$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa File: 339c2a74-2946-3eea-b96c-e0a5daeb337d.roa (raw, json) Hash identifier: U0C1TP3aUqi2HDtX3WfWlVSkUDg1tDrQDUSSA2xbHRI= Subject key identifier: 1D:6A:34:37:1B:2C:08:53:B3:69:DB:14:64:3D:C2:E9:39:2A:42:71 Certificate issuer: /CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee Certificate serial: 010D0C9F4328584B970D029759A442C5566EF800 Authority key identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 15830 IP address blocks: 209.196.248.0/24 maxlen: 24 209.196.249.0/24 maxlen: 24 209.196.250.0/24 maxlen: 24 209.196.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:02:97:59:a4:42:c5:56:6e:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ca30b3d5-0db6-4dbf-8da1-1f61279db147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:48:25:d6:f4:02:8d:e1:f7:c5:aa:07:69: 5a:ef:cd:db:fc:6e:c3:5d:3e:47:10:a2:32:40:a9: a0:16:20:dc:6b:85:14:b2:ef:b8:6a:47:7b:b1:15: 4b:be:37:02:3c:85:61:02:e5:78:78:e5:8b:f3:24: df:7a:49:ee:7f:c6:f2:98:cf:19:44:6a:b2:37:78: d3:f9:a7:78:8d:ee:d3:63:8a:cb:bc:c1:17:e6:cf: 6f:83:7c:46:a4:b2:4f:c5:4a:7a:20:89:0c:4b:2d: f8:ca:ae:f6:12:1a:42:b6:55:ae:23:03:24:7b:11: bb:43:b7:13:7b:46:e7:c8:bd:d2:4a:b2:fa:4e:7d: 40:f8:55:62:85:18:d6:af:95:0d:4e:ee:a4:ab:a4: 7e:1c:54:cd:f5:dd:70:16:39:cc:8b:8c:58:94:0d: 3d:df:e8:69:c8:53:09:16:b8:a7:5c:16:eb:24:c1: 44:aa:88:09:af:d8:33:bf:6b:5f:a3:78:25:4b:75: d1:0a:ec:a8:33:48:07:4f:b7:93:23:d5:2b:9c:d7: be:df:35:06:52:d5:47:66:e2:15:78:9d:77:87:cd: f2:6d:43:c2:11:69:ac:17:be:2f:d4:73:49:22:be: 6e:04:84:1a:72:21:c7:9d:9c:df:30:95:54:96:51: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6A:34:37:1B:2C:08:53:B3:69:DB:14:64:3D:C2:E9:39:2A:42:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl X509v3 Authority Key Identifier: keyid:08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer sbgp-ipAddrBlock: critical IPv4: 209.196.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f1:97:6d:06:cd:52:fd:c2:c6:6b:64:61:a6:3f:e3:34:ca: 63:3a:cd:f0:51:fd:9c:cb:2b:9d:94:a6:2f:15:c3:45:a5:ff: 7a:19:d4:ad:62:20:e0:aa:0b:c3:05:a9:99:18:e3:c9:fd:9d: f2:44:26:67:e9:45:50:bd:88:2a:3c:70:b6:d5:95:5d:ad:a7: 8c:ac:83:72:e7:5e:32:e1:2a:ba:fa:f5:80:24:2d:27:46:99: 38:09:c1:e7:c7:2d:c3:b4:23:db:c9:bb:26:db:67:9f:63:0c: 9c:74:e2:0c:b7:40:e1:30:5b:54:f1:59:05:78:38:40:67:6b: 9e:1c:8c:dd:a1:75:28:d9:e3:c8:fa:6c:0c:08:8a:41:dc:cc: 34:f2:6d:7b:2f:7d:e8:7e:eb:7f:b8:03:fe:43:ca:d3:b4:2f: 2e:ac:6c:79:2b:dc:79:ed:43:21:7d:3a:77:f7:91:43:d0:fc: d9:c1:3c:21:ab:60:54:f6:5e:d2:b8:d9:9d:a3:db:68:65:3f: e5:4d:a3:30:27:fc:80:fc:8d:66:57:55:a4:05:89:f0:c8:86: 70:eb:79:e6:42:b9:c2:2e:74:e5:20:3b:59:0c:c9:8d:cd:2e: 40:93:8a:cc:b8:0a:4a:ac:43:97:3a:e0:02:c7:fc:d8:ea:36: 25:d8:f7:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQKXWaRCxVZu+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM0OTBhZTMtNDFjZC00ZTlhLThkY2UtM2M5YzdmN2Ex MGVlMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Y2EzMGIzZDUtMGRiNi00ZGJmLThkYTEtMWY2MTI3OWRiMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc5IJdb0Ao3h98WqB2la783b/G7DXT5HEKIy QKmgFiDca4UUsu+4akd7sRVLvjcCPIVhAuV4eOWL8yTfeknuf8bymM8ZRGqyN3jT +ad4je7TY4rLvMEX5s9vg3xGpLJPxUp6IIkMSy34yq72EhpCtlWuIwMkexG7Q7cT e0bnyL3SSrL6Tn1A+FVihRjWr5UNTu6kq6R+HFTN9d1wFjnMi4xYlA093+hpyFMJ FrinXBbrJMFEqogJr9gzv2tfo3glS3XRCuyoM0gHT7eTI9UrnNe+3zUGUtVHZuIV eJ13h83ybUPCEWmsF74v1HNJIr5uBIQaciHHnZzfMJVUllEMKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1qNDcbLAhTs2nbFGQ9wuk5KkJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMzQ5 MGFlMy00MWNkLTRlOWEtOGRjZS0zYzljN2Y3YTEwZWUvMzM5YzJhNzQtMjk0Ni0z ZWVhLWI5NmMtZTBhNWRhZWIzMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDM0OTBhZTMtNDFjZC00ZTlhLThk Y2UtM2M5YzdmN2ExMGVlLzAzNDkwYWUzLTQxY2QtNGU5YS04ZGNlLTNjOWM3Zjdh MTBlZS5jcmwwHwYDVR0jBBgwFoAUCMgdkTMaTG77iXh1OLCvLiuV+wswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wMzQ5MGFlMy00MWNkLTRlOWEtOGRjZS0zYzlj N2Y3YTEwZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0cT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArxl20GzVL9wsZrZGGmP+M0ymM6zfBR/ZzLK52Upi8Vw0Wl/3oZ1K1i IOCqC8MFqZkY48n9nfJEJmfpRVC9iCo8cLbVlV2tp4ysg3LnXjLhKrr69YAkLSdG mTgJwefHLcO0I9vJuybbZ59jDJx04gy3QOEwW1TxWQV4OEBna54cjN2hdSjZ48j6 bAwIikHczDTybXsvfeh+63+4A/5DytO0Ly6sbHkr3HntQyF9Onf3kUPQ/NnBPCGr YFT2XtK42Z2j22hlP+VNozAn/ID8jWZXVaQFifDIhnDreeZCucIudOUgO1kMyY3N LkCTisy4CkqsQ5c64ALH/NjqNiXY9wg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:55 2025 by rpki-client