$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa File: 1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa (raw, json) Hash identifier: 8hhb/bzcqlkD+bawTw3l8n/NMRLmnyIWEBVV5Avle/M= Subject key identifier: C9:FB:D4:58:1C:42:39:4C:D5:92:F5:68:7B:9D:19:FC:5D:DE:9C:13 Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F4328584BB88D08FE30DB0C4DFE6DC980 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 33164 IP address blocks: 172.97.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:08:fe:30:db:0c:4d:fe:6d:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=c6226d8a-aa49-4dac-8828-ef7e78b2e22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f0:af:7a:44:42:8b:1d:64:dc:38:93:dd:59: 99:80:2d:33:af:df:38:0e:e1:f0:df:f8:68:c1:75: 21:ee:37:50:d7:d2:8f:fb:3f:56:28:11:17:13:24: 9d:c7:30:87:df:03:21:9e:4e:57:6b:74:6a:7f:6e: fa:04:2a:97:e7:18:c1:9f:28:42:e0:d1:ff:6a:9c: a2:fd:35:aa:f2:a9:ae:3f:91:23:c0:e7:44:99:04: bc:e5:5d:67:fe:42:ec:fe:98:2f:95:0e:87:08:74: 25:a0:5e:01:97:2d:aa:31:a1:4b:cd:1d:2a:9e:2c: df:d2:0e:38:07:40:88:a3:3c:10:05:50:74:98:a4: a7:85:21:f1:49:ab:a3:87:58:8d:d2:46:16:8a:95: cd:a2:4e:1b:ae:30:4e:6f:b3:e1:47:9d:5d:9d:aa: 5f:7b:af:dd:7f:81:53:f9:79:dc:1e:1c:d2:25:e8: 21:3a:16:37:f0:66:0e:55:6c:d8:af:03:9f:2a:26: a8:2b:7c:2b:2d:ca:c9:74:5d:06:2b:1a:8b:31:a6: 1b:24:bb:f0:d2:be:96:32:23:04:f8:20:ff:1c:ee: 8c:a0:fc:50:f2:13:39:1c:39:ba:7b:a1:1c:0e:5b: 6d:91:81:39:43:81:d2:c9:ab:03:7f:bb:56:5f:32: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FB:D4:58:1C:42:39:4C:D5:92:F5:68:7B:9D:19:FC:5D:DE:9C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 172.97.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:71:b3:a7:80:b1:7f:5a:14:71:04:a5:5a:14:48:58:c8:4d: c4:f3:64:eb:4f:1f:b8:64:c6:6c:1e:55:17:0b:37:f8:1b:84: e5:49:16:7d:ef:ba:02:e1:29:5a:af:62:40:7d:e5:51:d3:b7: 5e:a9:e2:73:83:69:bf:fd:60:e0:ed:ae:26:4a:ed:fa:c5:71: 6c:85:fb:93:18:9f:bc:c2:3a:62:7e:4a:ad:d6:ae:7a:90:be: ee:ca:84:0c:91:67:52:64:e1:09:b5:1f:c0:cf:16:59:15:8f: d5:f1:fd:ec:62:1a:ad:e8:03:e7:bf:f9:28:7d:a3:9c:5d:f8: 77:39:b9:df:12:6e:06:97:f2:85:3d:16:9d:51:1f:8b:14:46: f1:08:d1:06:7f:c1:65:59:34:7d:dd:6b:a9:92:87:e2:eb:95: 28:01:f6:9d:e5:11:d9:fc:d0:4c:b9:e9:96:19:66:cb:a5:6c: 1c:d2:22:37:d4:ab:bf:c4:ab:96:e3:70:27:36:42:7e:5a:b1: 17:d0:5e:77:ef:6b:0d:9d:bc:78:4d:68:b4:a6:56:a2:db:10: b7:57:df:16:fb:ef:71:90:b8:c1:4f:1e:f5:c7:26:7c:b3:b9: 3d:f1:a1:21:9c:5f:83:d0:d5:49:1e:62:1b:6d:04:8d:ec:46: 15:64:0d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQj+MNsMTf5tyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzYyMjZkOGEtYWE0OS00ZGFjLTg4MjgtZWY3ZTc4YjJlMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/CvekRCix1k3DiT3VmZgC0zr984DuHw3/ho wXUh7jdQ19KP+z9WKBEXEySdxzCH3wMhnk5Xa3Rqf276BCqX5xjBnyhC4NH/apyi /TWq8qmuP5EjwOdEmQS85V1n/kLs/pgvlQ6HCHQloF4Bly2qMaFLzR0qnizf0g44 B0CIozwQBVB0mKSnhSHxSaujh1iN0kYWipXNok4brjBOb7PhR51dnapfe6/df4FT +XncHhzSJeghOhY38GYOVWzYrwOfKiaoK3wrLcrJdF0GKxqLMaYbJLvw0r6WMiME +CD/HO6MoPxQ8hM5HDm6e6EcDlttkYE5Q4HSyasDf7tWXzLr6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn71FgcQjlM1ZL1aHudGfxd3pwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvMWQ3ZmIxYzQtYzk2Ny0z NGIyLWIxNGYtOTUyMDZkYjc1YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1xs6eAsX9aFHEEpVoUSFjITcTzZOtPH7hkxmweVRcLN/gbhOVJFn3v ugLhKVqvYkB95VHTt16p4nODab/9YODtriZK7frFcWyF+5MYn7zCOmJ+Sq3WrnqQ vu7KhAyRZ1Jk4Qm1H8DPFlkVj9Xx/exiGq3oA+e/+Sh9o5xd+Hc5ud8SbgaX8oU9 Fp1RH4sURvEI0QZ/wWVZNH3da6mSh+LrlSgB9p3lEdn80Ey56ZYZZsulbBzSIjfU q7/Eq5bjcCc2Qn5asRfQXnfvaw2dvHhNaLSmVqLbELdX3xb773GQuMFPHvXHJnyz uT3xoSGcX4PQ1UkeYhttBI3sRhVkDUY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:08 2025 by rpki-client