$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa File: 5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa (raw, json) Hash identifier: XW7z81QtDlJK3XxwrdOf27o9MZkqWvCM6+uhLOjufkM= Subject key identifier: A5:C0:6D:F7:66:85:FC:03:AD:AB:4D:A9:E5:9D:06:A9:60:7D:49:77 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B41E71628ABFD02E75B72C360 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 65.39.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:16:28:ab:fd:02:e7:5b:72:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=bc1fdf9f-d6bd-4528-ab2a-f067cbb844ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:ad:07:b9:81:fe:e8:91:21:82:af:fc:b2: 97:99:f6:d7:b4:1b:c9:0b:70:20:11:46:55:4c:97: 1e:92:3e:ff:50:e2:4d:9d:2d:03:8e:4f:08:7c:9b: d2:73:0e:83:61:f5:5d:b0:46:f2:d3:83:d8:c0:1a: 51:82:13:26:08:c5:95:25:66:4d:e8:ed:c5:b9:5a: 38:38:a8:70:bd:76:a7:bd:8b:8c:72:00:75:67:a1: da:23:16:70:c4:c1:c7:b2:de:16:0c:de:90:6e:6e: 55:3c:ca:14:f6:45:dd:8a:46:ee:ef:3a:ab:b9:76: e8:46:51:aa:80:de:a3:35:20:5b:e9:3a:ba:6c:16: 6b:dc:ba:d7:61:15:e9:1c:59:6f:b5:4f:8b:79:4e: 0f:38:e1:55:a8:fb:16:b2:5a:09:b9:e1:74:56:83: 77:cc:c0:90:62:71:14:04:8b:c8:6b:a5:51:f0:eb: 98:ac:1e:d4:bb:a7:e6:e0:12:58:9f:7e:27:36:ea: b3:9c:db:fe:b9:cf:9e:87:d1:a0:dd:d0:a7:39:0f: 27:e2:1d:1c:39:44:dd:0b:3e:44:0c:02:d0:d6:54: 02:55:56:2a:d9:85:f0:6a:67:1e:5b:ff:99:f0:d2: d0:e8:d6:95:8d:e9:22:f4:b2:13:a9:cd:d8:8a:48: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:6D:F7:66:85:FC:03:AD:AB:4D:A9:E5:9D:06:A9:60:7D:49:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:71:ef:14:d0:46:6d:ea:54:17:c7:de:d2:0f:59:3e:bb:a5: de:c7:af:50:7e:2c:17:ff:54:3b:76:6a:81:a4:f0:22:d7:6c: 7d:88:d3:88:db:48:cd:f2:de:70:33:68:84:e2:2a:42:7f:c7: 2d:f6:e8:87:89:c2:2d:98:30:47:c4:0e:45:86:bf:3b:64:81: 09:e2:44:b6:68:c5:9c:97:ac:a2:19:af:c8:b7:1c:80:27:62: 48:9d:fe:f0:a9:6c:2b:4a:34:1c:e9:66:65:7c:ea:b0:ce:48: c1:81:a6:6b:01:4c:2d:a8:90:d6:d9:e0:aa:9a:23:d6:22:80: 74:c2:34:f3:3f:8f:55:fe:4b:15:2b:e1:c6:a9:5f:5d:c7:00: 6f:12:3a:2a:0d:01:0a:0d:77:2f:ec:00:0e:a1:a6:8e:3d:83: bc:4a:87:f4:23:fe:b0:fc:f7:41:9f:d5:0e:da:e1:b7:db:d3: 8f:1d:1e:49:db:2a:81:9e:7c:30:23:b2:3d:9c:b8:89:a6:0e: 80:86:97:da:9f:0b:70:dd:64:7f:40:ea:37:e9:69:38:2c:7a: 8a:80:4d:5a:69:1a:12:79:40:46:99:63:f1:30:21:d1:cc:15: 87:ec:ff:9a:e3:43:c6:78:7d:ab:df:50:e6:9a:e7:4d:f3:12: a4:3c:fc:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xYoq/0C51tyw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YmMxZmRmOWYtZDZiZC00NTI4LWFiMmEtZjA2N2NiYjg0NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUqtB7mB/uiRIYKv/LKXmfbXtBvJC3AgEUZV TJcekj7/UOJNnS0Djk8IfJvScw6DYfVdsEby04PYwBpRghMmCMWVJWZN6O3FuVo4 OKhwvXanvYuMcgB1Z6HaIxZwxMHHst4WDN6Qbm5VPMoU9kXdikbu7zqruXboRlGq gN6jNSBb6Tq6bBZr3LrXYRXpHFlvtU+LeU4POOFVqPsWsloJueF0VoN3zMCQYnEU BIvIa6VR8OuYrB7Uu6fm4BJYn34nNuqznNv+uc+eh9Gg3dCnOQ8n4h0cOUTdCz5E DALQ1lQCVVYq2YXwamceW/+Z8NLQ6NaVjeki9LITqc3YikiI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXAbfdmhfwDratNqeWdBqlgfUl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNWIxYmQ3ZGQtM2YwMC0z YTNjLTkyMmMtZjdlZTEzMWU2MzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQSeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVx7xTQRm3qVBfH3tIPWT67pd7Hr1B+LBf/VDt2aoGk8CLXbH2I04jb SM3y3nAzaITiKkJ/xy326IeJwi2YMEfEDkWGvztkgQniRLZoxZyXrKIZr8i3HIAn Ykid/vCpbCtKNBzpZmV86rDOSMGBpmsBTC2okNbZ4KqaI9YigHTCNPM/j1X+SxUr 4capX13HAG8SOioNAQoNdy/sAA6hpo49g7xKh/Qj/rD890Gf1Q7a4bfb048dHknb KoGefDAjsj2cuImmDoCGl9qfC3DdZH9A6jfpaTgseoqATVppGhJ5QEaZY/EwIdHM FYfs/5rjQ8Z4favfUOaa503zEqQ8/Iw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:38:31 2025 by rpki-client