$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/56c81709-5316-3ae5-b456-ed94db21d80e.roa File: 56c81709-5316-3ae5-b456-ed94db21d80e.roa (raw, json) Hash identifier: PHT3O9fJQ/YgYc+IYunUbb+FFqizhqkbXJsdArK0Uok= Subject key identifier: 91:BB:86:7E:56:9D:39:48:03:F5:B8:5A:AB:D9:53:B7:A7:94:A2:F8 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC753562D40E222E55D6500 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/56c81709-5316-3ae5-b456-ed94db21d80e.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:53:56:2d:40:e2:22:e5:5d:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=8a2cea60-116b-4d8d-b3f2-1894cd4135f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:23:99:c3:5b:1a:8c:f1:a0:3d:d5:8d:cc: f5:2f:ad:65:80:8f:97:56:e0:c1:be:fc:48:cd:28: 39:73:82:f0:68:0b:e1:34:7e:d1:78:ee:24:bd:4c: 3f:15:1f:03:4d:a6:8d:17:48:ef:b3:f7:18:0c:ee: 3d:04:a8:f0:d6:5c:14:d1:d9:38:a8:b2:c0:e7:08: 30:bb:21:52:7e:73:93:20:4d:0b:22:cf:99:87:c2: a0:a4:38:dd:64:03:e5:fe:49:8a:87:e0:89:a8:91: 21:c1:ae:86:a7:ab:d6:59:06:bb:21:6a:c7:45:f1: c9:a7:b0:eb:ea:98:0a:48:21:4b:c6:bd:2f:11:90: cb:bd:81:44:d9:1d:88:ee:5d:bb:f7:c3:c3:6d:a8: 39:90:2d:2b:b3:6b:7e:9d:f3:b0:97:6f:91:21:15: 4c:d7:ce:6f:a2:2f:6a:9a:da:9d:fa:f8:fe:c1:85: ec:52:d8:7e:9c:e8:fb:e1:59:0d:ca:8d:28:a2:8d: 5a:8e:90:16:60:bb:91:89:73:90:44:ad:b2:e7:e6: ae:87:ba:9a:3f:a9:aa:41:27:2f:ed:7e:d6:e9:31: 39:37:bd:bc:6d:cf:b9:08:54:2f:c5:b4:76:16:a1: 1e:53:a2:87:b3:02:58:01:bd:95:32:50:2b:a1:84: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BB:86:7E:56:9D:39:48:03:F5:B8:5A:AB:D9:53:B7:A7:94:A2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/56c81709-5316-3ae5-b456-ed94db21d80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:1b:bb:62:a9:b4:10:d9:84:53:e5:cc:92:bc:0a:3e:7b:96: ba:ef:d2:32:06:41:b7:f7:bf:b8:05:82:dd:fb:40:51:f2:91: 83:e9:0a:8b:af:75:03:19:14:61:de:ff:18:ec:76:2f:ae:80: 80:5d:1b:92:82:1a:cb:0f:fa:e7:95:e5:17:31:56:88:40:b0: b8:bd:66:84:ef:b6:07:c9:ca:f9:4a:d0:03:f7:6c:fc:47:3b: da:0a:10:5e:77:1e:57:e0:d4:57:70:16:67:d2:ec:5b:d6:aa: 22:b6:2a:ad:82:08:19:62:d7:f4:07:ae:4a:6a:72:92:4f:dd: 6f:74:59:04:76:df:cf:4f:ca:b4:cb:77:75:c6:c9:7b:dd:12: 62:0e:1e:a5:5a:71:17:07:b0:03:46:ed:cd:0f:da:0d:47:89: 6f:e6:58:45:cb:4a:32:df:a7:db:7e:fe:ce:fa:5f:37:7f:95: 0c:50:3e:c4:21:a0:20:54:fa:42:dd:96:00:b1:88:34:a0:a7: 8e:30:f6:6d:a6:84:77:e2:9b:ba:8a:40:4f:49:b5:f4:7a:ff: 22:0c:b8:a1:f2:4b:28:e5:18:ce:8a:5e:d5:6e:6a:53:e5:a5: 14:67:e9:1e:da:b7:5d:e3:aa:e7:7e:1a:c6:f5:ac:c4:04:4b: 9e:d3:20:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1NWLUDiIuVdZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OGEyY2VhNjAtMTE2Yi00ZDhkLWIzZjItMTg5NGNkNDEzNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQsjmcNbGozxoD3Vjcz1L61lgI+XVuDBvvxI zSg5c4LwaAvhNH7ReO4kvUw/FR8DTaaNF0jvs/cYDO49BKjw1lwU0dk4qLLA5wgw uyFSfnOTIE0LIs+Zh8KgpDjdZAPl/kmKh+CJqJEhwa6Gp6vWWQa7IWrHRfHJp7Dr 6pgKSCFLxr0vEZDLvYFE2R2I7l2798PDbag5kC0rs2t+nfOwl2+RIRVM185voi9q mtqd+vj+wYXsUth+nOj74VkNyo0ooo1ajpAWYLuRiXOQRK2y5+auh7qaP6mqQScv 7X7W6TE5N728bc+5CFQvxbR2FqEeU6KHswJYAb2VMlAroYQtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG7hn5WnTlIA/W4WqvZU7enlKL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNTZjODE3MDktNTMxNi0z YWU1LWI0NTYtZWQ5NGRiMjFkODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUbu2KptBDZhFPlzJK8Cj57lrrv0jIGQbf3v7gFgt37QFHykYPpCouv dQMZFGHe/xjsdi+ugIBdG5KCGssP+ueV5RcxVohAsLi9ZoTvtgfJyvlK0AP3bPxH O9oKEF53Hlfg1FdwFmfS7FvWqiK2Kq2CCBli1/QHrkpqcpJP3W90WQR2389PyrTL d3XGyXvdEmIOHqVacRcHsANG7c0P2g1HiW/mWEXLSjLfp9t+/s76Xzd/lQxQPsQh oCBU+kLdlgCxiDSgp44w9m2mhHfim7qKQE9JtfR6/yIMuKHySyjlGM6KXtVualPl pRRn6R7at13jqud+Gsb1rMQES57TIE4= -----END CERTIFICATE-----Generated at Thu Nov 6 09:03:20 2025 by rpki-client