$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa File: 08b21afd-c79d-35c4-91d3-323622a79ddc.roa (raw, json) Hash identifier: wqXCrjimCilLnA8pxLwH2Udnt/zrIDAlJ7zZoDH79iU= Subject key identifier: 52:C4:82:12:DF:FF:BA:8D:76:C2:6C:BF:BC:05:DA:BA:0C:A8:1D:F6 Certificate issuer: /CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Certificate serial: 010D0C9F4328584BB88D2D139A1A0E808ED03E00 Authority key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 21930 IP address blocks: 207.207.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2d:13:9a:1a:0e:80:8e:d0:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=bfa5c6bc-3b68-477b-8b01-9a591fc55a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:ff:21:99:85:a5:07:85:7b:09:c2:25:a8: 80:4a:d8:07:c4:50:16:9f:f6:f7:82:f7:4b:0f:64: 1e:15:6a:25:66:c6:28:68:7e:f6:86:12:0a:0f:e8: 3e:f4:39:e1:96:e4:da:e6:59:4b:bb:28:26:79:3f: 44:6f:f0:02:32:22:17:1a:2f:75:f4:96:b4:64:07: 93:85:dc:58:da:9b:7b:a9:06:49:b7:4f:dc:9b:ab: 98:93:33:21:6d:b6:dd:e9:6f:b7:92:15:c6:8a:43: 85:d3:0f:31:6c:dc:85:12:54:c3:17:90:d2:45:c3: 89:53:f3:13:b8:f7:b0:50:fa:99:b3:97:78:9e:ee: 1d:4b:18:94:1a:da:87:2a:97:b9:ec:14:3c:cb:7c: fa:43:84:ef:7c:96:49:19:97:ea:8a:ba:ac:05:48: ac:96:6b:1d:2f:bf:c7:a7:a8:3f:30:55:5b:09:21: c4:10:12:17:07:2a:df:68:fd:35:0a:d5:53:12:b2: ae:9b:8c:74:1c:92:82:6e:08:aa:ca:04:99:f2:d5: 66:00:0c:28:2a:f9:ae:c1:b5:6d:89:ec:87:87:43: a8:34:53:66:83:fa:76:56:e3:81:8a:58:62:0b:58: af:dc:92:03:74:36:73:97:68:8f:d5:10:a7:6f:32: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C4:82:12:DF:FF:BA:8D:76:C2:6C:BF:BC:05:DA:BA:0C:A8:1D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl X509v3 Authority Key Identifier: keyid:3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer sbgp-ipAddrBlock: critical IPv4: 207.207.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:2f:c7:05:1d:89:f7:93:86:bd:68:ea:6a:be:98:e0:58:5d: 63:c9:24:42:0f:44:bd:9e:57:8d:7d:4c:e3:e0:cf:01:8b:58: c6:b2:34:08:00:ba:1a:b3:f5:30:6e:a8:e2:6b:a2:15:f1:06: 70:e7:13:00:5c:22:16:72:d6:f7:f7:6a:99:49:de:b2:e5:ab: 83:10:af:ba:96:58:70:b6:7b:73:50:89:3a:4c:dd:64:05:43: 5a:da:a4:b5:20:80:9d:69:39:0c:bf:da:53:c2:a2:8d:bc:83: 54:e8:1d:1b:47:41:a4:83:78:18:a2:57:16:36:f0:aa:6a:ee: d6:38:5e:cb:4b:c2:7c:24:aa:1f:c4:4d:3c:68:f0:0c:fe:a7: e6:4a:95:7d:74:38:f8:b1:2b:3c:73:f8:d4:98:e7:f3:51:30: cc:dd:fe:96:22:98:a6:5c:50:25:24:42:9c:9c:98:54:8f:19: 3b:ea:c7:52:e9:1a:78:96:6a:5b:fa:5d:c4:d3:bd:c9:76:64: bc:93:00:71:3e:dc:66:08:82:6f:1f:17:17:50:33:63:7c:38: 8d:48:08:df:34:df:f3:e5:73:74:b5:0f:c2:89:3f:ed:90:c1: 70:6e:1a:30:1c:67:ca:77:01:00:98:fd:9e:4e:30:45:ab:92: 32:5a:f9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jS0TmhoOgI7QPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0 YWE3MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmZhNWM2YmMtM2I2OC00NzdiLThiMDEtOWE1OTFmYzU1YTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWL/IZmFpQeFewnCJaiAStgHxFAWn/b3gvdL D2QeFWolZsYoaH72hhIKD+g+9DnhluTa5llLuygmeT9Eb/ACMiIXGi919Ja0ZAeT hdxY2pt7qQZJt0/cm6uYkzMhbbbd6W+3khXGikOF0w8xbNyFElTDF5DSRcOJU/MT uPewUPqZs5d4nu4dSxiUGtqHKpe57BQ8y3z6Q4TvfJZJGZfqirqsBUislmsdL7/H p6g/MFVbCSHEEBIXByrfaP01CtVTErKum4x0HJKCbgiqygSZ8tVmAAwoKvmuwbVt ieyHh0OoNFNmg/p2VuOBilhiC1iv3JIDdDZzl2iP1RCnbzJEYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLEghLf/7qNdsJsv7wF2roMqB32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYWU3 ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvMDhiMjFhZmQtYzc5ZC0z NWM0LTkxZDMtMzIzNjIyYTc5ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2FlN2VjZmYtZTNhYi00NzJkLWE0 ZWMtMGZjZDNmZTk0YWE3LzNhZTdlY2ZmLWUzYWItNDcyZC1hNGVjLTBmY2QzZmU5 NGFhNy5jcmwwHwYDVR0jBBgwFoAUPph7Dc5mtoYTiir7ITCCh1t0sEkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNk M2ZlOTRhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz88MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUvxwUdifeThr1o6mq+mOBYXWPJJEIPRL2eV419TOPgzwGLWMayNAgA uhqz9TBuqOJrohXxBnDnEwBcIhZy1vf3aplJ3rLlq4MQr7qWWHC2e3NQiTpM3WQF Q1rapLUggJ1pOQy/2lPCoo28g1ToHRtHQaSDeBiiVxY28Kpq7tY4XstLwnwkqh/E TTxo8Az+p+ZKlX10OPixKzxz+NSY5/NRMMzd/pYimKZcUCUkQpycmFSPGTvqx1Lp GniWalv6XcTTvcl2ZLyTAHE+3GYIgm8fFxdQM2N8OI1ICN803/Plc3S1D8KJP+2Q wXBuGjAcZ8p3AQCY/Z5OMEWrkjJa+VM= -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:02 2025 by rpki-client