$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa File: d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa (raw, json) Hash identifier: D9zJLj3feFtA74793g+aydPacAO1Cs1lglRJl5OIgC0= Subject key identifier: 2F:3D:7B:63:7D:A7:11:BF:23:EF:F5:3B:47:FF:41:14:C8:F3:B0:C0 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC752CBF74A2348B1767800 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 64.4.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:52:cb:f7:4a:23:48:b1:76:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b47246c2-5f27-4598-bad1-d054f0303a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:94:b0:b1:52:89:02:9c:3d:37:17:17:77: 7d:87:e4:22:5f:c3:74:31:67:df:89:f6:b9:4e:43: 2a:cb:e2:31:b1:02:14:54:d3:6e:ac:d7:a6:03:64: 28:f0:2f:b8:8c:b5:0f:8a:a2:b6:05:75:40:d4:9b: 98:d3:02:ce:f9:ac:5c:cc:78:75:45:8f:2b:5e:c0: 5e:21:28:5b:a8:a2:99:59:de:93:c9:43:0d:7c:8e: 74:cc:dc:d6:2a:c7:e4:3a:05:69:02:40:4e:e0:c3: 5f:63:f5:35:f3:00:41:71:9a:84:4e:e2:d9:3b:72: 47:a3:48:71:1d:7f:a6:65:67:31:67:35:37:c1:ad: 92:05:28:80:5b:06:11:e5:0a:3b:8f:28:50:2e:13: 40:36:1f:33:6b:b9:21:b5:db:03:9b:90:82:08:8f: b5:1f:cf:43:eb:e2:bc:e9:08:fb:24:3a:35:a3:89: 4c:aa:c4:fa:5a:f0:e9:42:df:1c:70:ca:cd:b4:e6: 50:bb:ad:f8:e1:9f:26:91:d6:2b:4e:84:c6:48:da: b5:3e:5e:7c:1c:e7:e6:bf:12:b7:df:b1:cf:a3:cc: 83:3d:92:a5:6a:e0:02:9b:19:10:ee:6c:cf:8d:54: 10:a1:bc:a6:d0:9f:d9:8f:56:84:3c:42:c5:0a:68: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3D:7B:63:7D:A7:11:BF:23:EF:F5:3B:47:FF:41:14:C8:F3:B0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9c:29:0c:76:d1:b0:a5:ca:d1:bd:a0:22:8e:58:17:8b:c0: 5e:17:9d:2e:48:21:49:e5:2c:d6:db:94:64:a3:a4:27:da:53: aa:fc:a7:c0:4f:59:24:f7:f8:73:fb:b3:b5:df:4e:6a:ee:0e: 54:a7:b9:8f:fa:16:41:83:08:12:84:8b:11:c1:cb:82:1a:ee: 25:be:3c:2c:69:da:14:90:aa:e6:d0:5f:96:2a:75:fb:47:60: e5:b4:46:39:0a:d6:01:bf:c0:94:5e:4f:d8:12:e3:69:ef:63: d2:24:28:3e:78:61:97:96:f7:b9:51:8a:36:04:61:de:79:30: 2c:3f:5e:09:55:3d:38:94:b1:0c:03:e3:71:04:8f:b4:36:ad: 8b:79:92:ff:e4:35:60:85:51:ad:e3:7a:d1:eb:b0:2e:6f:5d: 63:cb:89:c4:4f:a0:78:e3:04:9e:e7:0b:93:52:3e:55:e6:0d: fd:00:07:8c:38:fe:6a:f9:e5:0b:e0:47:54:e4:c9:e6:b1:1d: bb:9c:69:7f:28:74:76:03:27:8d:4f:a2:63:e0:31:11:91:70: f2:94:a3:de:50:dd:8d:38:ef:9e:dc:33:c5:d7:7a:88:4f:d4: ca:45:e3:af:3a:b0:10:5e:99:9e:b9:6b:0e:26:8e:c4:0a:7a: 5d:24:c0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1LL90ojSLF2eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjQ3MjQ2YzItNWYyNy00NTk4LWJhZDEtZDA1NGYwMzAzYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs6UsLFSiQKcPTcXF3d9h+QiX8N0MWffifa5 TkMqy+IxsQIUVNNurNemA2Qo8C+4jLUPiqK2BXVA1JuY0wLO+axczHh1RY8rXsBe IShbqKKZWd6TyUMNfI50zNzWKsfkOgVpAkBO4MNfY/U18wBBcZqETuLZO3JHo0hx HX+mZWcxZzU3wa2SBSiAWwYR5Qo7jyhQLhNANh8za7khtdsDm5CCCI+1H89D6+K8 6Qj7JDo1o4lMqsT6WvDpQt8ccMrNtOZQu6344Z8mkdYrToTGSNq1Pl58HOfmvxK3 37HPo8yDPZKlauACmxkQ7mzPjVQQobym0J/Zj1aEPELFCmirPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC89e2N9pxG/I+/1O0f/QRTI87DAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDM0NTgyY2UtYmQ2ZC0z ZTdjLWE0MmMtOTY4YmU2ZjE5ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHucKQx20bClytG9oCKOWBeLwF4XnS5IIUnlLNbblGSjpCfaU6r8p8BP WST3+HP7s7XfTmruDlSnuY/6FkGDCBKEixHBy4Ia7iW+PCxp2hSQqubQX5YqdftH YOW0RjkK1gG/wJReT9gS42nvY9IkKD54YZeW97lRijYEYd55MCw/XglVPTiUsQwD 43EEj7Q2rYt5kv/kNWCFUa3jetHrsC5vXWPLicRPoHjjBJ7nC5NSPlXmDf0AB4w4 /mr55QvgR1TkyeaxHbucaX8odHYDJ41PomPgMRGRcPKUo95Q3Y04757cM8XXeohP 1MpF4686sBBemZ65aw4mjsQKel0kwNE= -----END CERTIFICATE-----Generated at Thu Nov 6 09:00:15 2025 by rpki-client