$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa File: f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa (raw, json) Hash identifier: 3PFw3OZ/wBXq0cyYE3y3dtoa+gt+gIZvKVRlkcJhs18= Subject key identifier: 81:89:4B:28:E2:86:28:90:F1:B9:DC:AD:D8:ED:FD:5C:9D:0B:93:B0 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AF7EBD1B97F67EDDF5EBCA380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 216.249.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d1:b9:7f:67:ed:df:5e:bc:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=19341e70-a2fb-422b-811c-aec70af0e402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:88:ab:82:1b:08:c1:5b:45:7e:a9:6b:20: a2:93:b0:f3:6d:6a:00:28:2b:58:98:7b:08:02:6f: 4c:b5:f1:df:be:bf:c3:41:3d:73:4d:b3:f5:40:6a: ba:b5:74:6a:03:ed:ea:2d:04:50:b4:99:da:95:3f: b4:3e:42:26:62:59:0f:f9:70:5d:24:cc:df:99:31: 30:ec:f5:88:f0:ad:0a:e7:0b:24:2d:36:ee:fc:27: b3:68:6a:7f:68:75:5c:fd:2f:31:60:ad:07:a7:bc: 6e:70:79:29:80:8d:87:42:fb:04:f4:0d:e5:e8:1c: b1:1a:80:b7:6c:c8:9d:54:ed:ba:4c:3a:bc:d4:2a: 14:02:4f:3a:22:2c:a1:74:d2:7e:3d:8f:1d:a4:9d: be:d1:b0:9a:70:5d:10:70:9a:6c:7d:6f:8d:e7:53: 34:10:bb:f3:7b:75:49:c2:3f:40:f9:d2:ee:16:39: 1b:38:65:28:3c:76:53:24:b6:83:13:df:34:62:e3: b2:9f:99:49:6f:85:73:22:94:cd:19:80:40:e3:d8: 1f:e4:09:22:16:50:9d:63:2b:7b:7f:fc:88:8e:0b: f2:72:b6:8a:10:2c:7b:e4:cf:84:29:97:8e:6a:d0: 4a:52:8f:66:5d:20:3d:9d:aa:80:f3:23:19:bb:71: ea:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:89:4B:28:E2:86:28:90:F1:B9:DC:AD:D8:ED:FD:5C:9D:0B:93:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f0:0a:01:b0:99:42:95:1b:f8:24:7f:18:5e:35:53:af:71: 0a:a6:bb:60:ef:57:99:25:d7:fc:cc:9b:70:15:79:e9:a3:7e: cc:6e:6a:1f:2c:a8:44:b4:1b:dc:d5:f2:6f:b1:40:2f:3b:57: c5:a6:e7:49:02:3b:41:16:c9:66:d8:9e:44:43:ce:64:3b:c4: 66:2c:79:e7:41:a2:2f:a3:a8:34:25:bd:bd:47:3a:d8:12:cb: 7f:0e:b9:86:ea:90:bc:a8:c3:ac:45:c9:c9:c0:97:ad:c1:e9: 5a:1e:14:bb:3c:e3:a1:5e:eb:63:bd:c6:86:da:5e:74:80:47: b9:0f:bf:3e:72:62:a5:01:13:6f:42:19:55:b7:26:87:16:2b: 8a:9b:8a:16:ef:cc:09:79:67:37:a3:9e:9d:0a:93:65:ae:d4: 62:3d:0d:00:7b:9b:00:93:9e:cb:2c:46:0f:7b:df:8c:70:2e: 1a:9a:9d:29:e2:15:9f:91:60:fc:65:68:cb:44:eb:d0:08:f7: f5:a6:e2:66:15:b3:82:c1:21:2d:91:9b:3e:01:53:e4:0c:fd: e9:31:65:55:98:a2:a9:59:6b:94:ca:af:a0:93:e8:40:5c:eb: d5:0a:fd:cd:63:4c:a0:c8:f2:2e:54:58:fc:fa:eb:99:b2:af: 90:5a:28:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369G5f2ft3168o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MTkzNDFlNzAtYTJmYi00MjJiLTgxMWMtYWVjNzBhZjBlNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxyIq4IbCMFbRX6payCik7DzbWoAKCtYmHsI Am9MtfHfvr/DQT1zTbP1QGq6tXRqA+3qLQRQtJnalT+0PkImYlkP+XBdJMzfmTEw 7PWI8K0K5wskLTbu/CezaGp/aHVc/S8xYK0Hp7xucHkpgI2HQvsE9A3l6ByxGoC3 bMidVO26TDq81CoUAk86IiyhdNJ+PY8dpJ2+0bCacF0QcJpsfW+N51M0ELvze3VJ wj9A+dLuFjkbOGUoPHZTJLaDE980YuOyn5lJb4VzIpTNGYBA49gf5AkiFlCdYyt7 f/yIjgvycraKECx75M+EKZeOatBKUo9mXSA9naqA8yMZu3HqmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGJSyjihiiQ8bncrdjt/VydC5OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjJhYmZkYzQtNmI4MC0z YzJkLTk2YjgtYzUyYWYzZWJkNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXwCgGwmUKVG/gkfxheNVOvcQqmu2DvV5kl1/zMm3AVeemjfsxuah8s qES0G9zV8m+xQC87V8Wm50kCO0EWyWbYnkRDzmQ7xGYseedBoi+jqDQlvb1HOtgS y38OuYbqkLyow6xFycnAl63B6VoeFLs846Fe62O9xobaXnSAR7kPvz5yYqUBE29C GVW3JocWK4qbihbvzAl5Zzejnp0Kk2Wu1GI9DQB7mwCTnsssRg9734xwLhqanSni FZ+RYPxlaMtE69AI9/Wm4mYVs4LBIS2Rmz4BU+QM/ekxZVWYoqlZa5TKr6CT6EBc 69UK/c1jTKDI8i5UWPz665myr5BaKE8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:30:56 2025 by rpki-client