$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa File: d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (raw, json) Hash identifier: wU9lLmGAJmVRFink1Lgfu3+iedTpkmQGAWj/eSELNhQ= Subject key identifier: 2E:01:C5:9B:DF:F5:E3:E6:AA:A2:5D:DC:45:D2:2A:19:4C:4D:44:8A Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F4328584B41E71EC5F12E4EC8B9539540 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 23162 IP address blocks: 128.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1e:c5:f1:2e:4e:c8:b9:53:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=c60ce2df-61a9-418d-8191-26cb209a0fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:65:57:98:91:36:06:cc:cc:dd:7a:b5:04: 7e:b0:7a:5e:8b:8f:c2:64:2e:25:c0:f1:ac:9b:33: e6:f6:e8:26:e1:4f:54:1d:b9:b0:57:a7:aa:26:04: 87:47:e4:da:93:b2:c4:a7:05:bf:c7:d3:87:fb:04: 33:5f:0e:4a:e7:3e:8f:3b:60:97:0e:6b:16:c5:27: 00:8c:b3:48:10:dd:92:c0:5f:53:a7:b4:c6:0d:0c: d7:e3:af:aa:83:42:f3:f7:09:d3:50:93:c2:c2:d6: ea:3b:9b:1d:bc:6a:7b:ff:1f:09:f3:7d:a0:f7:8c: 43:c9:96:c7:b7:9b:05:63:61:9d:7d:7d:0f:ac:fc: 69:a8:70:6c:b1:6f:6c:7b:28:ef:a7:57:19:6b:cb: 96:a5:6d:b4:f1:b2:54:12:61:cf:fc:d1:fc:4f:91: 8d:22:93:d6:85:31:bc:0d:d3:f1:f9:77:d9:d0:3c: 27:e7:04:12:b1:76:14:d4:4e:f8:10:e4:24:0e:89: eb:c7:5e:25:dd:20:7a:80:a7:af:4b:de:4f:d1:01: 06:29:03:81:00:dd:ca:5f:7d:71:a9:2a:dd:d6:4e: 83:9e:eb:a0:39:46:5e:7b:c1:7d:ec:01:30:05:d2: 61:ce:0d:19:20:51:1b:56:70:5c:97:4d:e0:0a:db: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:01:C5:9B:DF:F5:E3:E6:AA:A2:5D:DC:45:D2:2A:19:4C:4D:44:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:79:d1:08:df:07:1c:78:44:b8:c2:81:83:a2:60:d7:db:9c: e0:3f:27:38:41:ed:a8:8e:01:17:68:6a:f7:49:51:bb:d7:41: 5f:29:a1:c9:c5:e7:3a:fd:8e:d2:9d:46:09:b2:09:82:d8:32: ab:98:84:d8:95:99:82:d8:40:96:76:6d:d1:14:4a:a6:fe:26: bc:20:41:fd:5c:ed:75:32:43:56:8e:b2:63:3f:cf:e0:05:df: 00:45:4f:9c:d5:ff:1b:3b:6b:c3:b8:2b:20:09:6c:1b:ea:9d: 3a:ab:4f:be:4e:53:5c:1e:84:1d:8e:70:df:74:eb:48:70:36: 67:47:07:44:3b:78:6b:d7:24:66:99:9a:87:d8:8b:1a:98:bc: 8f:19:8f:a7:96:2f:25:00:2d:88:60:80:72:b4:24:b2:ad:23: 16:67:67:ec:a4:fe:d5:c0:9d:72:86:f0:f6:fd:2a:b2:f7:01: e2:eb:2a:df:21:d4:5b:a3:b7:a5:94:1c:82:f8:85:a2:42:48: 60:80:da:c3:11:51:b1:bf:09:2e:8d:d0:73:0c:6e:a6:8d:c0: ee:a7:5b:aa:aa:b0:28:ef:e9:fb:4f:86:eb:ff:2d:08:f6:f9: b0:e1:18:56:e0:68:8f:00:b4:4f:89:a2:4d:c1:51:cc:7a:bd: 8a:1b:97:c0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtB5x7F8S5OyLlTlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YzYwY2UyZGYtNjFhOS00MThkLTgxOTEtMjZjYjIwOWEwZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf9lV5iRNgbMzN16tQR+sHpei4/CZC4lwPGs mzPm9ugm4U9UHbmwV6eqJgSHR+Tak7LEpwW/x9OH+wQzXw5K5z6PO2CXDmsWxScA jLNIEN2SwF9Tp7TGDQzX46+qg0Lz9wnTUJPCwtbqO5sdvGp7/x8J832g94xDyZbH t5sFY2GdfX0PrPxpqHBssW9seyjvp1cZa8uWpW208bJUEmHP/NH8T5GNIpPWhTG8 DdPx+XfZ0Dwn5wQSsXYU1E74EOQkDonrx14l3SB6gKevS95P0QEGKQOBAN3KX31x qSrd1k6DnuugOUZee8F97AEwBdJhzg0ZIFEbVnBcl03gCtt/cQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC4BxZvf9ePmqqJd3EXSKhlMTUSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDliNWM4MGUtZWMyYS0z YTQ0LWE1NmYtZmM2NTk1NjVmZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQXnRCN8HHHhEuMKBg6Jg19uc4D8nOEHtqI4BF2hq90lRu9dBXymhycXn Ov2O0p1GCbIJgtgyq5iE2JWZgthAlnZt0RRKpv4mvCBB/VztdTJDVo6yYz/P4AXf AEVPnNX/Gztrw7grIAlsG+qdOqtPvk5TXB6EHY5w33TrSHA2Z0cHRDt4a9ckZpma h9iLGpi8jxmPp5YvJQAtiGCAcrQksq0jFmdn7KT+1cCdcobw9v0qsvcB4usq3yHU W6O3pZQcgviFokJIYIDawxFRsb8JLo3Qcwxupo3A7qdbqqqwKO/p+0+G6/8tCPb5 sOEYVuBojwC0T4miTcFRzHq9ihuXwA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:55 2025 by rpki-client