$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa File: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (raw, json) Hash identifier: yRp5zRkEe/HmjNt9wiNvZqQk5gfYut+GsbCjBwhvOSo= Subject key identifier: F0:A8:96:1B:64:36:4C:42:47:71:A4:E8:04:9C:11:32:C2:00:91:C1 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584B583C86DA34B97416AEF05000 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 398419 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:86:da:34:b9:74:16:ae:f0:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ebc82686-f853-48c3-8a24-315afe4be72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:39:59:3b:08:eb:dc:c3:72:c8:23:b0:26:94: 8c:56:a4:87:13:dd:e1:77:dd:66:b9:5a:73:8f:12: 12:92:57:6a:0e:f8:94:7f:44:05:8d:7b:ea:b8:14: a3:ca:ff:c6:77:91:b7:5a:df:ca:bc:bd:55:67:43: 09:b0:d4:d7:d9:a6:db:08:f8:3c:e2:54:f6:94:2f: a3:69:d8:69:ca:2c:d8:68:1a:65:ec:af:23:39:1f: 26:6a:5d:f6:a2:0d:0c:88:89:f9:c3:ed:21:16:a6: c7:c8:63:92:e7:ce:aa:f9:af:f5:a2:f4:3b:36:31: c8:0d:d0:65:a9:01:1b:28:0e:aa:43:2b:90:9c:71: 90:04:79:d8:01:ae:25:6d:b9:07:e9:f6:f9:25:04: 19:84:ea:76:03:e3:32:60:3d:d6:cd:7d:8e:35:bb: 85:bd:c0:16:57:61:ec:1a:78:92:32:9c:0c:47:f4: 0a:f6:a1:11:f4:d4:f5:81:6c:44:be:29:3f:1b:d4: 53:f0:a2:08:e9:f4:4f:39:c4:02:cf:17:d4:0d:cd: 34:31:de:79:c4:a3:d8:8a:03:db:00:7c:b4:dc:5f: 76:dd:fe:5f:ba:e8:b8:34:10:fc:66:5f:d3:a6:0c: 53:6f:84:5e:04:4d:3b:a1:08:e2:b6:d2:b4:1d:af: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A8:96:1B:64:36:4C:42:47:71:A4:E8:04:9C:11:32:C2:00:91:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fc:7f:59:a3:8b:9e:7d:3e:52:b9:7d:96:b2:33:ef:5f:12: a1:d0:83:76:13:20:fe:eb:b8:6b:5a:c3:aa:16:00:57:9e:8b: 45:10:29:a1:61:d9:54:a7:1d:88:37:80:2e:89:ea:60:c1:28: 37:6d:87:d9:06:41:e6:fb:20:6e:4f:fc:66:1d:22:15:79:32: c8:0f:20:38:41:67:0a:c8:2f:8d:fb:ca:61:9d:83:ba:e0:82: 36:9b:66:28:9d:7d:20:d3:fa:12:83:7a:85:a4:53:90:9b:d7: 63:9a:c9:40:d8:7a:2f:ed:5e:11:1f:1a:fd:90:6f:bd:56:19: 06:d4:2a:b5:66:07:03:ac:71:24:3e:2d:fe:3a:16:fd:82:6d: 68:3a:ea:c4:92:04:14:22:4c:ab:82:1d:a9:c0:a2:d0:14:94: 72:63:c6:7c:e7:f1:1f:ee:0a:d7:be:1d:31:50:0d:d0:37:5c: 51:b4:04:9d:0a:df:25:f3:e5:04:a9:8c:56:89:c0:35:9c:a3: 03:49:98:93:59:5f:2b:04:7a:7e:9d:73:22:36:15:1a:2a:bd: a0:3a:e3:3f:db:55:78:df:17:7f:81:01:16:16:12:3f:e9:3f: b6:46:15:98:cd:61:5f:3c:e1:6d:23:6b:db:ea:d8:c3:59:ca: b1:d5:06:48 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtYPIbaNLl0Fq7wUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWJjODI2ODYtZjg1My00OGMzLThhMjQtMzE1YWZlNGJlNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDlZOwjr3MNyyCOwJpSMVqSHE93hd91muVpz jxISkldqDviUf0QFjXvquBSjyv/Gd5G3Wt/KvL1VZ0MJsNTX2abbCPg84lT2lC+j adhpyizYaBpl7K8jOR8mal32og0MiIn5w+0hFqbHyGOS586q+a/1ovQ7NjHIDdBl qQEbKA6qQyuQnHGQBHnYAa4lbbkH6fb5JQQZhOp2A+MyYD3WzX2ONbuFvcAWV2Hs GniSMpwMR/QK9qER9NT1gWxEvik/G9RT8KII6fRPOcQCzxfUDc00Md55xKPYigPb AHy03F923f5fuui4NBD8Zl/TpgxTb4ReBE07oQjittK0Ha/07wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPColhtkNkxCR3Gk6AScETLCAJHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmQzNTMwZmMtYWJhNC0z MGFhLWI1ZWUtNGNiNjdiNGU1MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH/H9Zo4uefT5SuX2WsjPvXxKh0IN2EyD+ 67hrWsOqFgBXnotFECmhYdlUpx2IN4AuiepgwSg3bYfZBkHm+yBuT/xmHSIVeTLI DyA4QWcKyC+N+8phnYO64II2m2YonX0g0/oSg3qFpFOQm9djmslA2Hov7V4RHxr9 kG+9VhkG1Cq1ZgcDrHEkPi3+Ohb9gm1oOurEkgQUIkyrgh2pwKLQFJRyY8Z85/Ef 7grXvh0xUA3QN1xRtASdCt8l8+UEqYxWicA1nKMDSZiTWV8rBHp+nXMiNhUaKr2g OuM/21V43xd/gQEWFhI/6T+2RhWYzWFfPOFtI2vb6tjDWcqx1QZI -----END CERTIFICATE-----Generated at Sat Oct 11 18:32:15 2025 by rpki-client