$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddfdd6d3-779d-3499-8929-b2a2b2af354e.roa File: ddfdd6d3-779d-3499-8929-b2a2b2af354e.roa (raw, json) Hash identifier: 5UHgZJDLSLePgsxQjsDqeO7oby/fQA9b5Q5x8Y8uU0k= Subject key identifier: A5:32:23:4F:69:F5:C3:A4:C4:69:49:1C:25:37:C7:63:7B:4F:38:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CAAD140EB51178180A0A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddfdd6d3-779d-3499-8929-b2a2b2af354e.roa Signing time: Mon 22 Sep 2025 11:56:48 +0000 ROA not before: Mon 22 Sep 2025 11:56:48 +0000 ROA not after: Sun 21 Dec 2025 12:56:48 +0000 asID: 19905 IP address blocks: 150.195.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:aa:d1:40:eb:51:17:81:80:a0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:48 2025 GMT Not After : Dec 21 12:56:48 2025 GMT Subject: CN=95de9154-b01a-49f8-9b5e-3b493ef81e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:37:fd:66:ed:30:58:e8:0c:48:39:2c:ab: b1:1e:51:50:fd:1a:96:87:cf:3f:5f:3c:42:21:ae: 1f:f6:55:7f:f9:3a:28:a3:d3:16:4b:ca:67:5b:47: 99:f4:c2:aa:28:ff:59:1e:28:58:f0:8a:ba:6a:0c: f3:87:18:14:e7:28:10:2b:85:fe:3d:d3:dc:e3:f4: 58:95:20:7c:dd:f4:92:df:2a:bc:f8:91:1b:f3:ba: 94:e0:7b:9f:6d:bc:73:24:3a:2c:7f:30:83:bc:31: f8:e2:8a:26:54:8e:ca:64:3f:92:05:cc:54:bf:a8: 0e:32:39:23:a9:6f:e0:d5:0c:f9:11:c6:b2:71:35: 55:db:d5:0b:52:f6:27:51:7a:7b:3d:79:cd:72:1d: 95:25:64:39:61:cf:fc:5c:e4:da:9a:fe:b1:37:2a: 82:9e:ec:b6:d1:1c:b7:23:3c:8e:20:a7:bf:d9:9e: 4b:27:1f:e7:91:59:c1:ac:15:6c:1c:74:9a:49:14: 7a:59:df:3f:0f:78:f3:68:b9:dc:98:a3:ea:e1:b4: c3:60:1a:c6:af:32:7a:be:03:a8:bd:9f:83:c5:78: 80:97:fb:f2:e1:bd:b3:53:3f:d2:b3:c4:05:75:51: 1a:0a:da:3a:39:64:2c:e3:9f:b0:9f:57:e7:d7:fc: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:32:23:4F:69:F5:C3:A4:C4:69:49:1C:25:37:C7:63:7B:4F:38:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddfdd6d3-779d-3499-8929-b2a2b2af354e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:04:a3:c7:e0:ba:a7:6d:6f:a9:89:02:98:c7:d8:13:92:c6: 30:88:70:ec:1c:8a:cc:cd:07:da:c0:76:f2:63:11:a9:a8:ec: f5:3a:96:58:4b:fb:33:f1:e0:30:21:e8:9d:7a:fc:55:80:e1: 80:d7:3a:95:a6:05:ba:45:95:a3:c7:d8:a2:fa:e3:a2:b7:12: 9d:44:18:1d:6b:b8:4e:e2:21:7a:7b:a0:74:3f:8f:cc:82:b7: 72:ee:4f:7a:29:6a:27:6d:bb:e5:66:87:5d:ef:82:bf:e9:19: dd:30:bc:99:19:19:c3:f4:90:c9:c5:28:82:42:1d:04:21:de: 3e:8e:63:53:95:3b:df:a8:7c:00:da:ba:8f:ba:bb:22:9c:53: 0e:b9:b4:4d:cd:de:4c:0d:b3:4c:a5:9a:f7:26:17:99:e2:d5: 7b:13:80:c0:a6:35:f5:53:c4:1d:aa:f4:28:70:f5:9a:f1:25: 94:a7:1e:f3:f2:93:46:b9:bf:5e:00:e5:72:71:09:9a:58:c1: 07:ad:5b:2a:4f:a0:f8:ac:8b:72:db:c1:05:49:c2:f6:f3:fa: 5d:b5:6f:47:6c:e0:d3:86:78:9f:24:d5:3d:40:bc:cd:a3:e3: 1f:1d:79:2b:59:dc:0a:ae:f7:14:c7:7a:8a:92:b9:1e:85:1b: 03:9e:2c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXKrRQOtRF4GAoKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTY0OFoXDTI1MTIyMTEyNTY0OFowLzEtMCsGA1UEAxMk OTVkZTkxNTQtYjAxYS00OWY4LTliNWUtM2I0OTNlZjgxZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ83/WbtMFjoDEg5LKuxHlFQ/RqWh88/XzxC Ia4f9lV/+Tooo9MWS8pnW0eZ9MKqKP9ZHihY8Iq6agzzhxgU5ygQK4X+PdPc4/RY lSB83fSS3yq8+JEb87qU4HufbbxzJDosfzCDvDH44oomVI7KZD+SBcxUv6gOMjkj qW/g1Qz5EcaycTVV29ULUvYnUXp7PXnNch2VJWQ5Yc/8XOTamv6xNyqCnuy20Ry3 IzyOIKe/2Z5LJx/nkVnBrBVsHHSaSRR6Wd8/D3jzaLncmKPq4bTDYBrGrzJ6vgOo vZ+DxXiAl/vy4b2zUz/Ss8QFdVEaCto6OWQs45+wn1fn1/wuSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUyI09p9cOkxGlJHCU3x2N7TzjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGRmZGQ2ZDMtNzc5ZC0z NDk5LTg5MjktYjJhMmIyYWYzNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUEo8fguqdtb6mJApjH2BOSxjCIcOwciszNB9rAdvJjEamo7PU6llhL +zPx4DAh6J16/FWA4YDXOpWmBbpFlaPH2KL646K3Ep1EGB1ruE7iIXp7oHQ/j8yC t3LuT3opaidtu+Vmh13vgr/pGd0wvJkZGcP0kMnFKIJCHQQh3j6OY1OVO9+ofADa uo+6uyKcUw65tE3N3kwNs0ylmvcmF5ni1XsTgMCmNfVTxB2q9Chw9ZrxJZSnHvPy k0a5v14A5XJxCZpYwQetWypPoPisi3LbwQVJwvbz+l21b0ds4NOGeJ8k1T1AvM2j 4x8deStZ3Aqu9xTHeoqSuR6FGwOeLLI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:31 2025 by rpki-client