$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/3881e1fa-96e3-3631-bcf2-81470cfcdb44.roa File: 3881e1fa-96e3-3631-bcf2-81470cfcdb44.roa (raw, json) Hash identifier: yF1F0FYGWSYihUvddqcInsNoD6zHW5sNWBkTFNITz9g= Subject key identifier: A9:C0:A2:75:25:26:67:09:36:95:62:F1:72:6F:B4:74:EC:38:CB:F3 Certificate issuer: /CN=02d0abc8-99da-40bc-a45c-4d8b1fc73352 Certificate serial: 010D0C9F4328584B4DAC2422D83D3DBD8457A140 Authority key identifier: BB:D3:0F:E5:CD:05:80:43:30:FD:20:CA:3C:3A:CB:AA:F8:6D:95:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/3881e1fa-96e3-3631-bcf2-81470cfcdb44.roa Signing time: Wed 24 Sep 2025 18:11:47 +0000 ROA not before: Wed 24 Sep 2025 18:11:47 +0000 ROA not after: Tue 23 Dec 2025 19:11:47 +0000 asID: 401459 IP address blocks: 204.126.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/02d0abc8-99da-40bc-a45c-4d8b1fc73352.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/02d0abc8-99da-40bc-a45c-4d8b1fc73352.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:ac:24:22:d8:3d:3d:bd:84:57:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d0abc8-99da-40bc-a45c-4d8b1fc73352 Validity Not Before: Sep 24 18:11:47 2025 GMT Not After : Dec 23 19:11:47 2025 GMT Subject: CN=dddf4607-024d-496f-9ca1-6663468ae936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:4d:f0:01:e6:8f:35:ca:4a:3d:16:b4:fe: 84:15:b1:18:27:a2:d7:c4:cf:fb:0b:77:ba:d7:0b: 2f:c0:21:01:37:4c:c5:4a:d6:ce:5c:5f:1c:48:06: f3:2c:f7:29:34:45:fb:f1:8d:84:88:96:ad:10:0e: 38:10:fe:68:bd:ac:8f:ca:81:5f:56:29:f5:4c:de: d7:14:69:9d:4a:4f:b4:8b:c1:0f:d2:6d:79:7f:55: 38:b1:21:d9:b0:89:72:ef:7f:44:4d:9a:dd:6e:9c: 60:f0:ac:e8:0c:ff:71:c5:fb:ec:d2:7a:58:a9:cb: 25:d2:a1:bb:1e:a6:f8:30:4f:ee:41:13:9c:ff:5b: 69:52:6c:5f:5a:00:e8:4c:f6:f3:a9:27:08:38:d8: 09:a4:1d:d2:1f:89:38:1d:dd:5b:5b:32:cd:f3:ba: cd:55:4d:16:4b:17:3e:ff:bf:cf:38:ab:5b:9a:21: f4:61:a8:73:8a:07:5e:6a:ac:5c:dd:a7:76:5e:f6: d7:f7:d1:f4:0c:a7:20:64:68:1e:e0:9b:08:f3:d7: fb:b4:f3:23:a5:5c:15:b1:ee:ac:b9:3a:ac:c1:2d: 78:58:f1:18:e2:2e:b1:81:e5:23:fc:a2:a2:7c:fb: 78:c9:75:62:02:95:75:9d:22:74:a7:03:07:72:8c: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:A2:75:25:26:67:09:36:95:62:F1:72:6F:B4:74:EC:38:CB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/3881e1fa-96e3-3631-bcf2-81470cfcdb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/02d0abc8-99da-40bc-a45c-4d8b1fc73352.crl X509v3 Authority Key Identifier: keyid:BB:D3:0F:E5:CD:05:80:43:30:FD:20:CA:3C:3A:CB:AA:F8:6D:95:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352.cer sbgp-ipAddrBlock: critical IPv4: 204.126.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9d:a7:2d:a5:df:e3:e7:98:93:0d:58:0d:9b:ea:cf:51:39: fe:00:be:cc:b5:25:e4:b4:c1:a1:bd:ce:48:0d:1f:27:26:ae: e1:98:70:e5:a3:1f:7b:49:77:a3:b5:0d:ff:07:ae:fc:d5:f1: ed:96:6d:df:79:26:14:dc:66:44:74:93:f6:99:d7:5e:ae:51: 03:d3:61:28:a9:31:f8:60:f0:53:ee:c8:74:c1:12:45:15:3c: 5d:d4:d0:57:39:1a:35:d2:ea:43:fa:8a:a3:23:23:61:c6:02: 8b:4d:80:ab:0b:42:42:8a:1b:c7:7a:48:14:6d:a9:ec:9c:2c: 30:af:0f:4e:40:44:11:21:b2:16:0c:16:72:f5:8e:02:2b:eb: d9:21:27:43:fe:90:2e:98:83:98:66:af:47:64:a9:a2:ea:a2: dd:39:df:44:12:b1:05:a6:2b:cc:15:88:36:6e:e6:e1:1c:4d: 25:29:9b:2d:d9:fd:45:95:84:f2:53:12:c3:2d:d3:6c:f5:69: 96:af:cb:1a:1e:45:a3:68:33:42:71:bb:b1:c6:5c:78:47:44: 8b:eb:39:c4:67:1b:9e:2f:98:a8:96:86:52:c9:81:af:fa:e4: 17:81:5c:47:8d:8e:f2:ec:50:e9:e2:de:69:7e:8d:e0:4a:0b: 48:df:7c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNrCQi2D09vYRXoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkMGFiYzgtOTlkYS00MGJjLWE0NWMtNGQ4YjFmYzcz MzUyMB4XDTI1MDkyNDE4MTE0N1oXDTI1MTIyMzE5MTE0N1owLzEtMCsGA1UEAxMk ZGRkZjQ2MDctMDI0ZC00OTZmLTljYTEtNjY2MzQ2OGFlOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XhN8AHmjzXKSj0WtP6EFbEYJ6LXxM/7C3e6 1wsvwCEBN0zFStbOXF8cSAbzLPcpNEX78Y2EiJatEA44EP5ovayPyoFfVin1TN7X FGmdSk+0i8EP0m15f1U4sSHZsIly739ETZrdbpxg8KzoDP9xxfvs0npYqcsl0qG7 Hqb4ME/uQROc/1tpUmxfWgDoTPbzqScIONgJpB3SH4k4Hd1bWzLN87rNVU0WSxc+ /7/POKtbmiH0Yahzigdeaqxc3ad2XvbX99H0DKcgZGge4JsI89f7tPMjpVwVse6s uTqswS14WPEY4i6xgeUj/KKifPt4yXViApV1nSJ0pwMHcowSsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnAonUlJmcJNpVi8XJvtHTsOMvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmQw YWJjOC05OWRhLTQwYmMtYTQ1Yy00ZDhiMWZjNzMzNTIvMzg4MWUxZmEtOTZlMy0z NjMxLWJjZjItODE0NzBjZmNkYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDJkMGFiYzgtOTlkYS00MGJjLWE0 NWMtNGQ4YjFmYzczMzUyLzAyZDBhYmM4LTk5ZGEtNDBiYy1hNDVjLTRkOGIxZmM3 MzM1Mi5jcmwwHwYDVR0jBBgwFoAUu9MP5c0FgEMw/SDKPDrLqvhtlWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMmQwYWJjOC05OWRhLTQwYmMtYTQ1Yy00ZDhi MWZjNzMzNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzH5yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACadpy2l3+PnmJMNWA2b6s9ROf4Avsy1JeS0waG9zkgNHycmruGYcOWj H3tJd6O1Df8HrvzV8e2Wbd95JhTcZkR0k/aZ116uUQPTYSipMfhg8FPuyHTBEkUV PF3U0Fc5GjXS6kP6iqMjI2HGAotNgKsLQkKKG8d6SBRtqeycLDCvD05ARBEhshYM FnL1jgIr69khJ0P+kC6Yg5hmr0dkqaLqot0530QSsQWmK8wViDZu5uEcTSUpmy3Z /UWVhPJTEsMt02z1aZavyxoeRaNoM0Jxu7HGXHhHRIvrOcRnG54vmKiWhlLJga/6 5BeBXEeNjvLsUOni3ml+jeBKC0jffNM= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:16 2025 by rpki-client