$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa File: cafde11a-c375-36a5-a218-aad0aa1a246b.roa (raw, json) Hash identifier: 5PvvyU8CPzbjzu9zwgx9JjBIs8EBXXQZCIjFYlSCWe0= Subject key identifier: 08:26:38:BF:27:4E:BA:55:30:A3:A3:AF:14:0F:8A:A5:7D:AA:F3:F4 Certificate issuer: /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Certificate serial: 010D0C9F4328584B2496C9320E880FA0B03B3880 Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 135.109.194.0/24 maxlen: 24 135.109.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c9:32:0e:88:0f:a0:b0:3b:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=2d1aa822-7ab5-47c8-b507-5e0e4c17bfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:8f:13:a6:e7:04:81:1f:2b:ce:c2:2d:bc: 4d:85:c4:f8:dc:7d:86:31:87:35:3a:95:b8:22:75: f6:2d:e1:59:34:5a:5e:01:59:e9:bb:f1:4b:d1:e6: 31:f3:fb:62:e5:ce:a5:ff:38:b6:9e:a2:e6:cd:80: 7b:89:6d:44:be:3e:63:08:24:95:4e:2e:88:4b:d0: 4b:3d:23:a3:69:dd:de:1e:9b:ce:e1:09:d6:19:52: 2f:ef:fa:5f:ef:d1:10:39:d1:48:46:9a:67:30:ff: 16:48:79:b9:99:e4:da:0c:95:58:da:fc:a4:b4:49: ec:54:5d:0b:70:51:0a:ce:7a:ed:2f:7d:a7:9d:f3: 7c:87:70:0b:d2:5f:56:d8:d5:ca:e3:3b:0f:d5:3b: 4d:bd:78:e7:72:2d:06:be:93:f5:da:60:3f:cf:8b: 50:ee:23:84:b6:3b:2f:f0:5f:e9:79:c3:fd:39:ba: eb:41:ba:68:5e:68:c5:a9:8f:5b:4e:30:f8:3d:57: 79:92:08:47:e1:7c:38:bb:44:76:4a:ac:11:d3:83: ab:5a:31:72:7b:ff:40:a5:4e:60:54:2c:8d:4c:7e: 90:4d:bc:6c:00:70:d3:cc:fd:25:e1:35:21:80:2b: 33:d7:a8:02:77:e7:92:89:ea:5d:68:1e:0c:60:c5: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:26:38:BF:27:4E:BA:55:30:A3:A3:AF:14:0F:8A:A5:7D:AA:F3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl X509v3 Authority Key Identifier: keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer sbgp-ipAddrBlock: critical IPv4: 135.109.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ae:0a:bb:71:91:b5:f3:9e:93:48:e5:fd:68:5c:88:eb:79: 9f:d1:c9:c3:cf:82:92:d0:f1:d8:d4:28:94:cf:70:ef:cc:f1: 17:a2:ad:e9:78:0c:08:19:a8:76:3f:ed:6c:09:63:d7:c4:e3: 68:a6:f5:87:2a:1e:a1:9e:0d:d3:ab:c9:90:1a:d5:1b:ac:39: a4:0d:9d:8d:82:c9:8a:e7:65:fa:3f:12:0a:2a:e3:b8:86:bf: ca:fe:f7:3c:5c:29:e1:e5:a0:f3:02:b8:6c:97:c8:6b:93:03: eb:6b:31:9b:3c:f6:54:3f:2c:a7:07:2b:7c:4e:95:a3:9e:27: ec:2f:b0:b7:5b:4d:7a:46:7b:c0:2f:d8:7c:4b:ff:88:3a:43: 44:e8:a1:87:f7:b0:09:8f:0c:18:93:53:16:56:c5:b5:87:13: e0:c7:58:79:4f:38:dd:5e:fb:b6:be:a6:22:df:f8:ff:0d:9c: 5b:9a:4b:95:e0:84:30:4b:5f:89:98:ac:36:59:08:d2:e1:ea: b1:a2:88:26:fd:95:56:77:b3:d1:ff:aa:28:37:d2:b5:a9:95: 0f:41:8d:b4:94:a6:b7:f6:e3:62:04:31:5b:b2:21:09:12:d4: aa:1c:1c:71:29:fc:df:82:61:fa:a8:c5:1e:29:ee:13:02:c8: 61:cf:7d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklskyDogPoLA7OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzYzc0MzMtNmQ1ZC00ZjdjLWIyZWYtOThjY2IxZDEw OGQ2MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MmQxYWE4MjItN2FiNS00N2M4LWI1MDctNWUwZTRjMTdiZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqKPE6bnBIEfK87CLbxNhcT43H2GMYc1OpW4 InX2LeFZNFpeAVnpu/FL0eYx8/ti5c6l/zi2nqLmzYB7iW1Evj5jCCSVTi6IS9BL PSOjad3eHpvO4QnWGVIv7/pf79EQOdFIRppnMP8WSHm5meTaDJVY2vyktEnsVF0L cFEKznrtL32nnfN8h3AL0l9W2NXK4zsP1TtNvXjnci0GvpP12mA/z4tQ7iOEtjsv 8F/pecP9ObrrQbpoXmjFqY9bTjD4PVd5kghH4Xw4u0R2SqwR04OrWjFye/9ApU5g VCyNTH6QTbxsAHDTzP0l4TUhgCsz16gCd+eSiepdaB4MYMV1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgmOL8nTrpVMKOjrxQPiqV9qvP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNj NzQzMy02ZDVkLTRmN2MtYjJlZi05OGNjYjFkMTA4ZDYvY2FmZGUxMWEtYzM3NS0z NmE1LWEyMTgtYWFkMGFhMWEyNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTMzYzc0MzMtNmQ1ZC00ZjdjLWIy ZWYtOThjY2IxZDEwOGQ2L2UzM2M3NDMzLTZkNWQtNGY3Yy1iMmVmLTk4Y2NiMWQx MDhkNi5jcmwwHwYDVR0jBBgwFoAUFlvmbqkKMt6CtBNVP7s4vgT3Z9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNjNzQzMy02ZDVkLTRmN2MtYjJlZi05OGNj YjFkMTA4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh23CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuuCrtxkbXznpNI5f1oXIjreZ/RycPPgpLQ8djUKJTPcO/M8Reirel4 DAgZqHY/7WwJY9fE42im9YcqHqGeDdOryZAa1RusOaQNnY2CyYrnZfo/Egoq47iG v8r+9zxcKeHloPMCuGyXyGuTA+trMZs89lQ/LKcHK3xOlaOeJ+wvsLdbTXpGe8Av 2HxL/4g6Q0TooYf3sAmPDBiTUxZWxbWHE+DHWHlPON1e+7a+piLf+P8NnFuaS5Xg hDBLX4mYrDZZCNLh6rGiiCb9lVZ3s9H/qig30rWplQ9BjbSUprf242IEMVuyIQkS 1KocHHEp/N+CYfqoxR4p7hMCyGHPfWA= -----END CERTIFICATE-----Generated at Sat Oct 11 01:30:08 2025 by rpki-client