$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa File: bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa (raw, json) Hash identifier: pRDwV9P5mXRscgwpz1MR6eVoMwtI5PmrAG3lGJ88L3Q= Subject key identifier: AF:48:35:79:DA:3F:B5:EE:33:50:B9:75:81:43:8B:8A:55:CF:63:19 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584AF5215698C154D8046D0C0980 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399575 IP address blocks: 216.205.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:56:98:c1:54:d8:04:6d:0c:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a826444a-dd4e-4134-b526-1272393f7220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ab:99:32:17:e7:f4:52:52:22:67:92:5f:dc: 27:c7:8e:74:7b:00:cc:c5:30:85:24:26:a5:71:7e: ad:6c:90:67:df:0a:11:ce:e5:d3:6f:e0:75:17:54: 1f:66:db:71:2e:66:20:51:59:60:30:9b:83:c3:6b: 9e:b0:d2:85:21:33:ff:0a:30:da:df:c8:e7:92:41: 84:8e:19:e5:bc:0f:1f:7a:6c:eb:1d:e5:59:5f:ca: ba:77:c1:96:f8:4e:d8:bd:b5:f7:a0:a6:b2:9b:4a: 0c:d7:f9:29:60:2d:ec:bd:63:c2:fe:e1:d1:0b:bf: 57:68:ee:5c:b9:06:aa:16:99:c4:db:a1:79:1f:fd: 3b:58:18:68:a1:44:15:d1:ab:ac:7a:c8:54:16:28: 4f:c8:c1:d3:4c:b9:89:6b:bf:b0:b2:e4:b4:5f:1b: 0f:1e:5f:65:99:57:d2:1d:2a:de:07:ac:60:4c:34: 15:1f:93:c4:9e:79:ce:ef:06:37:29:8d:9f:fd:5b: 8a:a2:e2:30:f6:2a:6d:ad:d5:b1:2c:11:cc:8a:fb: ab:13:14:66:c1:c7:b0:89:64:ef:1a:e2:54:cc:6b: 2e:ee:9d:b3:49:30:1a:1e:a1:21:cb:18:44:a6:5e: 5c:5e:77:4b:b0:4b:b9:0c:98:4f:f8:47:09:c4:02: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:48:35:79:DA:3F:B5:EE:33:50:B9:75:81:43:8B:8A:55:CF:63:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:98:14:0e:98:18:74:15:49:03:3b:d1:35:bc:9f:d0:1e:08: 1f:b3:9a:19:a2:c4:f6:58:7d:56:d0:d9:d1:64:98:e1:04:97: 5b:7c:1d:a1:21:6a:fb:f3:86:f3:39:45:39:cd:4c:53:63:ab: 67:7a:f0:18:bf:29:70:3a:1b:02:6a:b3:a6:b0:ee:0c:41:90: cb:d7:fe:5c:46:0a:fb:fb:d4:c8:7b:2b:b9:79:1d:c7:1d:e9: 14:2c:3d:3f:aa:40:cf:7c:aa:b0:6c:f0:ac:a3:6b:6b:94:f6: 6f:01:00:b9:9b:b9:bc:46:5b:ed:c6:ca:cc:62:27:0f:29:80: 0e:dc:78:c1:9d:fa:67:c3:99:73:d1:34:7b:44:12:aa:59:99: 28:6f:b0:8f:6c:7d:12:f7:23:f6:d7:6c:88:6c:7a:cc:b5:92: 04:6b:c6:cc:3a:7b:d9:8b:bc:f4:b1:76:7b:08:94:1c:a9:02: 5c:60:b5:ff:93:4e:01:1b:29:26:91:6a:c6:3e:01:34:ae:f6: 7f:35:76:e6:15:23:e8:b5:53:9e:d7:96:aa:79:33:39:6d:45: 83:e4:b7:10:96:5c:e0:ea:77:d7:00:82:35:9d:72:3c:0c:4b: 74:17:3c:82:3f:cb:cc:4a:ff:9f:63:b6:f0:a1:cf:8c:0b:ab: 60:b5:ce:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVaYwVTYBG0MCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTgyNjQ0NGEtZGQ0ZS00MTM0LWI1MjYtMTI3MjM5M2Y3MjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6uZMhfn9FJSImeSX9wnx450ewDMxTCFJCal cX6tbJBn3woRzuXTb+B1F1QfZttxLmYgUVlgMJuDw2uesNKFITP/CjDa38jnkkGE jhnlvA8femzrHeVZX8q6d8GW+E7YvbX3oKaym0oM1/kpYC3svWPC/uHRC79XaO5c uQaqFpnE26F5H/07WBhooUQV0auseshUFihPyMHTTLmJa7+wsuS0XxsPHl9lmVfS HSreB6xgTDQVH5PEnnnO7wY3KY2f/VuKouIw9iptrdWxLBHMivurExRmwcewiWTv GuJUzGsu7p2zSTAaHqEhyxhEpl5cXndLsEu5DJhP+EcJxAIgXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9INXnaP7XuM1C5dYFDi4pVz2MZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYmRkMzA2YTAtZWYyMi0z OWVjLTgzYTMtNDU2NDJjYjcwYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2M1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOYFA6YGHQVSQM70TW8n9AeCB+zmhmixPZYfVbQ2dFkmOEEl1t8HaEh avvzhvM5RTnNTFNjq2d68Bi/KXA6GwJqs6aw7gxBkMvX/lxGCvv71Mh7K7l5Hccd 6RQsPT+qQM98qrBs8Kyja2uU9m8BALmbubxGW+3GysxiJw8pgA7ceMGd+mfDmXPR NHtEEqpZmShvsI9sfRL3I/bXbIhsesy1kgRrxsw6e9mLvPSxdnsIlBypAlxgtf+T TgEbKSaRasY+ATSu9n81duYVI+i1U57Xlqp5MzltRYPktxCWXODqd9cAgjWdcjwM S3QXPII/y8xK/59jtvChz4wLq2C1zkM= -----END CERTIFICATE-----Generated at Wed Nov 5 15:58:15 2025 by rpki-client