$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa File: 858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa (raw, json) Hash identifier: 1/H3AxQBKSVJo2hVF3+KdfLW8g+34LsnW1VU5GxIwlA= Subject key identifier: 9C:6A:03:83:CD:56:5F:17:B6:2B:25:62:1D:6F:67:41:60:24:DB:E0 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AF7EBD26DFE7A72D1221E9040 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 216.249.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d2:6d:fe:7a:72:d1:22:1e:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=ae8a2c7a-fd7d-40c9-99c6-ed25f6abd37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:33:7f:ee:91:0e:96:cd:46:ad:67:68:c9: 2c:81:96:7b:59:33:6b:79:ab:19:fb:97:5e:c5:67: 48:7a:39:2b:04:5c:3e:3b:b7:a1:bd:0e:98:bf:e0: 5a:d7:b9:06:8a:1c:8e:b3:22:90:c7:5c:c3:c3:13: 08:5a:db:be:bb:f3:84:b6:77:51:d6:4b:94:46:b9: b3:e0:34:c9:92:8a:d4:50:2d:ae:6b:47:0b:e1:61: a1:8a:41:de:c7:c2:3b:cc:c6:90:d5:15:ee:fd:5b: 98:c4:fc:88:02:71:9c:7d:19:bf:06:ff:b0:97:f5: fb:ca:b8:a7:3e:4d:aa:69:8a:eb:39:15:77:59:3d: 2c:1e:c6:7c:a6:f4:59:86:e7:42:79:52:49:d5:7e: f0:76:f5:7a:7f:0d:32:15:03:9b:30:48:4e:67:a9: af:0d:38:78:02:d6:2a:9f:64:40:c3:c6:fe:04:0e: c9:bd:a0:97:fa:94:46:b3:9a:cc:bb:b5:3f:f8:68: 1f:9d:4f:f6:9b:9f:05:6c:1a:51:46:ee:b8:c6:f0: 4c:8b:1d:46:a0:f1:94:d9:19:97:24:37:e7:39:a3: 75:db:50:76:1a:ff:c4:ac:a0:c1:36:96:0e:f3:6e: 47:fc:67:74:a8:55:24:67:e8:ed:88:69:6b:5c:0f: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6A:03:83:CD:56:5F:17:B6:2B:25:62:1D:6F:67:41:60:24:DB:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b7:72:d4:a2:aa:72:60:aa:7e:26:2d:19:82:4b:87:8c:6b: a9:00:e5:4c:22:7e:47:c8:b4:6c:d3:79:85:96:2f:66:a9:f8: 75:d0:b0:c7:17:5d:10:aa:66:d5:6c:12:a1:c0:e2:2e:f4:a2: 89:04:95:61:be:74:01:36:12:67:51:f0:23:c2:4c:54:a5:e8: 2d:45:10:1c:26:3a:c5:4a:88:9b:bb:63:7c:8c:b4:cf:bb:06: fd:75:1d:c5:8d:b6:93:57:10:cb:97:b6:28:19:a6:1d:ef:e3: e6:16:ac:b5:70:9e:9b:73:4a:f9:63:97:c7:fe:ee:a7:52:6d: 76:c0:de:a1:9d:f9:42:c1:e1:17:5b:76:c8:ad:58:3e:df:a5: 9c:aa:7f:dc:d9:f7:4d:d7:3d:37:51:f2:60:9d:df:99:1c:c9: 4d:22:4e:69:34:7f:4f:b9:41:9c:07:28:ff:47:7f:8e:17:83: b0:e0:d5:3f:cc:70:95:a2:20:d4:73:ab:54:6f:f4:5d:b7:f8: 17:d3:99:4b:45:4f:b2:bf:69:40:a0:8b:0e:f1:d2:70:27:e0: e1:f2:2e:16:8b:cc:bf:17:67:3f:78:d0:61:1c:20:94:16:87: f6:cb:8c:a9:a4:90:71:08:df:bd:f1:1f:71:34:8c:98:fc:af: 36:ac:d4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369Jt/npy0SIekEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YWU4YTJjN2EtZmQ3ZC00MGM5LTk5YzYtZWQyNWY2YWJkMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuozf+6RDpbNRq1naMksgZZ7WTNreasZ+5de xWdIejkrBFw+O7ehvQ6Yv+Ba17kGihyOsyKQx1zDwxMIWtu+u/OEtndR1kuURrmz 4DTJkorUUC2ua0cL4WGhikHex8I7zMaQ1RXu/VuYxPyIAnGcfRm/Bv+wl/X7yrin Pk2qaYrrORV3WT0sHsZ8pvRZhudCeVJJ1X7wdvV6fw0yFQObMEhOZ6mvDTh4AtYq n2RAw8b+BA7JvaCX+pRGs5rMu7U/+GgfnU/2m58FbBpRRu64xvBMix1GoPGU2RmX JDfnOaN121B2Gv/ErKDBNpYO825H/Gd0qFUkZ+jtiGlrXA/AHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxqA4PNVl8XtislYh1vZ0FgJNvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODU4ZmE0YTAtZDM2Yi0z ZjNlLTlmMDAtYmY2Nzc0YjMyNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Pn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG3ctSiqnJgqn4mLRmCS4eMa6kA5UwifkfItGzTeYWWL2ap+HXQsMcX XRCqZtVsEqHA4i70ookElWG+dAE2EmdR8CPCTFSl6C1FEBwmOsVKiJu7Y3yMtM+7 Bv11HcWNtpNXEMuXtigZph3v4+YWrLVwnptzSvljl8f+7qdSbXbA3qGd+ULB4Rdb dsitWD7fpZyqf9zZ903XPTdR8mCd35kcyU0iTmk0f0+5QZwHKP9Hf44Xg7Dg1T/M cJWiINRzq1Rv9F23+BfTmUtFT7K/aUCgiw7x0nAn4OHyLhaLzL8XZz940GEcIJQW h/bLjKmkkHEI373xH3E0jJj8rzas1NM= -----END CERTIFICATE-----Generated at Wed Nov 5 06:49:06 2025 by rpki-client