$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa File: c13dba69-5578-3a01-b3d5-6497abf84b01.roa (raw, json) Hash identifier: HfLrJjD8q4jfjMMI9UgFglJoFfeGGVO8cjgfxZpcy9I= Subject key identifier: 49:C4:AE:36:3C:23:8B:FF:CA:3D:64:BC:E3:5F:85:A9:03:FE:57:38 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584B1AD1865F3A0D439A22D19800 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 35847 IP address blocks: 139.94.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:86:5f:3a:0d:43:9a:22:d1:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=9cccbf80-b137-4731-84b0-7915687cb63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:9c:6a:ce:ce:46:20:62:e3:6a:83:9d:1a: 67:69:4f:c3:c5:1f:f8:c7:72:4e:a3:24:ec:58:32: 18:4a:0d:5d:71:de:46:03:d5:e5:00:75:28:af:ad: d7:9a:88:4e:ab:4f:22:2e:0f:b1:f6:2f:07:68:75: 12:1b:f2:64:2f:33:40:39:e7:9f:98:46:85:1a:ed: 27:36:fd:26:0d:f4:2b:e1:7c:6e:1f:45:0a:28:44: a0:fd:d7:2e:70:95:65:cd:9e:39:db:23:89:47:27: b4:09:3c:40:81:0d:bc:a4:36:f1:c2:d3:d7:79:98: 4d:0a:b2:ae:02:3f:73:44:10:b0:0a:1f:64:65:50: c7:2f:0a:1b:b6:69:44:87:dd:1e:07:54:89:00:00: 36:37:c5:17:53:d8:e7:c1:d8:d4:6d:11:d2:c0:5e: 94:87:ac:04:96:32:ae:66:04:13:f7:1e:3b:89:14: 3c:0f:6b:e2:98:4b:30:cb:c3:e5:90:77:32:21:3e: 29:7b:f2:b6:d1:83:49:e7:d6:93:ba:2b:3b:f5:9f: 4c:ba:d2:16:e5:81:3c:14:16:c5:dd:37:7c:27:8b: ab:c0:aa:e9:97:5d:ef:f1:93:31:81:96:65:fa:0d: a9:f7:6c:04:77:9d:a5:19:8d:e0:fb:15:46:5e:f6: 40:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:AE:36:3C:23:8B:FF:CA:3D:64:BC:E3:5F:85:A9:03:FE:57:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 139.94.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:81:ff:c8:f5:09:e9:aa:f2:57:4b:e7:d1:8e:6a:9b:8f:a2: 0c:45:a8:5b:d1:7d:a8:8e:75:b9:74:6b:0f:5b:b7:b0:fd:7e: af:95:74:58:1f:0d:6c:36:bb:a4:48:29:28:57:76:f2:79:f2: 37:39:a0:b7:19:76:b6:1b:ac:67:3b:65:29:50:9b:3f:19:05: c6:ed:2c:e7:d6:51:e4:98:8b:90:fa:05:49:57:b3:c8:e7:8e: d7:75:04:fd:c3:e0:03:f2:10:25:c5:66:40:03:4e:06:aa:f6: 09:73:eb:45:01:ee:73:87:48:4b:39:70:3f:5a:93:81:79:9d: 76:80:87:86:e5:8b:d7:81:dc:59:dc:44:c5:8a:5e:84:f3:a1: 50:0e:e7:51:99:7a:6e:a7:e5:d3:83:9f:6a:06:50:3f:d3:2f: c1:cb:64:c4:9d:94:88:6b:4b:68:8b:c9:49:55:53:de:0c:ad: 3d:b9:5b:29:6a:55:97:03:db:5a:91:9f:3c:b8:c5:83:00:86: 7d:f5:f0:c4:b4:d1:4d:49:1a:8c:bb:28:17:0a:2a:8d:80:fd: 0d:ad:ed:87:85:0e:82:5a:14:50:8b:fc:6a:bf:e2:d4:c9:84: 59:a3:35:a7:18:87:a8:0f:07:b5:56:8a:2a:24:fe:97:7b:f5: fa:7d:8f:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsa0YZfOg1DmiLRmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OWNjY2JmODAtYjEzNy00NzMxLTg0YjAtNzkxNTY4N2NiNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYecas7ORiBi42qDnRpnaU/DxR/4x3JOoyTs WDIYSg1dcd5GA9XlAHUor63XmohOq08iLg+x9i8HaHUSG/JkLzNAOeefmEaFGu0n Nv0mDfQr4XxuH0UKKESg/dcucJVlzZ452yOJRye0CTxAgQ28pDbxwtPXeZhNCrKu Aj9zRBCwCh9kZVDHLwobtmlEh90eB1SJAAA2N8UXU9jnwdjUbRHSwF6Uh6wEljKu ZgQT9x47iRQ8D2vimEswy8PlkHcyIT4pe/K20YNJ59aTuis79Z9MutIW5YE8FBbF 3Td8J4urwKrpl13v8ZMxgZZl+g2p92wEd52lGY3g+xVGXvZA3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEnErjY8I4v/yj1kvONfhakD/lc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvYzEzZGJhNjktNTU3OC0z YTAxLWIzZDUtNjQ5N2FiZjg0YjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi14wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAC4H/yPUJ6aryV0vn0Y5qm4+iDEWoW9F9qI51uXRrD1u3sP1+r5V0WB8N bDa7pEgpKFd28nnyNzmgtxl2thusZztlKVCbPxkFxu0s59ZR5JiLkPoFSVezyOeO 13UE/cPgA/IQJcVmQANOBqr2CXPrRQHuc4dISzlwP1qTgXmddoCHhuWL14HcWdxE xYpehPOhUA7nUZl6bqfl04OfagZQP9MvwctkxJ2UiGtLaIvJSVVT3gytPblbKWpV lwPbWpGfPLjFgwCGffXwxLTRTUkajLsoFwoqjYD9Da3th4UOgloUUIv8ar/i1MmE WaM1pxiHqA8HtVaKKiT+l3v1+n2PJg== -----END CERTIFICATE-----Generated at Sat Oct 11 00:58:51 2025 by rpki-client