$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa File: d0192a55-432f-3594-81cd-d16e7579e4e8.roa (raw, json) Hash identifier: nvlQM6luCuHysw28GfUtNDsT2bEWr5ShgttYHU5UGhg= Subject key identifier: 1B:1B:38:28:96:1E:46:DC:5F:2A:BE:B6:2F:2E:79:D2:17:CC:C4:D7 Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F4328584B0746B6D5836DF11B51983300 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 12261 IP address blocks: 64.253.208.0/22 maxlen: 22 64.253.212.0/22 maxlen: 22 64.253.216.0/22 maxlen: 23 64.253.220.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b6:d5:83:6d:f1:1b:51:98:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=9b4768eb-6d2d-4dc3-8cac-d972355c7aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:e1:fd:7e:9a:af:25:ad:ec:81:a7:35:cf: ac:af:c0:68:2f:97:b1:43:47:66:b6:eb:21:a1:6e: c3:9a:00:ec:5e:70:9c:87:89:63:8b:00:68:03:69: 33:2d:1b:fa:3c:2b:12:12:46:e2:47:6f:4d:3d:33: 59:19:cd:6c:6a:d0:e3:a8:07:fd:10:15:a6:3a:de: 9a:e0:4b:a8:cb:67:6b:29:a1:84:01:f6:d1:ee:63: e0:fc:79:b9:c5:e8:62:8b:03:65:f1:2f:00:83:a3: a1:8e:32:c0:9f:61:73:ac:68:2b:3e:3e:4c:4a:6c: e5:4f:5c:a1:73:b4:c1:af:48:9f:0b:10:f9:d0:60: 23:72:66:34:89:59:1a:26:25:5d:1c:93:57:7f:8c: 00:66:46:d6:da:18:71:95:23:12:e6:d7:14:bc:1c: 27:b5:4b:fa:ef:06:72:48:c0:5a:49:1f:f2:d8:04: c6:73:c3:cf:ca:b3:20:98:42:04:d8:c2:cf:a1:41: 00:14:a4:7b:ca:93:fd:56:07:6d:22:b5:c6:1d:d8: 17:ec:48:c3:bd:71:28:a0:d0:df:a3:3d:9a:0e:32: 9a:d5:24:e2:be:95:75:d6:a2:6d:9e:ac:d5:8b:99: 01:02:dd:8d:76:eb:11:4c:f5:00:17:24:0a:f2:11: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:38:28:96:1E:46:DC:5F:2A:BE:B6:2F:2E:79:D2:17:CC:C4:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 64.253.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:54:a6:78:34:b9:54:0c:29:47:49:2e:ce:6f:c4:bf:7c:ad: c6:d5:fd:f7:b8:0a:90:9d:96:73:f5:5c:f4:75:be:aa:1e:34: 1a:d8:2c:d8:96:f8:9d:69:52:39:10:22:64:6b:c0:47:10:69: ea:6b:10:e4:a4:a2:24:03:ac:67:76:70:76:d6:41:7f:7b:1a: 6f:5d:ca:b2:a4:33:fe:04:05:70:61:02:4b:bc:d1:24:87:61: 21:71:87:a5:c9:f1:a8:27:4a:0a:17:4c:cb:33:f8:cc:80:6a: eb:2e:68:e4:a9:86:bb:70:9c:bd:2e:c1:0c:18:67:31:fb:17: 3c:5e:48:5d:90:3b:bf:e4:1c:3a:5d:b5:98:38:98:6c:63:fc: 9f:9a:87:b1:a8:20:c7:28:04:c9:2e:a1:95:3a:1e:80:94:7e: 5c:e2:36:be:0a:53:d3:03:58:ae:2f:62:e8:e1:a4:f8:df:1e: c9:50:e9:8b:75:f6:89:67:4b:98:b5:4c:b2:7b:fb:8b:0d:bd: 4e:25:0a:8b:ec:4b:84:52:0b:dd:be:ff:7b:39:0b:e7:5b:ba: 83:20:ea:ae:89:b6:5a:36:bc:9c:49:49:e8:6f:00:d9:44:32: dc:9f:f2:96:a6:76:c9:8a:62:99:06:e8:41:74:1b:55:61:df: e3:19:3e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrbVg23xG1GYMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OWI0NzY4ZWItNmQyZC00ZGMzLThjYWMtZDk3MjM1NWM3YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRnh/X6aryWt7IGnNc+sr8BoL5exQ0dmtush oW7DmgDsXnCch4ljiwBoA2kzLRv6PCsSEkbiR29NPTNZGc1satDjqAf9EBWmOt6a 4Euoy2drKaGEAfbR7mPg/Hm5xehiiwNl8S8Ag6OhjjLAn2FzrGgrPj5MSmzlT1yh c7TBr0ifCxD50GAjcmY0iVkaJiVdHJNXf4wAZkbW2hhxlSMS5tcUvBwntUv67wZy SMBaSR/y2ATGc8PPyrMgmEIE2MLPoUEAFKR7ypP9VgdtIrXGHdgX7EjDvXEooNDf oz2aDjKa1STivpV11qJtnqzVi5kBAt2NdusRTPUAFyQK8hH2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsbOCiWHkbcXyq+ti8uedIXzMTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvZDAxOTJhNTUtNDMyZi0z NTk0LTgxY2QtZDE2ZTc1NzllNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQP3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Upng0uVQMKUdJLs5vxL98rcbV/fe4CpCdlnP1XPR1vqoeNBrYLNiW +J1pUjkQImRrwEcQaeprEOSkoiQDrGd2cHbWQX97Gm9dyrKkM/4EBXBhAku80SSH YSFxh6XJ8agnSgoXTMsz+MyAausuaOSphrtwnL0uwQwYZzH7FzxeSF2QO7/kHDpd tZg4mGxj/J+ah7GoIMcoBMkuoZU6HoCUflziNr4KU9MDWK4vYujhpPjfHslQ6Yt1 9olnS5i1TLJ7+4sNvU4lCovsS4RSC92+/3s5C+dbuoMg6q6Jtlo2vJxJSehvANlE Mtyf8pamdsmKYpkG6EF0G1Vh3+MZPg0= -----END CERTIFICATE-----Generated at Sat Oct 11 16:50:44 2025 by rpki-client