$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aeae9ff8-da94-363f-835c-3e5b156d62d2.roa File: aeae9ff8-da94-363f-835c-3e5b156d62d2.roa (raw, json) Hash identifier: v4/4xgZVKNO9IMEUBBIQzZGDDIyxl5PDnuaEHyDIOvY= Subject key identifier: 88:54:65:CA:77:DF:EB:B0:3D:C9:EC:5C:07:51:6F:03:1D:97:E0:20 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B2E5C4047EDA763DB73FE4900 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aeae9ff8-da94-363f-835c-3e5b156d62d2.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 18785 IP address blocks: 208.53.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:40:47:ed:a7:63:db:73:fe:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=55fe6892-3558-4998-ae32-02ec341155eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:8e:de:21:c5:52:e9:e5:ed:b5:75:ee:59: a9:a3:97:a1:a0:f9:c5:5a:7b:8d:d5:ac:24:52:41: eb:2d:0d:0a:7e:6d:91:e1:59:8f:bb:b6:3f:27:68: 7f:73:e1:d9:c1:24:fa:15:c8:f2:e7:32:9d:f4:9d: 09:07:41:d3:0e:a5:f9:87:00:a8:d1:4b:ad:5b:72: 14:77:a4:c6:15:a5:38:58:c4:47:5b:ed:c9:7d:9e: 14:50:87:e6:b1:07:e7:1f:e6:6a:ab:fa:98:50:45: 2d:9f:81:89:bc:0a:d4:ba:be:a1:b6:c5:68:4b:40: e5:0d:c7:2a:f7:59:54:e0:4e:13:c8:a5:29:aa:8b: 61:7e:95:03:87:aa:ac:a8:19:5e:11:b2:aa:9a:f2: f4:8a:15:b6:5b:81:c2:5f:f6:1b:cb:38:29:ef:27: 95:81:f8:1e:6f:d7:65:eb:e2:db:43:a2:29:f1:8d: a0:ed:65:b0:f3:70:92:eb:16:4c:c3:af:a3:30:a9: bd:aa:31:87:9c:8c:c0:0d:78:40:dd:81:ae:97:9a: 72:78:05:54:21:34:ae:e7:90:8c:9b:65:bc:4c:6f: 00:91:ce:57:50:39:95:57:ba:59:e8:dd:a9:69:5c: 2c:d3:16:5d:b7:82:c0:3e:f1:31:5d:59:9e:27:6a: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:65:CA:77:DF:EB:B0:3D:C9:EC:5C:07:51:6F:03:1D:97:E0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aeae9ff8-da94-363f-835c-3e5b156d62d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:70:cb:f5:30:15:89:da:f4:38:d7:f8:41:6c:b5:e0:39:34: f1:88:0e:e8:76:92:67:43:5c:f3:45:dc:a0:92:b0:aa:29:6d: df:b1:10:ff:3a:d5:78:91:06:20:39:e4:c5:e5:4c:76:9e:b8: ec:0a:55:d4:12:da:de:c2:4d:53:82:39:f3:fd:f3:40:fa:78: 04:c3:41:da:21:b4:27:10:9d:7f:8e:24:6e:2a:4b:ee:6e:90: 97:83:33:99:4c:fd:58:aa:46:f0:ef:19:9d:3e:d8:f9:07:91: 83:4c:65:8c:e5:7e:8f:c4:74:4e:67:2f:38:a0:e7:9d:34:c9: 1d:e4:7c:01:8d:6b:10:93:f1:5c:17:1f:46:f4:8d:17:cc:c9: b8:ef:55:cf:3f:90:e2:58:bd:a0:70:38:30:13:85:7e:7e:ff: 3c:d2:14:9e:10:b6:b5:74:5b:58:e8:b8:7e:da:48:a5:f4:82: 4b:77:a9:3e:c7:85:43:7f:f3:69:c6:54:67:4a:65:e9:36:b0: b2:73:c2:bb:21:e1:2c:ae:2e:4b:f2:da:61:92:68:67:f6:7d: 0a:d7:2a:15:32:2e:72:1f:ca:8d:d1:62:0a:5d:5e:90:f5:69: 47:35:0d:ab:65:f5:c7:18:11:03:ca:47:8a:af:c8:c3:d7:76: 15:5b:dd:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEBH7adj23P+SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NTVmZTY4OTItMzU1OC00OTk4LWFlMzItMDJlYzM0MTE1NWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8+O3iHFUunl7bV17lmpo5ehoPnFWnuN1awk UkHrLQ0Kfm2R4VmPu7Y/J2h/c+HZwST6Fcjy5zKd9J0JB0HTDqX5hwCo0UutW3IU d6TGFaU4WMRHW+3JfZ4UUIfmsQfnH+Zqq/qYUEUtn4GJvArUur6htsVoS0DlDccq 91lU4E4TyKUpqothfpUDh6qsqBleEbKqmvL0ihW2W4HCX/Ybyzgp7yeVgfgeb9dl 6+LbQ6Ip8Y2g7WWw83CS6xZMw6+jMKm9qjGHnIzADXhA3YGul5pyeAVUITSu55CM m2W8TG8Akc5XUDmVV7pZ6N2paVws0xZdt4LAPvExXVmeJ2qPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhUZcp33+uwPcnsXAdRbwMdl+AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWVhZTlmZjgtZGE5NC0z NjNmLTgzNWMtM2U1YjE1NmQ2MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9wy/UwFYna9DjX+EFsteA5NPGIDuh2kmdDXPNF3KCSsKopbd+xEP86 1XiRBiA55MXlTHaeuOwKVdQS2t7CTVOCOfP980D6eATDQdohtCcQnX+OJG4qS+5u kJeDM5lM/ViqRvDvGZ0+2PkHkYNMZYzlfo/EdE5nLzig5500yR3kfAGNaxCT8VwX H0b0jRfMybjvVc8/kOJYvaBwODAThX5+/zzSFJ4QtrV0W1jouH7aSKX0gkt3qT7H hUN/82nGVGdKZek2sLJzwrsh4SyuLkvy2mGSaGf2fQrXKhUyLnIfyo3RYgpdXpD1 aUc1Datl9ccYEQPKR4qvyMPXdhVb3es= -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:34 2025 by rpki-client