$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa File: d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa (raw, json) Hash identifier: Y8wveS3WFmnqAde+QEknfo0IbQnICEAMgA0SUFF9Cdk= Subject key identifier: 39:72:09:AC:BA:A2:44:58:CA:BC:CA:8E:81:C1:BB:10:28:CB:CE:1A Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F4328584BA7CCF03B9DE9AA0D631C9D20 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 17103 IP address blocks: 208.90.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:f0:3b:9d:e9:aa:0d:63:1c:9d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=ae3ac58a-5c69-4f19-81d7-170bc3c72727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:8b:6f:13:6c:a9:92:0e:e3:1e:09:0b:89: 58:b6:1e:cb:50:f3:16:8e:d2:f0:37:61:5c:a4:c3: e1:ab:2d:85:fb:58:dc:ea:5b:6d:e8:99:d0:f5:fa: f8:b5:bd:81:cb:de:38:df:5d:2a:94:b1:c7:29:ed: 0e:53:7b:a8:a7:70:cf:92:5b:ba:f3:5b:d2:c4:ed: 53:7d:d9:8d:d5:fa:1e:3d:b0:a7:6a:10:12:46:96: 61:ad:d6:31:d4:bd:96:88:e6:2f:92:5e:1b:05:dc: cf:5b:e5:94:02:22:e1:fd:81:f8:ff:5a:8a:d0:7e: 24:18:c7:d9:09:8f:4f:8b:ad:72:5c:79:b0:04:8e: 3f:1a:ac:05:c6:28:da:63:8f:76:8f:d8:61:c0:3c: 13:cb:57:a0:a6:52:a3:41:50:63:39:8f:c8:3a:4e: fd:0e:83:08:8b:b4:99:c8:e6:ff:b2:50:32:a8:9b: 60:1e:30:74:a5:22:ce:2b:ba:d1:d9:66:5a:fd:09: 38:3f:91:3d:29:50:f2:61:b5:8a:60:0b:40:22:73: a3:b5:d1:e6:29:9d:1d:57:3e:23:79:39:bd:54:76: 46:65:f6:37:48:10:60:59:e9:bb:14:d6:b7:cb:a4: 8c:26:4f:64:73:58:33:76:66:5e:42:de:6c:9e:4f: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:72:09:AC:BA:A2:44:58:CA:BC:CA:8E:81:C1:BB:10:28:CB:CE:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv4: 208.90.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:13:f0:e7:2c:0e:0e:79:bc:21:63:b2:99:99:b5:d7:69:e3: c5:9c:b7:2a:c0:19:25:a4:0e:e8:d0:92:95:6b:e9:d6:a1:1a: 36:55:fd:21:ef:ba:bc:8b:de:a8:80:36:db:f9:05:fd:1d:39: 53:b7:52:bf:cd:68:d4:8d:3d:a9:b0:6e:14:c4:08:00:86:0f: ca:e0:60:c4:b0:92:20:9d:84:6e:fd:c3:23:99:19:5f:4f:11: e4:34:59:f0:69:af:01:b8:ad:45:ac:ff:2d:e0:a8:01:aa:22: f9:b8:f2:66:bd:23:32:a7:87:bc:83:ea:a2:e5:68:2b:cb:26: de:d9:93:09:c3:d5:7b:34:12:02:96:cd:08:ca:26:52:7c:37: 19:ca:8b:51:c0:0c:47:fd:44:1f:f9:41:7a:6c:b7:57:49:f1: 23:60:cf:73:5c:f0:2b:d6:9f:c6:fa:0d:e8:b8:94:93:6a:0a: ff:af:ff:8b:52:bb:51:eb:8f:ae:6a:50:de:92:d5:60:48:1d: 46:08:be:f5:6a:ce:5b:db:70:a8:c7:9c:92:b3:ac:bd:5a:35: 92:a0:cb:2c:c4:16:45:e6:8c:36:94:b5:41:21:ac:0e:a4:18: f0:ed:1e:97:a8:80:88:96:96:6e:75:36:2a:84:88:42:a4:9d: e5:8c:cc:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPA7nemqDWMcnSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YWUzYWM1OGEtNWM2OS00ZjE5LTgxZDctMTcwYmMzYzcyNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr2LbxNsqZIO4x4JC4lYth7LUPMWjtLwN2Fc pMPhqy2F+1jc6ltt6JnQ9fr4tb2By944310qlLHHKe0OU3uop3DPklu681vSxO1T fdmN1foePbCnahASRpZhrdYx1L2WiOYvkl4bBdzPW+WUAiLh/YH4/1qK0H4kGMfZ CY9Pi61yXHmwBI4/GqwFxijaY492j9hhwDwTy1egplKjQVBjOY/IOk79DoMIi7SZ yOb/slAyqJtgHjB0pSLOK7rR2WZa/Qk4P5E9KVDyYbWKYAtAInOjtdHmKZ0dVz4j eTm9VHZGZfY3SBBgWem7FNa3y6SMJk9kc1gzdmZeQt5snk9iSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlyCay6okRYyrzKjoHBuxAoy84aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvZDNkZGIxOGYtNWVmNi0z ZmVhLWI4ZTYtZDM4MGU1MTNhMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsT8OcsDg55vCFjspmZtddp48WctyrAGSWkDujQkpVr6dahGjZV/SHv uryL3qiANtv5Bf0dOVO3Ur/NaNSNPamwbhTECACGD8rgYMSwkiCdhG79wyOZGV9P EeQ0WfBprwG4rUWs/y3gqAGqIvm48ma9IzKnh7yD6qLlaCvLJt7ZkwnD1Xs0EgKW zQjKJlJ8NxnKi1HADEf9RB/5QXpst1dJ8SNgz3Nc8CvWn8b6Dei4lJNqCv+v/4tS u1Hrj65qUN6S1WBIHUYIvvVqzlvbcKjHnJKzrL1aNZKgyyzEFkXmjDaUtUEhrA6k GPDtHpeogIiWlm51NiqEiEKkneWMzEU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:02 2025 by rpki-client