$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa File: a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa (raw, json) Hash identifier: nY1alPMi7Ky4YAbU682ETA/mJeiHmDmcnn0Cc1fh4HY= Subject key identifier: 3B:50:5F:E2:03:19:9D:1B:22:48:9E:EF:C7:5F:6F:EE:BE:D0:83:8B Certificate issuer: /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Certificate serial: 010D0C9F4328584B477C6EF07589081C6D845B40 Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16509 IP address blocks: 135.109.196.0/24 maxlen: 24 135.109.197.0/24 maxlen: 24 135.109.198.0/24 maxlen: 24 135.109.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6e:f0:75:89:08:1c:6d:84:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=043b4f65-546e-456f-ae14-8fb0df24838b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:5c:ce:56:a5:cc:6e:d8:15:59:31:e8:93: 11:4e:45:82:38:d9:77:a8:8a:b8:8c:89:fa:80:21: e8:4b:51:7f:c0:04:ed:96:1e:b4:6c:ba:77:e9:43: 72:a6:90:b4:b9:93:a6:74:17:9a:2a:88:b1:59:3b: fd:cb:d8:bb:5b:2f:4f:82:44:4e:a8:04:86:2d:35: fa:9f:61:11:4b:8c:49:85:88:49:b1:c2:59:40:9f: 06:08:ac:55:38:22:5f:5e:57:7d:b2:f8:83:1c:41: 6c:6f:09:6b:93:19:e2:cc:aa:9b:21:1e:9c:86:cb: a1:12:98:ba:33:4b:b2:82:f2:6f:9a:01:f5:0e:69: 50:dc:35:29:38:7f:77:45:9d:8f:36:d2:a2:9e:79: 35:25:aa:a3:e1:82:cd:af:c5:8a:62:97:70:fd:cf: 58:d1:67:92:e1:75:b7:5a:f8:69:47:c0:90:4a:f3: bc:83:69:5c:a9:62:20:b8:d1:69:7a:4c:0c:4a:a6: 69:d3:b1:4f:a1:00:ac:9b:a9:45:1e:34:69:39:73: 02:9b:a5:3b:4c:9d:4a:fb:87:60:01:0a:19:ce:d5: 6e:c3:ae:af:18:a3:39:36:e0:40:82:28:ab:b5:77: a8:06:c8:a2:b2:8e:db:05:e1:06:ea:4b:e0:62:7f: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:5F:E2:03:19:9D:1B:22:48:9E:EF:C7:5F:6F:EE:BE:D0:83:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl X509v3 Authority Key Identifier: keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer sbgp-ipAddrBlock: critical IPv4: 135.109.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:59:fa:3d:d9:cb:06:b8:ec:c1:3e:f2:9c:57:2a:c1:ed:85: 56:ac:2a:93:7a:05:f4:83:64:a7:8f:33:5b:a2:2f:aa:c3:14: 85:9c:f9:49:e7:93:5b:52:10:5d:8a:8e:a5:13:4e:5c:26:ec: 4e:34:f7:7c:8b:87:83:a1:a5:0b:c0:3f:34:0e:00:c3:df:f2: b7:14:3e:10:ff:ac:f9:7c:c2:69:74:75:2f:f5:4d:ca:5a:97: b2:3e:3d:6d:7c:8e:3a:fe:74:8a:80:2f:a8:8c:a5:d8:4f:51: dd:bc:26:bf:f1:d6:db:fb:d9:1b:c8:ac:d4:c7:0e:25:37:57: 5c:a1:33:66:47:38:26:55:71:f4:6c:93:72:26:75:a2:e1:7e: 69:d4:fd:43:9a:e5:77:0b:08:f1:a4:89:c4:b9:61:03:36:b8: bd:a2:73:44:0a:03:24:54:e5:06:6c:68:e5:33:7c:77:ac:99: c3:2a:6b:a0:28:43:96:61:47:ea:b2:31:bb:b3:66:0f:94:dc: 0b:f2:f3:65:36:e4:a7:e2:ef:be:44:8c:d1:7d:cd:b5:72:7c: 10:85:d4:79:5d:30:7c:77:12:55:56:6b:7d:5f:b7:14:3f:ec: 88:65:f5:3e:38:25:d6:8f:dc:65:33:1d:56:e9:e3:6c:8e:4e: d1:9f:35:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfG7wdYkIHG2EW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzYzc0MzMtNmQ1ZC00ZjdjLWIyZWYtOThjY2IxZDEw OGQ2MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDQzYjRmNjUtNTQ2ZS00NTZmLWFlMTQtOGZiMGRmMjQ4MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1FczlalzG7YFVkx6JMRTkWCONl3qIq4jIn6 gCHoS1F/wATtlh60bLp36UNyppC0uZOmdBeaKoixWTv9y9i7Wy9PgkROqASGLTX6 n2ERS4xJhYhJscJZQJ8GCKxVOCJfXld9sviDHEFsbwlrkxnizKqbIR6chsuhEpi6 M0uygvJvmgH1DmlQ3DUpOH93RZ2PNtKinnk1Jaqj4YLNr8WKYpdw/c9Y0WeS4XW3 WvhpR8CQSvO8g2lcqWIguNFpekwMSqZp07FPoQCsm6lFHjRpOXMCm6U7TJ1K+4dg AQoZztVuw66vGKM5NuBAgiirtXeoBsiiso7bBeEG6kvgYn9Z4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtQX+IDGZ0bIkie78dfb+6+0IOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNj NzQzMy02ZDVkLTRmN2MtYjJlZi05OGNjYjFkMTA4ZDYvYThmMmRjOGItZDlmNy0z YjNkLThkNmItZmE5ZTZlNzgzMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTMzYzc0MzMtNmQ1ZC00ZjdjLWIy ZWYtOThjY2IxZDEwOGQ2L2UzM2M3NDMzLTZkNWQtNGY3Yy1iMmVmLTk4Y2NiMWQx MDhkNi5jcmwwHwYDVR0jBBgwFoAUFlvmbqkKMt6CtBNVP7s4vgT3Z9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNjNzQzMy02ZDVkLTRmN2MtYjJlZi05OGNj YjFkMTA4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCh23EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9Z+j3Zywa47ME+8pxXKsHthVasKpN6BfSDZKePM1uiL6rDFIWc+Unn k1tSEF2KjqUTTlwm7E4093yLh4OhpQvAPzQOAMPf8rcUPhD/rPl8wml0dS/1Tcpa l7I+PW18jjr+dIqAL6iMpdhPUd28Jr/x1tv72RvIrNTHDiU3V1yhM2ZHOCZVcfRs k3ImdaLhfmnU/UOa5XcLCPGkicS5YQM2uL2ic0QKAyRU5QZsaOUzfHesmcMqa6Ao Q5ZhR+qyMbuzZg+U3Avy82U25Kfi775EjNF9zbVyfBCF1HldMHx3ElVWa31ftxQ/ 7Ihl9T44JdaP3GUzHVbp42yOTtGfNXg= -----END CERTIFICATE-----Generated at Sat Oct 11 01:30:09 2025 by rpki-client