67:d7:34:71:07:ad:18:d3:2a:59:0d:4b:71:1f:3a: 27:97:b7:1b:ca:a2:53:94:e9:a0:2d:4a:d8:a8:cb:33:06:97: c0:7b:13:bc:75:a8:62:9e:1f:27:ad:54:da:c1:f0:71:96:4d: e0:30:d5:d5:36:00:b8:94:d3:d9:12:46:1f:29:6b:85:5a:fc: 26:f7:b9:0d:5c:3e:2d:ab:be:fc:14:74:f3:a1:1c:03:4a:79: fc:45:b1:47:17:d1:f7:f1:07:7f:5b:24:a6:b1:b4:4c:81:88: 5a:0a:ea:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t59xCPuE4m0mVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTg0NDMyZTgtZjNlNS00ZTIxLTg3MTMtYjY1YTM5ODNmZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVLpDcX8RTnvC9N/X5FDbN9RqrfztX1FBWb8 MFMnJ1Pi5u10zTYaudRdMO88F/qrjKTM/DhCH6Sj7BPQhRND07aEOdUBocmESysR d4CiVts88kvmca65hraH3tyyusHg36hwQvL6BaXf6wh07t6W9snbtpJU78YGe2O4 lccOfTlGPmuveiRfaae+zC+LAQCVZBc8kR0iLiq1la6JpIyNwJQDa4kKpcukkwTY +mFs1H/O3XmNX+Iile3Qn2IwaBF/f1CUJLQUeuZ2dcvcBGTKqr29RuvqaZzHOf8l kbiURM9ARozEgVqCUGRLYjg5Zq53lPGAfFR+zg+sisZ0KvwgvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2YZrujMgpxHMjERrAUrUMJkyjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E5ZGY4MTAtYjVmMy0z OWJhLTg1MjEtODk4ZmFkZDBiYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrQiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErxt7oPhCB08EWebgT0EkkoKfxc2eNpKbSF3oGbyCmMUfBrzuv7MibV rB/s0XtAoxX1CB7UuHczoMGDzRmpzpwYboMP1qnklfSq4O4e+pDuYHLc7GbFQlV3 xhX3BhkfVbDSmNSiyqmWbbhnFv3et4bRbcvC/gJQuNfpzW57VbRw7t7pZjfuTBfT JqXbeCO4ICqpr2fXNHEHrRjTKlkNS3EfOieXtxvKolOU6aAtStioyzMGl8B7E7x1 qGKeHyetVNrB8HGWTeAw1dU2ALiU09kSRh8pa4Va/Cb3uQ1cPi2rvvwUdPOhHANK efxFsUcX0ffxB39bJKaxtEyBiFoK6kY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:54:28 2025 by rpki-client