$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa File: b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa (raw, json) Hash identifier: NbERCDYT+tMY2qMKAPNjQ5x6aTJclwL3MFCLECsAPiE= Subject key identifier: A7:0D:8D:29:B5:C5:9C:CC:EA:3E:45:20:96:DE:99:18:35:C0:AB:77 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B41E71955D86BB905693F9A80 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 65.39.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:19:55:d8:6b:b9:05:69:3f:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=389e1f0d-451b-4f49-94e1-bf3647625e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:3c:b3:48:b3:42:08:9d:be:6e:51:63:08: a8:e4:8a:ef:f4:4b:d9:04:7a:cf:18:8e:07:5a:49: 0f:15:03:b8:15:3d:5e:8e:62:22:2a:0e:04:9b:ee: fc:c9:af:02:9d:92:04:98:9e:b1:30:0d:a5:f1:86: 9c:df:df:dc:a0:d3:c7:24:7e:a0:17:2e:74:57:1d: be:4d:be:5f:1b:be:98:5e:ae:95:16:32:31:2c:5f: 4b:db:b2:4d:f6:b5:c0:2d:e0:ef:5e:7d:b2:3d:3b: a5:b0:bd:5b:4a:66:40:bf:84:cf:eb:b5:4c:52:2d: 1e:90:4b:62:c0:d8:71:5d:53:61:8e:cc:c7:60:f1: a2:7b:6c:e1:91:bc:78:2c:af:19:91:80:6a:60:f8: 74:d4:a2:b2:f3:de:5b:9a:25:0c:23:ce:df:b3:41: 1c:9c:d4:96:8c:bf:40:f4:52:10:ed:90:db:00:36: 1e:06:fb:1a:0d:1c:3c:41:97:23:97:08:8f:5c:8c: 46:69:df:86:7a:9b:b4:9e:17:e9:c4:95:01:78:fd: 8e:9f:d3:b4:26:f7:f1:a6:b8:69:24:18:86:2f:0f: 40:57:db:da:74:b7:9e:4f:a6:f5:3d:db:49:5b:e1: 7c:49:bc:c6:4c:4b:2c:f8:8d:3c:d7:cb:29:75:73: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0D:8D:29:B5:C5:9C:CC:EA:3E:45:20:96:DE:99:18:35:C0:AB:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ce:0c:9e:80:d4:52:e3:30:95:3a:09:07:14:86:38:60:62: db:0e:40:12:ac:02:95:38:9f:e0:47:72:d0:02:32:5d:85:9c: 74:3c:bb:d7:7d:0d:47:4c:dd:70:fb:69:59:e9:4f:44:3b:eb: 5c:e0:dc:08:86:a5:a6:35:2c:2b:a8:7c:de:4f:9d:8a:72:81: 16:07:72:82:56:57:21:53:17:0a:30:99:da:21:7f:a8:9a:17: 61:70:4f:e1:f2:84:ae:5a:c8:b2:7b:9f:ff:fe:cf:4b:d4:f8: eb:3c:d8:0c:23:82:f5:bf:07:58:a1:c7:bf:68:28:57:94:d8: aa:20:bb:2c:41:2d:9a:bf:52:ae:54:03:07:c6:ba:d2:45:72: d6:f0:1c:c3:e3:f2:0a:1c:30:25:4b:53:81:3c:df:44:5a:64: 29:e0:16:96:90:ec:5c:64:6f:70:e9:d5:56:d4:60:2e:a1:75: 84:7a:ac:88:6b:91:58:71:8a:9d:dc:78:0d:9d:33:9d:14:e2: 80:be:a8:d0:07:dd:06:60:af:64:65:43:fc:f2:dc:69:26:66: e6:3c:16:ba:22:8b:32:5f:42:12:a7:c8:f9:20:ee:c1:ca:d6: 11:6d:ed:52:72:e1:d4:b8:56:60:eb:4e:6d:b9:05:01:4d:b3: a7:71:7c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xlV2Gu5BWk/moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Mzg5ZTFmMGQtNDUxYi00ZjQ5LTk0ZTEtYmYzNjQ3NjI1ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUs8s0izQgidvm5RYwio5Irv9EvZBHrPGI4H WkkPFQO4FT1ejmIiKg4Em+78ya8CnZIEmJ6xMA2l8Yac39/coNPHJH6gFy50Vx2+ Tb5fG76YXq6VFjIxLF9L27JN9rXALeDvXn2yPTulsL1bSmZAv4TP67VMUi0ekEti wNhxXVNhjszHYPGie2zhkbx4LK8ZkYBqYPh01KKy895bmiUMI87fs0EcnNSWjL9A 9FIQ7ZDbADYeBvsaDRw8QZcjlwiPXIxGad+Gepu0nhfpxJUBeP2On9O0Jvfxprhp JBiGLw9AV9vadLeeT6b1PdtJW+F8SbzGTEss+I0818spdXOsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcNjSm1xZzM6j5FIJbemRg1wKt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYjhlYTg3ZjAtZDFkMy0z NWJjLTkzNjMtYzQ2ZjU0Y2ZlMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQSeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjODJ6A1FLjMJU6CQcUhjhgYtsOQBKsApU4n+BHctACMl2FnHQ8u9d9 DUdM3XD7aVnpT0Q761zg3AiGpaY1LCuofN5PnYpygRYHcoJWVyFTFwowmdohf6ia F2FwT+HyhK5ayLJ7n//+z0vU+Os82AwjgvW/B1ihx79oKFeU2KoguyxBLZq/Uq5U AwfGutJFctbwHMPj8gocMCVLU4E830RaZCngFpaQ7Fxkb3Dp1VbUYC6hdYR6rIhr kVhxip3ceA2dM50U4oC+qNAH3QZgr2RlQ/zy3GkmZuY8FroiizJfQhKnyPkg7sHK 1hFt7VJy4dS4VmDrTm25BQFNs6dxfJk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:48:41 2025 by rpki-client