$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/1aff3cff-2962-3964-9f3b-3caf36a44af4.roa File: 1aff3cff-2962-3964-9f3b-3caf36a44af4.roa (raw, json) Hash identifier: 59BM46M+cYOj3hsOijbhHMn2sQhUiMC4nePNBQAo9OU= Subject key identifier: D2:1D:71:CB:16:95:9F:E9:8B:EC:95:D4:5F:1E:D2:F1:6D:62:01:39 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584BA99A07C603442614353D4C80 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/1aff3cff-2962-3964-9f3b-3caf36a44af4.roa Signing time: Mon 27 Oct 2025 13:53:54 +0000 ROA not before: Mon 27 Oct 2025 13:53:54 +0000 ROA not after: Sun 25 Jan 2026 14:53:54 +0000 asID: 9304 IP address blocks: 216.75.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:9a:07:c6:03:44:26:14:35:3d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Oct 27 13:53:54 2025 GMT Not After : Jan 25 14:53:54 2026 GMT Subject: CN=808a03e3-1c6e-4dc6-99d7-80c2b462258b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c9:3d:b2:db:55:f7:82:4e:78:94:33:b7:d5: 27:1f:7e:0e:ae:46:78:02:1a:75:66:2f:71:5c:d0: af:d8:1c:8c:80:e9:3d:af:4c:c6:24:fd:b3:d6:cf: 1b:a9:c1:6e:78:0d:fd:1a:4f:f4:3f:9a:94:eb:07: 6c:ab:6b:40:cb:40:e3:b4:e9:a9:9d:9a:a0:1a:af: 59:a7:c2:5c:ff:8b:6e:83:47:27:64:6e:cc:41:1a: 19:94:8f:9b:b7:e8:b4:03:28:eb:9c:02:7f:33:7a: 9e:1e:e0:16:0b:2f:25:54:9b:f6:54:37:71:71:a6: 14:35:b2:04:2e:b1:b5:30:aa:d9:bd:e2:8e:5c:7b: 4d:26:28:01:31:39:ef:60:38:ae:9b:5f:76:95:29: 83:9b:ae:29:ce:f3:d7:f5:34:f2:e4:82:2e:e0:c7: 1d:5d:68:64:a4:89:04:d1:fd:7a:d9:27:3c:f1:da: c6:0e:33:ff:f9:31:7f:83:45:d9:2c:2c:b4:4a:3a: 25:c6:9c:e8:55:a5:81:d5:6b:43:f0:f4:a4:ac:69: 0f:73:d5:19:c0:99:33:ec:ac:f8:11:17:ca:e8:dc: da:c8:e6:0a:9f:e9:a0:ef:a9:b1:50:bd:f2:8c:bf: 22:d0:94:a6:9a:fd:50:fc:a9:92:a0:ec:b6:e5:ec: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1D:71:CB:16:95:9F:E9:8B:EC:95:D4:5F:1E:D2:F1:6D:62:01:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/1aff3cff-2962-3964-9f3b-3caf36a44af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:85:3a:2a:dd:26:bb:cf:7a:b6:d5:dc:6b:2d:5c:65:b2:dd: 63:60:64:c1:2c:58:f1:03:b0:a9:1c:dd:49:fa:e1:68:b7:7f: 13:b8:3d:c8:78:31:6e:47:9c:a6:3f:ed:55:14:92:b5:60:3e: 52:7e:79:32:de:a6:57:53:99:2c:8f:ce:6c:58:f1:b9:98:0b: 91:1e:bc:57:d5:d7:ec:ae:96:76:10:45:7d:9b:37:15:ae:c5: 9b:18:9c:bc:3c:77:1a:9a:c0:1f:a3:00:4c:46:c7:d7:00:74: 30:a8:d0:6c:7a:e1:26:b6:3a:22:24:d6:97:2f:ed:1d:af:cf: dd:89:76:84:52:8a:d5:f2:58:d8:6c:4c:3d:d6:80:95:4f:a4: 4a:73:42:d5:3a:47:0d:4b:4f:49:49:62:91:e4:dc:4d:74:f9: d6:e5:e6:af:e6:31:eb:99:ad:c3:2c:38:9d:ec:c1:4f:a0:79: f7:d9:1b:ce:f9:55:8c:06:98:6d:b3:90:ff:63:c1:1c:18:25: 84:70:0a:b6:c7:51:6e:0a:9b:a8:1a:0f:40:0a:42:e8:aa:f3: 85:eb:8d:bf:6e:47:6d:14:ca:ed:95:ee:99:3c:91:4e:56:91: 2b:ad:39:ac:3b:d2:5a:45:ec:d1:be:44:05:53:92:b5:54:20: b5:f2:80:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupmgfGA0QmFDU9TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTAyNzEzNTM1NFoXDTI2MDEyNTE0NTM1NFowLzEtMCsGA1UEAxMk ODA4YTAzZTMtMWM2ZS00ZGM2LTk5ZDctODBjMmI0NjIyNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMk9sttV94JOeJQzt9UnH34OrkZ4Ahp1Zi9x XNCv2ByMgOk9r0zGJP2z1s8bqcFueA39Gk/0P5qU6wdsq2tAy0DjtOmpnZqgGq9Z p8Jc/4tug0cnZG7MQRoZlI+bt+i0AyjrnAJ/M3qeHuAWCy8lVJv2VDdxcaYUNbIE LrG1MKrZveKOXHtNJigBMTnvYDium192lSmDm64pzvPX9TTy5IIu4McdXWhkpIkE 0f162Sc88drGDjP/+TF/g0XZLCy0SjolxpzoVaWB1WtD8PSkrGkPc9UZwJkz7Kz4 ERfK6NzayOYKn+mg76mxUL3yjL8i0JSmmv1Q/KmSoOy25eynuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIdccsWlZ/pi+yV1F8e0vFtYgE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMWFmZjNjZmYtMjk2Mi0z OTY0LTlmM2ItM2NhZjM2YTQ0YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOFOirdJrvPerbV3GstXGWy3WNgZMEsWPEDsKkc3Un64Wi3fxO4Pch4 MW5HnKY/7VUUkrVgPlJ+eTLepldTmSyPzmxY8bmYC5EevFfV1+yulnYQRX2bNxWu xZsYnLw8dxqawB+jAExGx9cAdDCo0Gx64Sa2OiIk1pcv7R2vz92JdoRSitXyWNhs TD3WgJVPpEpzQtU6Rw1LT0lJYpHk3E10+dbl5q/mMeuZrcMsOJ3swU+geffZG875 VYwGmG2zkP9jwRwYJYRwCrbHUW4Km6gaD0AKQuiq84Xrjb9uR20Uyu2V7pk8kU5W kSutOaw70lpF7NG+RAVTkrVUILXygN8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:40 2025 by rpki-client