$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa File: 3f19cad0-6ddd-35a7-877d-c343355be8b2.roa (raw, json) Hash identifier: F8cC1KOpDtNiLXJRej5sFsvr8vanP8UBUWTsVGNVp54= Subject key identifier: C8:9B:93:54:99:50:4C:8C:75:14:C0:B3:D2:5F:AF:38:AD:87:3F:F7 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584B2A2C367E402DCACE98F32C80 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 25697 IP address blocks: 152.44.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:36:7e:40:2d:ca:ce:98:f3:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d0905b37-6489-4f7d-84f2-ce66f355d494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:20:46:1d:39:28:d3:81:08:95:db:a7:2f: 69:f1:9b:76:0b:d4:9e:07:1f:0c:3e:6d:2e:f6:d6: 3b:8c:19:37:45:e1:b3:aa:6f:60:ef:1f:f7:70:bb: ee:61:f5:ff:eb:a4:4f:75:ab:a1:89:da:aa:bf:db: 1f:71:8e:c7:94:11:4d:88:e6:3a:5e:bf:7a:32:b0: 5d:db:47:51:98:ca:8d:76:fd:2c:08:41:89:91:fa: 39:17:7b:53:5c:5d:4d:d9:09:7a:65:37:e1:a0:a7: f2:71:b3:e0:15:19:49:74:2a:f7:17:da:0a:57:38: d6:41:0c:8a:d8:69:16:56:a2:bd:69:71:51:d5:a6: c2:aa:f5:80:54:d2:d5:56:13:b3:ae:c7:ba:3b:e6: 6e:89:d4:18:9b:86:a5:1d:7b:e9:32:4d:9b:e9:df: f7:b2:80:97:e5:1a:af:87:c9:2c:c2:95:1a:3d:7c: 31:51:3b:0f:e4:85:06:b8:67:30:1d:a9:bc:4e:7f: 69:53:8a:de:08:25:ae:76:73:31:f6:b8:60:58:de: cf:71:ba:e9:67:ea:68:85:04:cd:4c:9b:70:f3:d9: ec:08:2c:5a:ac:6a:ac:9b:70:20:19:17:b6:0a:c9: e1:5e:1f:f7:05:af:ea:3f:cb:bf:b0:32:11:e9:9d: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9B:93:54:99:50:4C:8C:75:14:C0:B3:D2:5F:AF:38:AD:87:3F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 152.44.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5f:aa:c7:a2:7f:3e:f0:e5:27:dc:92:e8:24:ad:fb:e6:22: d6:e4:2a:60:d0:4d:98:fe:14:d4:ae:90:a8:30:26:e4:af:ff: b8:0c:27:c8:80:7d:df:4e:a5:76:90:79:ad:56:bb:b3:81:57: 68:7b:9f:e5:ed:e0:9e:be:b9:e5:a0:4d:42:6e:fa:b7:0c:23: 76:a4:eb:a6:ae:aa:d5:d2:08:fd:7f:4e:aa:c5:89:f0:d5:83: 4a:bb:48:30:7c:57:de:60:92:ed:de:8b:1e:99:09:6f:07:db: a2:6e:e4:33:d8:01:13:52:a2:b6:08:05:50:dd:92:d8:54:86: 3f:db:bc:17:a4:6a:cd:e1:37:7d:cb:55:c7:7f:35:2e:0d:db: 11:a1:63:f3:cf:f9:09:d6:c2:61:2c:9c:53:80:98:8d:1f:87: 21:be:08:67:93:59:7f:01:10:19:e5:21:1e:8d:d4:7d:0e:ca: 4f:6b:98:ed:ee:65:2e:74:11:61:6d:dc:97:76:ba:ba:88:bd: 1d:7a:b1:b6:55:b2:0b:ad:5e:45:00:ec:4d:19:2c:5a:10:a2: 1b:52:76:ed:00:85:91:d5:d4:29:ef:27:f7:1d:45:b8:38:1a: f9:dd:ac:53:45:3e:d5:e8:c3:fa:a1:6f:9a:55:61:9e:9b:0f: 99:8a:b5:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDZ+QC3KzpjzLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDA5MDViMzctNjQ4OS00ZjdkLTg0ZjItY2U2NmYzNTVkNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYkgRh05KNOBCJXbpy9p8Zt2C9SeBx8MPm0u 9tY7jBk3ReGzqm9g7x/3cLvuYfX/66RPdauhidqqv9sfcY7HlBFNiOY6Xr96MrBd 20dRmMqNdv0sCEGJkfo5F3tTXF1N2Ql6ZTfhoKfycbPgFRlJdCr3F9oKVzjWQQyK 2GkWVqK9aXFR1abCqvWAVNLVVhOzrse6O+ZuidQYm4alHXvpMk2b6d/3soCX5Rqv h8kswpUaPXwxUTsP5IUGuGcwHam8Tn9pU4reCCWudnMx9rhgWN7PcbrpZ+pohQTN TJtw89nsCCxarGqsm3AgGRe2CsnhXh/3Ba/qP8u/sDIR6Z0I3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMibk1SZUEyMdRTAs9Jfrzithz/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvM2YxOWNhZDAtNmRkZC0z NWE3LTg3N2QtYzM0MzM1NWJlOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxfqseifz7w5SfckugkrfvmItbkKmDQTZj+FNSukKgwJuSv/7gMJ8iA fd9OpXaQea1Wu7OBV2h7n+Xt4J6+ueWgTUJu+rcMI3ak66auqtXSCP1/TqrFifDV g0q7SDB8V95gku3eix6ZCW8H26Ju5DPYARNSorYIBVDdkthUhj/bvBekas3hN33L Vcd/NS4N2xGhY/PP+QnWwmEsnFOAmI0fhyG+CGeTWX8BEBnlIR6N1H0Oyk9rmO3u ZS50EWFt3Jd2urqIvR16sbZVsgutXkUA7E0ZLFoQohtSdu0AhZHV1CnvJ/cdRbg4 GvndrFNFPtXow/qhb5pVYZ6bD5mKtSw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:48:27 2025 by rpki-client