$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa File: bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa (raw, json) Hash identifier: bFGsZsaKDNjPYvAt815ip6XxJBGoJFYdUUNXQEbMJAA= Subject key identifier: 63:3E:39:65:F6:7A:E2:BB:FA:D9:48:79:A7:34:F0:08:99:26:72:33 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C18399EF704F1FC27C8C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 205.236.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:18:39:9e:f7:04:f1:fc:27:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=5df5af40-bfcf-47a8-ade9-5879fe1805a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:d5:a2:69:bf:bb:1d:d0:a3:72:ee:94:64: 5a:2a:d9:c1:ab:19:1c:12:29:36:10:eb:2e:56:aa: 24:46:07:00:55:d7:7e:83:57:70:38:fd:90:ca:63: ac:dc:25:a4:1e:d8:f0:d5:a0:fa:34:97:1c:68:8e: 13:3c:e0:e2:8c:fc:3d:00:32:34:7a:ea:ff:4f:be: 12:cb:6a:dc:2d:8f:60:27:d1:93:ea:86:d7:87:70: 15:57:47:11:36:2d:4c:09:3d:a4:46:78:4f:3c:c3: d2:7f:bc:f1:72:0c:89:c6:af:9d:46:15:23:db:b9: 76:f8:02:a8:b2:fb:6e:b4:1d:41:a9:5c:e1:85:49: 34:50:b2:99:fb:2c:bc:70:b1:7a:cb:58:4e:49:fd: 3e:d2:6d:b2:aa:4d:a4:e3:63:96:4d:7c:f8:d6:ee: 1a:62:84:6c:b7:a6:1e:b6:fb:6c:4c:21:f0:b4:84: ca:3b:94:4f:a8:4e:d1:c3:fa:7b:ba:ae:d0:25:50: 6f:4d:60:5c:60:97:ad:23:65:90:93:b6:2a:97:72: e8:09:59:ca:08:ca:d0:fb:50:1f:11:e9:8b:78:93: 4b:e5:93:0e:e3:5f:14:41:79:d3:a8:2f:f4:5d:5d: 82:1b:92:22:02:52:d1:17:78:e4:25:b9:4e:3c:1d: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:39:65:F6:7A:E2:BB:FA:D9:48:79:A7:34:F0:08:99:26:72:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 205.236.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:76:8f:0e:56:e0:83:33:c0:f3:11:6a:80:c5:1d:42:4f:aa: 91:01:a1:62:50:73:f5:ef:49:a5:51:bc:29:26:33:ed:92:86: 5c:da:d2:db:aa:69:0d:7b:61:fe:b9:3d:fb:6a:1d:5a:64:68: e5:67:14:fc:90:40:63:97:ef:8a:93:40:bc:f3:9b:2f:7e:ba: 8a:be:41:ae:2f:ca:e0:83:3c:f1:0d:3b:47:08:83:67:bc:32: 4f:d7:a1:c7:26:4f:75:36:17:0b:c2:c5:b1:c3:64:07:ca:49: fe:d7:fa:23:76:ec:7b:91:02:3d:74:4b:30:2e:41:d9:58:17: 2b:0b:3f:12:3d:b7:21:77:63:f8:6c:03:a2:28:f5:be:a5:ea: 6a:34:fb:45:6a:ae:71:7b:5b:5a:d2:bf:0d:25:56:61:c4:c0: 91:b8:1c:16:81:88:e7:c1:12:dd:35:1c:15:8a:62:72:7b:03: 28:b9:b2:84:40:9a:14:58:4a:c7:56:2c:1f:c9:a2:a1:9b:bd: 55:e7:d4:89:93:a4:9d:0f:79:4f:d7:70:f8:b5:fa:79:e9:a6: fd:53:63:02:60:d5:c9:90:05:2c:61:67:91:04:69:47:3e:b5: e0:1c:a1:2a:bc:fb:31:50:dc:c5:dd:9e:ad:06:2a:7b:08:b4: 41:15:4e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBg5nvcE8fwnyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NWRmNWFmNDAtYmZjZi00N2E4LWFkZTktNTg3OWZlMTgwNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm3Vomm/ux3Qo3LulGRaKtnBqxkcEik2EOsu VqokRgcAVdd+g1dwOP2QymOs3CWkHtjw1aD6NJccaI4TPODijPw9ADI0eur/T74S y2rcLY9gJ9GT6obXh3AVV0cRNi1MCT2kRnhPPMPSf7zxcgyJxq+dRhUj27l2+AKo svtutB1BqVzhhUk0ULKZ+yy8cLF6y1hOSf0+0m2yqk2k42OWTXz41u4aYoRst6Ye tvtsTCHwtITKO5RPqE7Rw/p7uq7QJVBvTWBcYJetI2WQk7Yql3LoCVnKCMrQ+1Af EemLeJNL5ZMO418UQXnTqC/0XV2CG5IiAlLRF3jkJblOPB0BMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM+OWX2euK7+tlIeac08AiZJnIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYmJkYmVlMjctYjJkOS0z YjUxLWJkMTMtNTc3ZThmMWQ0MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKV2jw5W4IMzwPMRaoDFHUJPqpEBoWJQc/XvSaVRvCkmM+2Shlza0tuq aQ17Yf65PftqHVpkaOVnFPyQQGOX74qTQLzzmy9+uoq+Qa4vyuCDPPENO0cIg2e8 Mk/XoccmT3U2FwvCxbHDZAfKSf7X+iN27HuRAj10SzAuQdlYFysLPxI9tyF3Y/hs A6Io9b6l6mo0+0VqrnF7W1rSvw0lVmHEwJG4HBaBiOfBEt01HBWKYnJ7Ayi5soRA mhRYSsdWLB/JoqGbvVXn1ImTpJ0PeU/XcPi1+nnppv1TYwJg1cmQBSxhZ5EEaUc+ teAcoSq8+zFQ3MXdnq0GKnsItEEVTj4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:37 2025 by rpki-client