$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa File: f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa (raw, json) Hash identifier: DyGtL6ZMoBKyv0HF5xuMxlTEDorebJRPwtNeXE4pNLI= Subject key identifier: 5C:8F:4E:BD:A6:8D:3D:98:32:2A:D8:1A:44:D6:EB:99:DF:4C:B7:A8 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584BA7CD1AE66E54435AF46C0480 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 25645 IP address blocks: 209.42.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1a:e6:6e:54:43:5a:f4:6c:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=ac39c569-a3aa-420d-a250-2099eca97cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:6d:15:52:b5:db:c1:d6:03:e2:62:56:af: d7:6e:25:f7:30:20:e4:fe:54:c4:81:db:dc:21:da: 64:bb:dd:8e:f9:48:83:9a:e8:2e:25:76:62:ed:3c: 72:cc:88:6e:85:94:20:5f:e1:ee:98:78:f6:aa:33: 7c:d8:e3:6e:ac:eb:37:db:76:29:12:6c:05:af:90: f1:de:6e:a9:6d:89:2b:b7:aa:94:23:74:cf:76:ac: ad:34:e6:29:00:c5:e5:28:e6:f7:1d:49:9f:27:6e: 91:8c:64:e0:6d:c4:fe:d4:8b:06:cb:82:44:1b:ce: ee:7e:1a:64:7e:18:c8:3c:6e:21:cf:63:7b:37:22: fd:75:65:24:bd:46:fc:31:64:3b:c3:c3:dd:66:42: 71:b4:d0:d3:86:2c:db:f6:82:ef:3c:f8:dd:92:19: a0:a5:04:ae:3d:b6:bb:63:45:40:5b:a1:43:fc:73: 13:bf:53:05:de:8f:c7:a2:cb:58:10:57:9f:57:69: 80:5a:b5:d8:c3:f0:2e:6b:d4:b5:9a:12:53:bd:54: 49:7b:9c:53:82:78:0f:da:c1:3f:1d:31:55:43:e0: 7e:07:6a:4e:d4:40:bb:6d:da:92:0e:e6:4b:c3:56: f8:c7:00:ae:66:75:79:79:65:0f:cf:e9:0b:de:e8: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8F:4E:BD:A6:8D:3D:98:32:2A:D8:1A:44:D6:EB:99:DF:4C:B7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:97:d6:88:3f:45:50:28:d1:72:94:c5:fd:04:cb:f1:5b:6b: 7c:32:00:e2:10:72:82:ef:ae:b9:a2:ac:9d:eb:88:c3:34:e6: f3:cc:3f:2f:f8:8b:73:24:bc:4c:69:be:79:c0:bd:85:c4:21: ea:4e:85:44:45:0d:7d:57:3a:0c:77:23:59:a3:ff:a6:14:2a: 57:b8:96:ff:84:bd:cb:6e:7c:72:50:54:ea:44:3b:c7:14:77: 57:f1:09:a3:b6:71:31:77:09:ff:44:98:23:98:f1:14:44:97: da:3a:d7:0b:36:30:38:16:ce:69:72:0d:45:d7:07:60:ac:e0: fa:81:8b:07:6e:75:4a:c0:6f:47:99:97:65:3d:1d:0d:5e:3b: 09:6c:82:f9:70:34:cd:96:69:ee:c4:e4:ec:a4:5f:da:e8:43: 58:19:36:ca:ca:b4:87:83:81:4a:1a:f2:0c:b2:4e:c0:f6:e2: ce:47:ac:d2:98:e3:d6:80:22:96:16:19:52:a8:ac:38:13:25: f0:bf:05:39:84:9b:fb:01:69:c0:0d:5d:6b:96:90:7b:51:27: 11:67:58:a7:f4:31:f3:17:bb:44:53:f1:14:e1:7c:e3:38:c4: 39:ec:09:b0:89:b6:c2:13:3d:e3:6d:bf:95:cb:93:49:93:e8: 53:9d:2a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRrmblRDWvRsBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YWMzOWM1NjktYTNhYS00MjBkLWEyNTAtMjA5OWVjYTk3Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeBtFVK128HWA+JiVq/XbiX3MCDk/lTEgdvc Idpku92O+UiDmuguJXZi7TxyzIhuhZQgX+HumHj2qjN82ONurOs323YpEmwFr5Dx 3m6pbYkrt6qUI3TPdqytNOYpAMXlKOb3HUmfJ26RjGTgbcT+1IsGy4JEG87ufhpk fhjIPG4hz2N7NyL9dWUkvUb8MWQ7w8PdZkJxtNDThizb9oLvPPjdkhmgpQSuPba7 Y0VAW6FD/HMTv1MF3o/HostYEFefV2mAWrXYw/Aua9S1mhJTvVRJe5xTgngP2sE/ HTFVQ+B+B2pO1EC7bdqSDuZLw1b4xwCuZnV5eWUPz+kL3uhomQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyPTr2mjT2YMirYGkTW65nfTLeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjM2MWM2YTItMmQ2MS0z NzEyLWE2YjctZjNlMGFjNGYwZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKX1og/RVAo0XKUxf0Ey/Fba3wyAOIQcoLvrrmirJ3riMM05vPMPy/4 i3MkvExpvnnAvYXEIepOhURFDX1XOgx3I1mj/6YUKle4lv+EvctufHJQVOpEO8cU d1fxCaO2cTF3Cf9EmCOY8RREl9o61ws2MDgWzmlyDUXXB2Cs4PqBiwdudUrAb0eZ l2U9HQ1eOwlsgvlwNM2Wae7E5OykX9roQ1gZNsrKtIeDgUoa8gyyTsD24s5HrNKY 49aAIpYWGVKorDgTJfC/BTmEm/sBacANXWuWkHtRJxFnWKf0MfMXu0RT8RThfOM4 xDnsCbCJtsITPeNtv5XLk0mT6FOdKp0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:27 2025 by rpki-client