$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa File: dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa (raw, json) Hash identifier: Q0Tr8bK5zxM9ysZ0xup6D2JeH5x3ekNHR5mSVeDVgs8= Subject key identifier: AC:96:E4:BB:37:00:3A:FD:5D:99:91:DD:0C:2B:09:2C:FD:E5:30:D9 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC241E469A61EEA4307800 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 64.233.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:24:1e:46:9a:61:ee:a4:30:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=89ac6fe9-7558-4901-917c-7da37da80c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:5b:17:dc:6d:d9:ca:cb:96:cd:1a:90:96: 7e:c1:7c:29:45:40:e9:42:93:a6:df:8a:da:a2:75: d9:0e:7d:28:0e:8c:8b:3b:76:03:c9:cc:71:f5:45: 94:0a:0f:f1:7b:47:ab:26:7a:c3:d2:b3:03:f6:e3: 88:97:b1:ab:28:89:f6:ad:3e:81:82:a7:1d:17:9c: 66:2b:0e:fa:67:08:26:bd:f5:9d:d9:0a:b9:aa:e5: ac:7d:52:3c:17:ca:50:92:d8:16:ef:0d:c2:ed:49: 1b:d2:7c:72:c9:15:c1:18:04:c3:36:9e:08:e3:b0: 42:6f:0d:5c:51:57:49:4d:1e:1a:05:44:35:95:94: d1:38:1f:ce:f0:fe:36:dc:b3:d1:2d:e5:a5:30:96: 3e:4d:79:e6:90:2d:03:18:e7:f9:18:64:fc:82:bb: c0:da:95:ec:03:c4:c1:f1:a7:ac:0b:76:c4:93:ae: ec:34:75:64:71:22:d9:d3:b0:1d:09:ce:62:13:ad: 10:11:e5:9e:a6:66:3e:bd:37:ba:f3:d0:b2:d2:c4: 67:32:1c:81:dc:d9:a5:40:3c:5d:53:4c:6c:bd:ab: 74:e0:64:c9:9a:a5:8f:f7:e8:f2:6b:58:41:77:e5: 27:ec:af:5d:04:0b:1e:9f:46:ea:07:96:f7:1b:57: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:96:E4:BB:37:00:3A:FD:5D:99:91:DD:0C:2B:09:2C:FD:E5:30:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 64.233.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ea:83:9a:bd:ca:61:a5:1d:fc:7a:20:99:99:fb:8f:ce:5c: 5a:ee:a6:6b:a0:0f:66:c2:3d:97:76:31:06:5a:e1:d0:ae:79: dd:03:b6:ee:b2:80:0d:55:87:94:ba:f9:39:45:2e:e5:f6:0c: 6c:c2:fe:43:de:c0:08:3f:c0:23:fb:d9:cc:e9:17:c9:34:30: 7a:a9:96:ef:2a:f8:d5:36:4b:8b:1d:92:cb:72:e1:7d:cc:a1: 79:43:81:c7:99:4d:a7:5f:4b:4f:91:1e:d4:08:0a:29:a7:8e: 80:04:11:04:26:a8:19:a5:c7:72:03:39:52:d0:99:7e:2c:59: ae:02:23:09:ff:93:89:a3:8d:24:9c:9e:4d:bd:cd:df:13:f2: 42:21:b4:9a:a4:39:e3:8b:85:55:35:c1:11:3a:a8:02:eb:9a: 4d:cf:ad:c2:c6:b4:62:e3:1a:25:07:f5:0a:6b:db:07:44:ad: b1:9a:cf:42:28:a0:cb:c1:4b:ff:d1:43:27:d2:64:ca:a1:23: c7:a9:20:93:3b:d4:8a:2c:7d:35:86:99:f4:76:03:30:76:0d: e1:60:e3:91:e6:c2:88:25:08:a8:da:43:d6:76:de:9c:38:fa: e4:59:25:14:eb:a9:55:85:12:1c:ae:28:4f:ba:42:35:bb:67: 20:23:23:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCQeRpph7qQweAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ODlhYzZmZTktNzU1OC00OTAxLTkxN2MtN2RhMzdkYTgwYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YtbF9xt2crLls0akJZ+wXwpRUDpQpOm34ra onXZDn0oDoyLO3YDycxx9UWUCg/xe0erJnrD0rMD9uOIl7GrKIn2rT6BgqcdF5xm Kw76ZwgmvfWd2Qq5quWsfVI8F8pQktgW7w3C7Ukb0nxyyRXBGATDNp4I47BCbw1c UVdJTR4aBUQ1lZTROB/O8P423LPRLeWlMJY+TXnmkC0DGOf5GGT8grvA2pXsA8TB 8aesC3bEk67sNHVkcSLZ07AdCc5iE60QEeWepmY+vTe689Cy0sRnMhyB3NmlQDxd U0xsvat04GTJmqWP9+jya1hBd+Un7K9dBAsen0bqB5b3G1cWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyW5Ls3ADr9XZmR3QwrCSz95TDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZGJmOWM0OTktNWFmYy0z YmU1LWE1ZTUtMmU4Mzc0NGUxOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQOnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDqg5q9ymGlHfx6IJmZ+4/OXFrupmugD2bCPZd2MQZa4dCued0Dtu6y gA1Vh5S6+TlFLuX2DGzC/kPewAg/wCP72czpF8k0MHqplu8q+NU2S4sdksty4X3M oXlDgceZTadfS0+RHtQICimnjoAEEQQmqBmlx3IDOVLQmX4sWa4CIwn/k4mjjSSc nk29zd8T8kIhtJqkOeOLhVU1wRE6qALrmk3PrcLGtGLjGiUH9Qpr2wdErbGaz0Io oMvBS//RQyfSZMqhI8epIJM71IosfTWGmfR2AzB2DeFg45HmwoglCKjaQ9Z23pw4 +uRZJRTrqVWFEhyuKE+6QjW7ZyAjI1g= -----END CERTIFICATE-----Generated at Wed Nov 5 04:29:46 2025 by rpki-client