$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa File: 9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa (raw, json) Hash identifier: GHUzBgKpFI+/GWkp4DNg+XEua6OjL754/6cnpmQmBZI= Subject key identifier: 98:3D:FA:D0:9C:4B:12:B5:5F:2D:56:36:72:71:22:95:A4:8D:4D:A7 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584BAEC7B6B9CC21183F27F69240 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 11404 IP address blocks: 208.70.146.0/23 maxlen: 24 208.70.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b6:b9:cc:21:18:3f:27:f6:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=56cfa4d9-8231-4302-9d2b-b7a2954969ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:ea:ec:54:c8:5a:52:0c:ec:58:97:4b:e7: 72:13:f7:d7:8f:38:4f:7d:d8:fe:a1:51:5e:43:26: b7:8b:82:3d:f6:ff:6a:0d:57:10:3d:41:cd:60:f1: f9:c1:6e:3f:d2:47:65:ce:49:c3:2a:30:53:60:c9: 60:fc:29:ab:f1:d1:55:36:40:17:f3:8a:92:06:e2: 70:d5:65:bf:53:3b:a8:ae:16:65:8d:12:77:12:24: e1:dc:94:48:72:63:8e:6c:17:5c:9c:7b:25:89:db: 50:e3:db:52:26:85:bb:99:d2:27:4c:66:da:d1:a8: 6d:ef:d5:2e:4d:c6:f4:18:41:fb:97:d6:2e:c4:a3: 81:09:ee:ec:ba:16:4d:a3:ba:37:5a:a8:c9:14:7a: 8e:3a:0d:29:b9:1e:23:86:25:75:98:0f:90:45:a0: 9d:1e:0c:b1:b6:0e:25:c7:ac:30:37:b5:99:8f:ae: a9:b1:5f:7a:38:5e:e3:cf:c7:95:b5:69:48:98:08: cf:25:fe:f3:af:c8:1c:50:63:23:2a:62:a6:b8:1c: e0:4a:96:2a:df:04:68:48:9e:2a:31:61:71:9a:7d: c0:22:71:de:cf:d2:7e:bf:18:59:e4:21:7a:41:0d: 1f:44:f2:dc:af:7a:88:d8:0e:2c:34:21:ab:d1:7d: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3D:FA:D0:9C:4B:12:B5:5F:2D:56:36:72:71:22:95:A4:8D:4D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 208.70.146.0/23 208.70.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e0:1a:59:f2:58:16:32:cd:38:bf:f8:90:7e:02:10:09:3a: 39:cc:55:28:db:63:16:80:f8:f3:6a:d6:75:bc:e4:a4:2e:97: 9a:46:86:73:c7:83:75:4a:c0:4d:a5:2c:43:0b:17:08:a8:0f: 4c:9e:31:dd:99:7e:5c:03:cd:83:03:f4:3e:01:43:69:ed:31: f2:21:b5:3f:60:12:67:b1:f9:54:d6:c7:7d:35:18:5c:61:d6: f5:f1:78:75:b6:08:73:af:bc:ca:ce:26:13:32:7e:7d:1f:3b: f6:6e:b4:ef:f0:4b:79:5b:d3:00:fc:75:96:86:a4:5b:d6:34: b3:75:0f:0a:9e:41:5c:8b:b2:6e:5a:fd:49:70:fb:46:51:42: f9:4f:ca:79:8f:af:75:ba:7e:94:5d:33:ce:0a:c6:57:e4:6a: be:64:06:ee:2c:ff:21:bc:c3:ae:c4:b6:f2:03:f9:52:e0:33: a7:ae:f6:02:5b:d4:e6:b9:b1:4d:ea:f5:0b:77:31:0d:8a:a2: f6:ce:39:9b:f2:5f:37:95:98:b4:65:5f:99:49:f9:6f:bc:e0: db:71:9c:e1:ec:69:9c:f9:6d:bd:cf:02:ac:1d:29:0d:56:81: 43:ad:05:57:8c:d5:e5:04:70:9b:2b:d6:b8:1d:dc:76:dd:c9: bb:95:7a:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuux7a5zCEYPyf2kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NTZjZmE0ZDktODIzMS00MzAyLTlkMmItYjdhMjk1NDk2OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjizq7FTIWlIM7FiXS+dyE/fXjzhPfdj+oVFe Qya3i4I99v9qDVcQPUHNYPH5wW4/0kdlzknDKjBTYMlg/Cmr8dFVNkAX84qSBuJw 1WW/UzuorhZljRJ3EiTh3JRIcmOObBdcnHslidtQ49tSJoW7mdInTGba0aht79Uu Tcb0GEH7l9YuxKOBCe7suhZNo7o3WqjJFHqOOg0puR4jhiV1mA+QRaCdHgyxtg4l x6wwN7WZj66psV96OF7jz8eVtWlImAjPJf7zr8gcUGMjKmKmuBzgSpYq3wRoSJ4q MWFxmn3AInHez9J+vxhZ5CF6QQ0fRPLcr3qI2A4sNCGr0X3YAwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJg9+tCcSxK1Xy1WNnJxIpWkjU2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvOWExYjA1NDgtMWQ4OC0z Mjg1LWJiMzEtZDJhZmU4NWRhZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0EaSAwQA 0EaWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACDgGlnyWBYyzTi/+JB+AhAJOjnMVSjbYxaA+PNq1nW85KQu l5pGhnPHg3VKwE2lLEMLFwioD0yeMd2ZflwDzYMD9D4BQ2ntMfIhtT9gEmex+VTW x301GFxh1vXxeHW2CHOvvMrOJhMyfn0fO/ZutO/wS3lb0wD8dZaGpFvWNLN1Dwqe QVyLsm5a/Ulw+0ZRQvlPynmPr3W6fpRdM84Kxlfkar5kBu4s/yG8w67EtvID+VLg M6eu9gJb1Oa5sU3q9Qt3MQ2KovbOOZvyXzeVmLRlX5lJ+W+84NtxnOHsaZz5bb3P AqwdKQ1WgUOtBVeM1eUEcJsr1rgd3HbdybuVejw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:44:22 2025 by rpki-client