$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa File: 1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa (raw, json) Hash identifier: 3MX39TGlvXLMDtdWMaZ3VFsIIHsII39OvpftB5I9d84= Subject key identifier: A7:66:2A:4A:62:F7:90:CE:F1:FE:04:63:3F:C7:7F:6A:8F:BE:F8:6D Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584BB45D1C4AD0AB8C3ECE65DB80 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 32181 IP address blocks: 69.39.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1c:4a:d0:ab:8c:3e:ce:65:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=085868a9-e0e2-4769-bac7-0879e1cc0099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:ae:4d:2b:52:02:d4:08:6b:a0:75:98:81: 9c:ce:bb:86:ea:c7:3b:46:0a:c3:ec:7b:aa:de:10: 50:93:20:fc:67:cb:4f:a2:51:0e:f2:62:40:75:df: 60:cc:bf:41:07:a4:cb:ad:92:7c:28:ae:39:74:7a: 37:8c:05:e5:60:16:3a:e6:11:51:d7:42:03:7c:f1: dd:b1:b9:27:3f:d4:87:18:90:34:95:fb:a8:d5:c6: 29:8a:06:2d:6f:1b:bf:0a:92:df:5b:ad:9e:5f:15: 41:f1:0d:75:80:2a:a6:ff:16:2f:52:58:c3:32:10: 9a:e5:00:9d:08:05:0f:20:d5:d1:7e:0c:6f:e5:02: cb:a6:95:bf:b0:d0:55:58:de:fe:27:65:62:6d:d5: ba:3c:76:40:f3:03:2e:57:cb:a4:29:a6:16:4a:b5: ff:6d:30:a2:aa:1f:db:dc:46:bc:62:37:40:bc:f0: 1f:84:b0:4b:d1:ce:3b:9e:17:3a:fc:05:bb:3f:06: f0:a6:ac:52:bd:4d:51:3f:5b:5b:6c:42:75:60:e8: 79:6c:e0:66:b4:fe:b5:dd:14:dc:7b:26:8b:bb:a5: 32:24:97:fa:a7:d9:c5:d7:17:18:80:b4:1d:e7:6c: ad:c4:fa:d9:15:f8:32:eb:b4:97:bc:52:80:e3:d8: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:66:2A:4A:62:F7:90:CE:F1:FE:04:63:3F:C7:7F:6A:8F:BE:F8:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 69.39.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0a:1d:69:de:6d:10:ae:92:9b:39:e1:8a:dc:2b:f6:b4:2e: 58:81:38:22:b6:f5:39:2b:f9:ef:6b:9d:76:c1:3e:3c:ea:e3: 38:bb:72:65:14:67:9d:a2:de:09:9f:95:95:7d:12:c6:31:a1: 63:7f:be:ee:02:c3:be:83:97:fb:df:eb:bb:3c:eb:76:a9:22: ba:17:ea:69:f6:a0:f2:a1:5a:9a:c0:00:4f:74:d7:2e:48:27: c9:56:97:f3:55:5c:db:b9:f4:00:e2:18:cc:39:33:3d:44:49: 61:2c:c2:b6:c2:31:74:3c:8b:ba:19:b6:67:d9:21:fe:ea:2b: 49:b1:39:9b:ff:b6:13:65:e5:3e:90:f9:9f:4d:4b:5a:e4:c0: c8:89:41:51:a6:43:52:ee:91:0b:a3:f9:88:a5:0a:1f:73:e7: f5:43:47:6b:df:b6:12:9b:e4:f0:9a:7a:46:24:51:04:0d:dc: c6:be:b9:cd:67:32:5d:84:99:1a:e6:7a:82:61:6a:d8:48:e9: 69:68:ee:17:60:d5:58:d2:37:6e:ba:3a:69:45:6f:4d:94:2c: 57:10:32:74:89:ee:22:c7:fe:b2:37:61:03:d0:2d:46:0a:3d: 8e:10:2f:cd:c1:36:79:2f:cc:ca:0b:00:c7:ec:55:54:76:e6: 3d:41:72:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRxK0KuMPs5l24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MDg1ODY4YTktZTBlMi00NzY5LWJhYzctMDg3OWUxY2MwMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv+uTStSAtQIa6B1mIGczruG6sc7RgrD7Huq 3hBQkyD8Z8tPolEO8mJAdd9gzL9BB6TLrZJ8KK45dHo3jAXlYBY65hFR10IDfPHd sbknP9SHGJA0lfuo1cYpigYtbxu/CpLfW62eXxVB8Q11gCqm/xYvUljDMhCa5QCd CAUPINXRfgxv5QLLppW/sNBVWN7+J2VibdW6PHZA8wMuV8ukKaYWSrX/bTCiqh/b 3Ea8YjdAvPAfhLBL0c47nhc6/AW7PwbwpqxSvU1RP1tbbEJ1YOh5bOBmtP613RTc eyaLu6UyJJf6p9nF1xcYgLQd52ytxPrZFfgy67SXvFKA49ii+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdmKkpi95DO8f4EYz/Hf2qPvvhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMWZjYWFlMmYtNTZjYS0z MWEyLWIyYjUtNGU2M2RhZWFhYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAKHWnebRCukps54YrcK/a0LliBOCK29Tkr+e9rnXbBPjzq4zi7cmUU Z52i3gmflZV9EsYxoWN/vu4Cw76Dl/vf67s863apIroX6mn2oPKhWprAAE901y5I J8lWl/NVXNu59ADiGMw5Mz1ESWEswrbCMXQ8i7oZtmfZIf7qK0mxOZv/thNl5T6Q +Z9NS1rkwMiJQVGmQ1LukQuj+YilCh9z5/VDR2vfthKb5PCaekYkUQQN3Ma+uc1n Ml2EmRrmeoJhathI6Wlo7hdg1VjSN266OmlFb02ULFcQMnSJ7iLH/rI3YQPQLUYK PY4QL83BNnkvzMoLAMfsVVR25j1BcgI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:13 2025 by rpki-client