$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa File: ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa (raw, json) Hash identifier: 01HbHaMGaC6wElawRFzSgPRqAYZMv5wFq8U9/c47vRE= Subject key identifier: 9D:DE:C0:61:94:A2:8E:3A:4C:22:68:DA:B2:F3:F7:A7:49:D3:AC:56 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584B2FC1BA6D8A329DF5BF8EE700 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 14956 IP address blocks: 216.126.224.0/23 maxlen: 24 216.126.227.0/24 maxlen: 24 216.126.236.0/23 maxlen: 24 216.126.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ba:6d:8a:32:9d:f5:bf:8e:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=afd991eb-bba1-44d6-adc5-daa4297d02df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:fc:5a:7b:52:8c:7a:c8:fe:ed:f5:50:d5: de:a4:6c:91:e8:e9:a5:b8:0e:77:48:78:f8:25:d5: e6:44:18:94:c5:76:b9:a2:70:91:8b:02:1f:3b:1c: 48:92:67:83:ef:f8:d3:f9:5e:d3:f0:a2:b9:14:4a: 24:8c:cd:2c:85:54:02:6a:bf:2e:b2:1b:b8:28:d2: 10:6e:76:2d:17:54:4f:37:68:ea:22:cc:15:34:7c: 77:d0:99:2f:c1:5f:dc:42:05:50:37:d4:6f:3d:72: ab:ff:0b:e4:fa:25:b2:f4:9d:18:e1:86:e5:b4:01: e7:e2:be:fd:c9:7d:6a:1c:87:3f:04:89:f0:d7:7e: b3:3c:fc:a9:fc:1e:bb:a5:ab:81:83:7f:34:27:67: 10:b0:26:1f:6b:93:83:10:d3:9c:b7:3b:cd:eb:17: b9:fe:91:56:ca:78:cf:b5:ad:33:64:50:ff:45:ff: 68:5a:a2:ca:76:32:22:8b:f4:36:a3:24:45:db:a2: e9:35:e0:90:5a:ae:f8:4c:2f:47:4f:d8:0a:51:62: 84:d6:1e:4e:f2:6b:ec:9f:98:e1:13:cb:5a:2c:ad: e5:f3:5f:10:e9:16:ef:74:6a:99:e5:5f:21:f9:04: 29:c5:67:89:2d:8e:e9:f8:85:72:42:b3:76:c6:c2: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DE:C0:61:94:A2:8E:3A:4C:22:68:DA:B2:F3:F7:A7:49:D3:AC:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.126.224.0/23 216.126.227.0/24 216.126.236.0/23 216.126.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:04:15:be:80:ac:51:c3:67:22:ca:be:0d:e2:22:2b:5b:97: ba:bc:9e:67:09:04:f4:89:86:29:ea:59:7b:2d:c7:6e:73:f6: 0a:29:0b:33:3f:35:0e:1a:26:05:a7:26:d6:4a:06:12:3a:ff: 3a:8d:ae:16:a9:f6:82:1c:75:2c:9f:9c:15:c4:7a:ce:e6:4b: 61:14:fe:bd:2a:f5:e5:ba:48:fb:38:aa:86:62:96:a3:0b:6d: 4e:77:10:20:81:9b:11:b0:1d:17:64:06:c9:1a:dd:a7:18:56: cf:4c:66:11:b5:7b:58:12:82:15:9b:61:1e:53:83:e2:84:f8: 94:1f:5a:cb:e3:aa:9a:1b:18:64:ac:2a:35:49:06:07:f6:e8: 90:ed:a0:3d:18:87:56:ca:e0:9a:4d:18:c9:6d:1d:ca:1a:f2: c3:ff:af:7d:00:88:dd:92:71:e1:90:f9:9f:1b:a0:d6:e8:b6: bb:07:6a:f8:03:0f:cb:2d:10:70:a3:c2:1a:af:c5:1b:05:cf: f4:a0:f9:24:f6:0d:a2:78:96:12:37:93:cf:93:98:7b:ef:4c: 6c:4f:1d:35:12:72:cb:e6:51:d3:b6:1e:a7:a3:f2:a9:dd:2b: 47:b2:3a:d5:31:4f:68:01:f4:d8:de:9c:19:5f:a2:59:0f:e1: 6b:0c:ee:d3 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEsvwbptijKd9b+O5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YWZkOTkxZWItYmJhMS00NGQ2LWFkYzUtZGFhNDI5N2QwMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3f8WntSjHrI/u31UNXepGyR6OmluA53SHj4 JdXmRBiUxXa5onCRiwIfOxxIkmeD7/jT+V7T8KK5FEokjM0shVQCar8ushu4KNIQ bnYtF1RPN2jqIswVNHx30JkvwV/cQgVQN9RvPXKr/wvk+iWy9J0Y4YbltAHn4r79 yX1qHIc/BInw136zPPyp/B67pauBg380J2cQsCYfa5ODENOctzvN6xe5/pFWynjP ta0zZFD/Rf9oWqLKdjIii/Q2oyRF26LpNeCQWq74TC9HT9gKUWKE1h5O8mvsn5jh E8taLK3l818Q6RbvdGqZ5V8h+QQpxWeJLY7p+IVyQrN2xsKpCQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFJ3ewGGUoo46TCJo2rLz96dJ06xWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGRiZTI1MDQtMGEyYy0z YjczLTlmNmEtN2I1OGZkM2VhZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQB2H7gAwQA 2H7jAwQB2H7sAwQA2H7vMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAOAEFb6ArFHDZyLKvg3iIitbl7q8nmcJ BPSJhinqWXstx25z9gopCzM/NQ4aJgWnJtZKBhI6/zqNrhap9oIcdSyfnBXEes7m S2EU/r0q9eW6SPs4qoZilqMLbU53ECCBmxGwHRdkBska3acYVs9MZhG1e1gSghWb YR5Tg+KE+JQfWsvjqpobGGSsKjVJBgf26JDtoD0Yh1bK4JpNGMltHcoa8sP/r30A iN2SceGQ+Z8boNbotrsHavgDD8stEHCjwhqvxRsFz/Sg+ST2DaJ4lhI3k8+TmHvv TGxPHTUScsvmUdO2Hqej8qndK0eyOtUxT2gB9NjenBlfolkP4WsM7tM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:37:26 2025 by rpki-client