$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa File: 9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json) Hash identifier: BdwX6hUg+sJ8O33Pq4O4cTgqkVKWID+E5OU9cwDd060= Subject key identifier: 49:36:89:C0:91:D6:24:B6:C6:2C:19:AB:23:3C:3D:B5:F5:2D:F1:9A Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F4328584B9E07A11CCCEE6E71AF3FF96A Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 11550 IP address blocks: 173.243.176.0/20 maxlen: 24 199.96.120.0/22 maxlen: 24 204.89.253.0/24 maxlen: 24 216.249.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a1:1c:cc:ee:6e:71:af:3f:f9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=dc46bb19-01aa-43fb-a478-c1d9063eec34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:d2:49:17:a0:34:bf:c8:ba:c2:75:6a:33: 39:c4:d9:38:30:fb:6c:6c:8b:0e:fc:48:b2:84:a9: 0e:b9:83:d6:ec:15:ea:d3:b4:77:ac:55:36:38:e6: fd:46:0b:77:2c:04:7c:13:88:5b:30:5f:dc:37:b5: 32:93:55:49:c8:42:f8:fe:c0:aa:8a:02:9e:69:b2: 48:45:91:7e:ce:19:c4:3b:61:85:27:ce:12:ff:3b: 01:4b:c9:00:ee:31:e5:74:34:9e:01:fd:c5:e9:f9: c8:a8:1c:ff:34:3c:21:b6:9c:4c:d7:4e:e8:fe:6d: 07:94:a7:8f:25:c6:06:44:ce:a5:8a:88:07:e4:de: a1:4c:57:45:9c:82:1e:cb:a3:04:d1:93:40:19:fc: d4:1f:32:6b:d8:7d:36:86:d8:84:b5:15:d4:ac:3a: 35:cd:73:f2:b9:81:9d:1b:8c:fb:1e:30:54:69:c6: 7e:c2:4b:8a:2d:82:f7:7a:27:34:2a:cf:e9:75:a3: 18:c6:0c:cd:3d:2a:5b:9d:a1:d5:12:a3:f5:90:72: ac:08:95:35:f9:bf:84:1c:51:c6:d1:71:f8:ef:18: 40:a3:b4:ec:4c:53:55:86:c7:a8:e5:14:53:f2:5f: 0e:bb:98:0f:14:e0:84:60:bb:68:26:83:08:37:0e: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:36:89:C0:91:D6:24:B6:C6:2C:19:AB:23:3C:3D:B5:F5:2D:F1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 173.243.176.0/20 199.96.120.0/22 204.89.253.0/24 216.249.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d2:e3:6a:d6:be:4d:22:6b:70:6c:e6:76:de:0b:54:d1:ff: 19:54:95:94:10:d2:41:6d:68:1f:a0:92:92:77:92:62:9b:c5: f7:3a:31:94:69:dc:d3:1f:75:21:dc:97:77:fa:fc:3a:3b:e6: 8a:ca:9e:f0:6f:9b:14:11:9a:5e:fc:f1:16:c2:e6:82:3b:6f: c4:71:33:c1:f6:cc:2f:14:24:5b:32:4a:3e:84:ef:08:53:56: a3:7f:f7:c9:08:5a:06:df:45:68:c4:f4:16:b7:7a:25:07:79: 76:d6:28:81:b5:3d:18:2c:bb:a6:67:bc:b9:eb:a0:4d:6c:34: 72:73:93:ed:9a:ee:49:38:74:ec:f3:90:30:0f:4c:3f:60:fb: 9f:78:7b:8e:e3:c7:42:68:89:55:73:3e:2c:c5:7c:5e:81:83: c9:dc:f2:e0:fb:37:6c:d3:2c:f7:af:86:f2:a1:8c:46:4b:3d: 14:6e:07:4f:6a:1c:a4:4a:93:4b:56:0a:6e:4a:2a:b2:bd:7f: e5:40:1e:9c:32:7e:5f:e7:a2:01:ba:5d:11:8d:68:76:e1:84: 9f:d8:0a:cd:58:87:4d:80:c1:12:3f:6f:32:22:57:4a:05:73: a3:b7:80:b7:35:2b:83:6d:71:e7:8f:28:48:0d:ea:ce:17:d8: a3:4f:0c:6e -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEueB6EczO5uca8/+WowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGM0NmJiMTktMDFhYS00M2ZiLWE0NzgtYzFkOTA2M2VlYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrHSSRegNL/IusJ1ajM5xNk4MPtsbIsO/Eiy hKkOuYPW7BXq07R3rFU2OOb9Rgt3LAR8E4hbMF/cN7Uyk1VJyEL4/sCqigKeabJI RZF+zhnEO2GFJ84S/zsBS8kA7jHldDSeAf3F6fnIqBz/NDwhtpxM107o/m0HlKeP JcYGRM6liogH5N6hTFdFnIIey6ME0ZNAGfzUHzJr2H02htiEtRXUrDo1zXPyuYGd G4z7HjBUacZ+wkuKLYL3eic0Ks/pdaMYxgzNPSpbnaHVEqP1kHKsCJU1+b+EHFHG 0XH47xhAo7TsTFNVhseo5RRT8l8Ou5gPFOCEYLtoJoMINw5vZwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFEk2icCR1iS2xiwZqyM8PbX1LfGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvOWRhYjJmZjQtNmU0Ny0z ZTEyLTlhOTYtNGNkNzBiNGU4ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQErfOwAwQC x2B4AwQAzFn9AwQF2PlAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB7S42rWvk0ia3Bs5nbeC1TR/xlUlZQQ 0kFtaB+gkpJ3kmKbxfc6MZRp3NMfdSHcl3f6/Do75orKnvBvmxQRml788RbC5oI7 b8RxM8H2zC8UJFsySj6E7whTVqN/98kIWgbfRWjE9Ba3eiUHeXbWKIG1PRgsu6Zn vLnroE1sNHJzk+2a7kk4dOzzkDAPTD9g+594e47jx0JoiVVzPizFfF6Bg8nc8uD7 N2zTLPevhvKhjEZLPRRuB09qHKRKk0tWCm5KKrK9f+VAHpwyfl/nogG6XRGNaHbh hJ/YCs1Yh02AwRI/bzIiV0oFc6O3gLc1K4NtceePKEgN6s4X2KNPDG4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:03 2025 by rpki-client