$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa File: 8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa (raw, json) Hash identifier: L0y2JzAKI5zWFs1TZWR+8FxzwkKBJklG9GdrWQd59Jk= Subject key identifier: 56:CA:67:6F:55:86:30:B4:45:A9:39:B9:74:28:6B:B7:80:39:AD:A0 Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F4328584B4D11DA73B2D1086C4A10B000 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 10497 IP address blocks: 192.86.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:da:73:b2:d1:08:6c:4a:10:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=2cfefe93-1c92-42a6-8381-659b1d664c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:24:7e:da:ec:fc:7a:07:a9:07:ef:46:1f: 3d:65:4c:84:a1:3c:b9:bf:a8:6b:03:7e:02:cc:bd: fa:d8:16:8b:1b:bd:fd:5a:0f:2b:7f:40:8d:30:bc: f6:2e:f6:db:53:db:ad:9b:d2:18:25:e9:f6:b7:64: fb:e7:56:d6:ed:84:16:19:02:6d:fc:0d:31:41:94: b7:ef:38:12:6c:a5:69:09:f6:66:1a:5f:79:9b:48: 92:e6:95:11:c1:b1:b1:fe:08:30:4e:74:52:87:d1: a9:ea:f4:4e:33:37:08:39:41:b6:fe:31:80:58:72: 01:53:c5:84:7e:40:4a:42:05:d8:2d:b5:f2:eb:c7: a6:fd:a2:54:5c:d4:01:a1:e5:e4:99:9d:28:6a:60: ea:75:af:17:95:02:4b:94:d9:65:58:9a:fc:e6:a6: 99:51:15:f5:9a:79:79:9e:a6:5f:89:b3:73:b1:a6: 21:38:39:b7:c7:69:33:01:6b:18:93:30:4d:e1:cd: b4:8d:78:f9:cb:e1:07:77:39:b3:d0:d9:1e:ff:b1: 7f:a6:2e:7f:87:91:87:5f:6c:37:df:c0:a7:82:49: 84:a9:f0:3c:01:0e:65:d1:06:c6:79:fb:e1:9b:4f: 59:b6:61:8e:c8:ea:69:49:05:7f:8f:60:b1:8f:65: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CA:67:6F:55:86:30:B4:45:A9:39:B9:74:28:6B:B7:80:39:AD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 192.86.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8e:63:1a:95:9d:9e:d2:89:c1:a6:81:72:29:6c:aa:6d:a7: 23:da:b6:c5:6c:28:e5:9a:31:3e:33:1f:71:5e:52:12:45:b7: 0b:3e:ec:cd:75:77:35:c8:53:3b:8b:b2:a6:8f:bc:09:48:5b: d5:84:d4:a1:ed:c9:6d:ff:87:05:06:26:7e:59:60:e2:09:1f: 14:4a:d8:0e:e9:2c:19:27:4f:4c:fa:a1:37:96:49:c6:c2:91: c2:b8:ee:80:15:a0:4c:98:e9:ec:33:43:14:ef:e1:af:7a:01: f5:ca:55:18:65:84:f8:94:03:52:e9:61:7d:a5:2d:b0:3e:fd: b6:7f:79:d3:8e:ad:3d:41:9e:98:a6:25:7b:b7:28:01:40:b1: 81:e9:6a:54:2e:ef:ce:6e:44:4e:92:87:2c:b2:13:a5:1c:c9: b5:50:d9:7f:6c:e6:4d:58:74:6c:13:80:a5:27:f7:96:6a:4c: d3:38:82:08:18:a2:96:b1:da:d3:4f:cb:a7:35:7d:36:05:24: 46:60:73:2d:78:7c:c3:64:bb:cc:46:a6:94:be:9e:4e:56:36: e4:92:e6:d5:5e:ae:db:6c:d3:3c:ee:46:e6:1c:9f:b4:ef:8c: ee:2a:60:8a:d7:5f:7e:63:02:7f:d7:60:90:9d:e9:d4:38:1c: 49:df:b9:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdpzstEIbEoQsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MmNmZWZlOTMtMWM5Mi00MmE2LTgzODEtNjU5YjFkNjY0YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjskftrs/HoHqQfvRh89ZUyEoTy5v6hrA34C zL362BaLG739Wg8rf0CNMLz2LvbbU9utm9IYJen2t2T751bW7YQWGQJt/A0xQZS3 7zgSbKVpCfZmGl95m0iS5pURwbGx/ggwTnRSh9Gp6vROMzcIOUG2/jGAWHIBU8WE fkBKQgXYLbXy68em/aJUXNQBoeXkmZ0oamDqda8XlQJLlNllWJr85qaZURX1mnl5 nqZfibNzsaYhODm3x2kzAWsYkzBN4c20jXj5y+EHdzmz0Nke/7F/pi5/h5GHX2w3 38CngkmEqfA8AQ5l0QbGefvhm09ZtmGOyOppSQV/j2Cxj2UscQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbKZ29VhjC0Rak5uXQoa7eAOa2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvOGIzMDg4MTktYWJlNi0z ZDE3LWIzZTMtN2NiZTJjMDdiNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGOYxqVnZ7SicGmgXIpbKptpyPatsVsKOWaMT4zH3FeUhJFtws+7M11 dzXIUzuLsqaPvAlIW9WE1KHtyW3/hwUGJn5ZYOIJHxRK2A7pLBknT0z6oTeWScbC kcK47oAVoEyY6ewzQxTv4a96AfXKVRhlhPiUA1LpYX2lLbA+/bZ/edOOrT1Bnpim JXu3KAFAsYHpalQu785uRE6ShyyyE6UcybVQ2X9s5k1YdGwTgKUn95ZqTNM4gggY opax2tNPy6c1fTYFJEZgcy14fMNku8xGppS+nk5WNuSS5tVertts0zzuRuYcn7Tv jO4qYIrXX35jAn/XYJCd6dQ4HEnfuXA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:09 2025 by rpki-client