$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa File: 352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa (raw, json) Hash identifier: Wp4vf7YROqIbH0rbL6g+84SzK1FMKNPDBkOF+MBgXW0= Subject key identifier: 14:B0:18:5C:B2:45:B8:6A:21:E1:D9:58:EF:E6:10:9D:24:3D:D4:F0 Certificate issuer: /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Certificate serial: 010D0C9F4328584AF9514718154DF6C807369470 Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 0 IP address blocks: 206.53.175.0/24 maxlen: 32 2001:504:58::/64 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:47:18:15:4d:f6:c8:07:36:94:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=907d2fb5-998f-4e89-a52a-10761e7fb134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:e4:25:95:5d:64:88:02:76:13:e5:2a:33: bd:36:4f:57:c6:85:f4:25:81:80:80:6f:3b:2d:76: f8:1e:c3:79:37:ec:fa:33:7e:e6:ac:a5:2a:02:64: fc:0e:38:e0:9a:6b:eb:ac:7b:8c:a8:d5:16:ef:6c: 9e:b5:ee:15:48:b5:cf:4e:33:9f:4b:a9:19:b5:48: aa:e8:35:b0:b6:a2:5f:95:b4:ca:83:74:07:a0:09: b1:17:42:d3:35:a3:93:7b:e7:c3:cf:3e:29:49:11: 62:90:a6:01:ba:54:14:c9:09:ba:6f:0e:cf:b4:73: e0:5c:ab:5d:f9:0b:fd:f3:f9:82:ef:71:18:60:86: 0c:40:39:e8:14:1e:57:b8:bc:05:76:30:bd:8d:a1: 36:0b:81:14:9f:9f:e5:22:cb:70:ba:36:d1:1f:d6: b9:8a:f6:16:79:3d:b3:dd:5b:c8:d0:be:8d:5c:ae: 3a:50:fd:b2:3a:4a:c3:bf:f9:4c:0f:d7:64:ee:a0: 27:e3:41:1d:c9:dc:8a:1b:fe:a4:28:ae:a2:f8:70: 04:28:ce:ff:57:40:3e:79:54:46:94:12:67:aa:c6: dd:9f:e0:13:df:5d:1e:63:92:b3:b9:b4:e6:0d:80: ec:58:d4:cf:9f:21:a9:df:4e:9b:f0:d7:a8:a5:30: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:18:5C:B2:45:B8:6A:21:E1:D9:58:EF:E6:10:9D:24:3D:D4:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl X509v3 Authority Key Identifier: keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer sbgp-ipAddrBlock: critical IPv4: 206.53.175.0/24 IPv6: 2001:504:58::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b5:72:52:63:db:2b:8b:30:71:ac:b9:b6:d6:f2:6c:be:78: 2d:d5:aa:4d:1b:d7:b2:3d:ce:b1:d3:bd:a3:e2:aa:25:51:10: b7:8c:20:18:de:d2:c2:26:69:0f:71:68:46:e5:34:62:38:b0: 04:7e:04:37:5e:0e:13:a9:24:21:39:29:9b:bb:1e:50:09:9d: 3b:b1:ce:68:b9:03:d1:1b:97:a2:14:ec:ae:fd:84:51:6b:02: 4a:5c:40:48:b3:3b:47:61:71:d7:ce:87:ee:4e:60:8a:2e:43: b0:67:21:da:37:de:38:52:63:32:eb:e2:07:ee:26:59:a0:d2: 81:7e:a5:4e:77:59:50:32:bf:5f:af:4f:36:ce:89:eb:1f:78: cd:a2:57:9c:a2:4b:12:d9:f0:9c:67:06:1a:99:ed:3c:99:82: 41:48:1f:98:92:da:d1:2c:94:8f:41:38:5d:50:9e:69:ff:56: bb:ee:ad:fd:e4:36:7c:46:87:f0:ed:4c:c8:0d:67:2d:ee:26: a4:5c:c6:6e:81:c1:57:9b:8a:62:23:e8:64:12:ea:52:64:bc: bc:06:26:cd:0b:4b:6e:d5:c9:16:06:3d:51:31:f2:08:d0:d8: 3f:f5:c9:d7:40:ac:55:63:8c:9a:fc:9d:f8:4c:f3:df:28:a6: 43:81:49:8d -----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgIUAQ0Mn0MoWEr5UUcYFU32yAc2lHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJkOWFiODYtOTVkNC00ZjI2LWFkZTYtNTJiY2FhMjlk NjZjMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTA3ZDJmYjUtOTk4Zi00ZTg5LWE1MmEtMTA3NjFlN2ZiMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+nkJZVdZIgCdhPlKjO9Nk9XxoX0JYGAgG87 LXb4HsN5N+z6M37mrKUqAmT8DjjgmmvrrHuMqNUW72yete4VSLXPTjOfS6kZtUiq 6DWwtqJflbTKg3QHoAmxF0LTNaOTe+fDzz4pSRFikKYBulQUyQm6bw7PtHPgXKtd +Qv98/mC73EYYIYMQDnoFB5XuLwFdjC9jaE2C4EUn5/lIstwujbRH9a5ivYWeT2z 3VvI0L6NXK46UP2yOkrDv/lMD9dk7qAn40EdydyKG/6kKK6i+HAEKM7/V0A+eVRG lBJnqsbdn+AT310eY5KzubTmDYDsWNTPnyGp306b8NeopTBrNQIDAQABo4IDaDCC A2QwHQYDVR0OBBYEFBSwGFyyRbhqIeHZWO/mEJ0kPdTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5 YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJjYWEyOWQ2NmMvMzUyZTQ0ZTAtNzE4Yi0z ZmRlLTg4YzktMDBmM2YwYmI4OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDJkOWFiODYtOTVkNC00ZjI2LWFk ZTYtNTJiY2FhMjlkNjZjL2QyZDlhYjg2LTk1ZDQtNGYyNi1hZGU2LTUyYmNhYTI5 ZDY2Yy5jcmwwHwYDVR0jBBgwFoAUIUu7LAystD6Zr4hOwvd0d8UuOm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJj YWEyOWQ2NmMuY2VyMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAzjWvMBEE AgACMAsDCQAgAQUEAFgAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAtXJSY9srizBxrLm21vJsvngt1apN G9eyPc6x072j4qolURC3jCAY3tLCJmkPcWhG5TRiOLAEfgQ3Xg4TqSQhOSmbux5Q CZ07sc5ouQPRG5eiFOyu/YRRawJKXEBIsztHYXHXzofuTmCKLkOwZyHaN944UmMy 6+IH7iZZoNKBfqVOd1lQMr9fr082zonrH3jNolecoksS2fCcZwYame08mYJBSB+Y ktrRLJSPQThdUJ5p/1a77q395DZ8Rofw7UzIDWct7iakXMZugcFXm4piI+hkEupS ZLy8BibNC0tu1ckWBj1RMfII0Ng/9cnXQKxVY4ya/J34TPPfKKZDgUmN -----END CERTIFICATE-----Generated at Tue Nov 4 20:58:10 2025 by rpki-client