$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa File: 0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa (raw, json) Hash identifier: xCRmsKPLc7d0DgljERWJaPo6PO5DBpxsfUg0uCL42po= Subject key identifier: 4C:E0:B4:73:4C:81:50:AE:46:DC:E8:86:E7:0A:25:7F:2F:BF:26:C4 Certificate issuer: /CN=c2cb8327-ee3e-477c-990c-118e040b2de6 Certificate serial: 010D0C9F4328584B0B76D7DA0292DFD61EA6EBC0 Authority key identifier: FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 398242 IP address blocks: 152.86.0.0/20 maxlen: 20 170.117.192.0/21 maxlen: 21 198.71.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d7:da:02:92:df:d6:1e:a6:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2cb8327-ee3e-477c-990c-118e040b2de6 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=9db83496-e9f8-436f-898e-30453ce69ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:7c:24:ca:40:41:cf:88:c5:8b:e5:22:50: d5:b5:cf:d2:65:fe:4a:0f:32:26:b0:14:7a:ab:86: 3c:6b:d0:6b:20:93:70:64:da:86:fc:96:3d:c2:b1: a1:57:6e:47:f4:60:15:7f:63:7d:a3:d5:68:17:0d: f1:e7:c0:27:d1:6a:f5:0c:89:24:bd:9a:9f:79:e2: 98:86:4a:4b:7e:14:f0:4f:6c:fd:04:57:01:e1:0f: 43:01:4b:6a:53:b1:a0:88:21:2f:40:c9:5b:15:c0: 0b:5b:97:80:06:09:58:81:48:a4:94:af:1e:f4:d8: 42:36:53:86:46:a1:50:53:0f:fa:ed:2e:27:1a:dc: a6:20:84:48:a7:6c:62:79:36:56:9a:a2:d3:d7:51: 61:6e:d6:ba:65:58:5e:ca:33:90:34:44:22:cf:87: c5:dc:c5:c3:fe:b0:7e:93:f0:81:86:97:94:c0:ad: 07:e6:c0:e8:84:ce:60:04:0a:7e:77:14:74:5d:21: 34:e1:9f:11:8b:4f:33:7a:53:f6:5d:e5:b6:dd:d3: 1c:6b:29:0d:f7:34:46:da:74:eb:b2:59:f4:56:29: 78:ad:11:21:9b:3a:3f:11:80:14:ae:e7:5c:29:20: 9d:15:5c:30:55:03:81:0f:48:c0:a5:98:c0:5a:d9: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E0:B4:73:4C:81:50:AE:46:DC:E8:86:E7:0A:25:7F:2F:BF:26:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/0a9a2612-2a3b-3ddd-86dc-e75f432906a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6/c2cb8327-ee3e-477c-990c-118e040b2de6.crl X509v3 Authority Key Identifier: keyid:FE:BD:89:00:A0:67:2B:77:59:9D:38:BF:4F:0B:DF:E5:DD:0B:B6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c2cb8327-ee3e-477c-990c-118e040b2de6.cer sbgp-ipAddrBlock: critical IPv4: 152.86.0.0/20 170.117.192.0/21 198.71.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e9:1d:ec:4f:4c:ea:37:79:77:de:5f:eb:20:2b:b9:f5:2d: 65:e6:6f:4b:25:87:10:26:cb:54:0c:82:b7:f2:9a:61:2e:84: 2b:49:9f:0a:0c:a3:b1:e8:4b:3d:15:43:52:b4:80:44:11:e7: 80:5d:60:83:77:2f:ba:57:0e:f2:80:35:55:02:fe:61:fb:c1: db:48:ce:28:7f:6f:20:d4:05:25:75:fc:9c:db:61:c6:65:e1: d5:0c:a2:eb:fc:cf:05:b1:fc:e4:90:5e:27:10:cc:66:d8:7d: 34:88:8c:ff:cc:1e:88:a7:4f:3b:99:66:30:0a:10:7c:49:a9: c3:2b:3a:c2:28:9c:0e:c5:c4:d4:10:f4:9e:7f:1f:72:be:d4: 0c:f7:31:73:25:b8:c3:3e:b3:14:61:a9:fd:dc:72:fa:ed:3d: 09:da:8c:1b:1f:2d:30:06:b7:39:09:9f:e4:78:d1:dc:2f:83: d5:db:62:9b:6c:34:a0:32:93:ec:6a:2b:a4:76:ab:a2:93:34: d6:f0:a8:d5:f0:0e:77:8e:80:7a:11:4b:4c:14:8d:e6:3e:00: 21:fa:c6:7c:c0:8b:a4:8a:25:76:b2:33:44:5b:a0:92:38:e4: b8:95:22:aa:ad:82:9c:72:d1:4e:4f:e6:d7:56:0a:be:54:c2: f0:f1:48:9a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsLdtfaApLf1h6m68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJjYjgzMjctZWUzZS00NzdjLTk5MGMtMTE4ZTA0MGIy ZGU2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OWRiODM0OTYtZTlmOC00MzZmLTg5OGUtMzA0NTNjZTY5YWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAl8JMpAQc+IxYvlIlDVtc/SZf5KDzImsBR6 q4Y8a9BrIJNwZNqG/JY9wrGhV25H9GAVf2N9o9VoFw3x58An0Wr1DIkkvZqfeeKY hkpLfhTwT2z9BFcB4Q9DAUtqU7GgiCEvQMlbFcALW5eABglYgUiklK8e9NhCNlOG RqFQUw/67S4nGtymIIRIp2xieTZWmqLT11Fhbta6ZVheyjOQNEQiz4fF3MXD/rB+ k/CBhpeUwK0H5sDohM5gBAp+dxR0XSE04Z8Ri08zelP2XeW23dMcaykN9zRG2nTr sln0Vil4rREhmzo/EYAUrudcKSCdFVwwVQOBD0jApZjAWtmNkwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEzgtHNMgVCuRtzohucKJX8vvybEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jMmNi ODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThlMDQwYjJkZTYvMGE5YTI2MTItMmEzYi0z ZGRkLTg2ZGMtZTc1ZjQzMjkwNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzJjYjgzMjctZWUzZS00NzdjLTk5 MGMtMTE4ZTA0MGIyZGU2L2MyY2I4MzI3LWVlM2UtNDc3Yy05OTBjLTExOGUwNDBi MmRlNi5jcmwwHwYDVR0jBBgwFoAU/r2JAKBnK3dZnTi/Twvf5d0LtqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jMmNiODMyNy1lZTNlLTQ3N2MtOTkwYy0xMThl MDQwYjJkZTYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEmFYAAwQD qnXAAwQExkdQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADTpHexPTOo3eXfeX+sgK7n1LWXmb0slhxAmy1QM grfymmEuhCtJnwoMo7HoSz0VQ1K0gEQR54BdYIN3L7pXDvKANVUC/mH7wdtIzih/ byDUBSV1/JzbYcZl4dUMouv8zwWx/OSQXicQzGbYfTSIjP/MHoinTzuZZjAKEHxJ qcMrOsIonA7FxNQQ9J5/H3K+1Az3MXMluMM+sxRhqf3ccvrtPQnajBsfLTAGtzkJ n+R40dwvg9XbYptsNKAyk+xqK6R2q6KTNNbwqNXwDneOgHoRS0wUjeY+ACH6xnzA i6SKJXayM0RboJI45LiVIqqtgpxy0U5P5tdWCr5UwvDxSJo= -----END CERTIFICATE-----Generated at Wed Nov 5 22:12:26 2025 by rpki-client