$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa File: c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa (raw, json) Hash identifier: 0m6ExreINIs7Hg56Txg6jG9xHfQ1T6v0T2bLwJx8Lv0= Subject key identifier: 5F:F7:25:11:5D:AE:3D:E2:32:36:3B:14:83:BB:09:48:B1:C7:9A:69 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BA0D25ED3E5A9BA18C14A53A8 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20014 IP address blocks: 209.151.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5e:d3:e5:a9:ba:18:c1:4a:53:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=40282a53-585b-436b-9e10-7056d15d7a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:c4:78:6b:f0:50:81:8b:b9:8f:dc:1d:2a: a8:45:77:0a:cf:29:18:45:e6:82:e8:96:84:32:fd: dc:b7:28:78:7b:e2:9f:6b:3a:3c:eb:0c:7d:ab:5d: 5b:77:78:97:a1:c2:e6:de:d4:e3:6a:bf:5f:00:4e: 27:c4:ad:bb:cc:21:cb:3c:a8:82:ce:11:fd:0d:b1: d0:7e:a3:69:97:86:2c:b3:9c:6e:97:a6:63:d7:d2: ad:52:fd:39:30:95:f9:95:1f:f1:da:ba:cf:67:7c: 6a:a5:5c:2b:c0:87:82:0c:42:4b:47:09:32:23:c4: b0:9b:35:af:6d:2f:fe:af:8a:9d:0c:3b:e3:21:16: 65:96:81:49:9d:02:cb:d4:9a:13:f4:d3:42:89:fa: ce:7d:c6:7c:82:7f:c4:4e:57:70:37:22:22:e4:2a: aa:89:99:aa:e6:a5:95:03:5d:28:8d:57:6f:ab:a9: 4e:1a:64:83:aa:07:8a:46:bc:8d:26:50:a9:6d:88: 46:f3:9d:15:ba:fe:bc:39:ee:a3:20:16:09:e3:15: ea:71:5d:f1:0b:e2:5d:12:da:e6:1a:95:6d:54:86: 26:b9:cd:c1:69:8f:99:a8:51:40:36:b7:cc:fb:b6: 6a:79:59:0e:98:12:40:1b:e2:5f:56:28:96:be:50: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F7:25:11:5D:AE:3D:E2:32:36:3B:14:83:BB:09:48:B1:C7:9A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:dd:c9:a9:0a:22:25:fe:80:9d:83:41:1f:f7:d2:c9:0b:af: 2e:4e:0a:5e:0e:78:10:65:98:73:1c:c5:29:8f:f7:7a:54:a5: 43:bd:72:88:85:7a:e3:a4:65:2c:08:17:4b:a2:d3:f4:17:4f: 3e:7e:2e:b0:31:6a:89:f4:02:63:f9:01:a5:d2:51:a8:2e:ad: 7f:48:75:d5:0a:6f:9b:7d:3e:bf:66:4b:bf:2e:c0:af:ae:38: 0b:71:7d:10:8f:49:e5:3a:25:79:8f:80:42:99:db:62:ce:04: 4f:9c:fa:fb:37:69:e6:b5:33:70:8a:ab:74:e4:2b:e8:7b:01: b0:30:4b:04:91:4e:eb:a3:c8:94:bb:5e:3d:dd:05:34:98:04: f7:7d:55:9c:a6:73:e4:08:57:7e:2e:2c:b0:69:70:e9:e5:2a: 09:8f:6b:ae:7f:7b:c1:c5:f0:31:87:91:6e:9b:65:21:67:de: bf:05:b1:10:46:f2:ba:21:18:a5:32:6c:c8:dd:c4:ef:30:87: 3c:54:a0:da:36:f6:a3:c7:f6:58:4c:03:2d:f0:20:d3:58:62: 5b:af:dc:30:cf:25:90:e4:3f:0b:64:be:07:87:6d:f9:b3:74: d5:26:be:5d:fd:85:39:f7:bb:9e:80:f9:8b:a4:29:9e:f8:17: d9:11:14:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0l7T5am6GMFKU6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NDAyODJhNTMtNTg1Yi00MzZiLTllMTAtNzA1NmQxNWQ3YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHTEeGvwUIGLuY/cHSqoRXcKzykYReaC6JaE Mv3ctyh4e+Kfazo86wx9q11bd3iXocLm3tTjar9fAE4nxK27zCHLPKiCzhH9DbHQ fqNpl4Yss5xul6Zj19KtUv05MJX5lR/x2rrPZ3xqpVwrwIeCDEJLRwkyI8SwmzWv bS/+r4qdDDvjIRZlloFJnQLL1JoT9NNCifrOfcZ8gn/ETldwNyIi5CqqiZmq5qWV A10ojVdvq6lOGmSDqgeKRryNJlCpbYhG850Vuv68Oe6jIBYJ4xXqcV3xC+JdEtrm GpVtVIYmuc3BaY+ZqFFANrfM+7ZqeVkOmBJAG+JfViiWvlDbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/3JRFdrj3iMjY7FIO7CUixx5ppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzkxYjFiZGUtMDRiOC0z Yzc2LWI2ZjUtMzU4NzdhNWVkMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZexMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjdyakKIiX+gJ2DQR/30skLry5OCl4OeBBlmHMcxSmP93pUpUO9coiF euOkZSwIF0ui0/QXTz5+LrAxaon0AmP5AaXSUagurX9IddUKb5t9Pr9mS78uwK+u OAtxfRCPSeU6JXmPgEKZ22LOBE+c+vs3aea1M3CKq3TkK+h7AbAwSwSRTuujyJS7 Xj3dBTSYBPd9VZymc+QIV34uLLBpcOnlKgmPa65/e8HF8DGHkW6bZSFn3r8FsRBG 8rohGKUybMjdxO8whzxUoNo29qPH9lhMAy3wINNYYluv3DDPJZDkPwtkvgeHbfmz dNUmvl39hTn3u56A+YukKZ74F9kRFHs= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:33 2025 by rpki-client