$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa File: 3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa (raw, json) Hash identifier: kcw5RD+s5wRCo71Ip6LekmrePsxj7RvnJgrwMwIJQWc= Subject key identifier: 01:D1:75:58:A4:5C:DA:01:57:12:DD:6F:28:DE:CB:49:E4:C9:11:4B Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC22A839F685363B62F260 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 24.214.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:22:a8:39:f6:85:36:3b:62:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=195482bb-0216-4f5e-a72d-cd3fcf702a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:6f:85:0a:f6:e8:0d:e1:34:d4:4a:4a:fb: 96:5d:a5:05:3a:ca:cf:78:8a:20:1f:f2:72:bf:69: a4:a1:ab:49:1c:27:8c:ef:25:01:7f:c8:02:e8:63: 6e:10:33:17:31:ed:82:b5:4e:13:3c:2f:67:49:58: b6:d0:39:bb:b8:02:96:f3:49:c2:2d:32:ee:c2:f3: ed:ab:86:d8:07:e4:8c:42:47:5d:24:b0:a4:b8:d2: 16:f1:7a:7b:3e:d7:30:e0:4f:d9:0b:2f:f2:8d:5a: 2a:f7:9b:ef:b8:f8:f7:e6:84:07:b7:36:ee:59:34: 2a:f6:79:e4:96:0f:9e:3d:66:0e:b1:2e:09:ac:15: 73:da:01:ed:32:c1:1f:ba:89:e4:e7:77:97:fc:41: 48:55:17:7b:13:61:6f:75:d8:a3:d7:93:f2:b5:00: a0:da:bf:aa:a6:8c:1c:ea:9b:98:ef:3c:74:e8:aa: 31:ab:69:7a:8a:50:a9:32:88:20:fb:40:77:d5:6c: 8b:57:84:a5:db:e4:05:9f:28:47:d3:9b:5a:9a:46: 5c:5d:61:53:7f:e1:07:f5:14:d4:48:eb:f4:b5:04: 04:e3:be:a6:08:db:b1:59:f5:53:37:d6:bf:93:c0: 78:19:f1:82:03:4a:b4:85:42:c5:5f:cc:69:eb:1b: 62:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:75:58:A4:5C:DA:01:57:12:DD:6F:28:DE:CB:49:E4:C9:11:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:38:01:c0:5c:bd:17:ce:dd:00:d9:58:46:41:dc:c6:48:db: 5b:7e:c4:a6:71:d3:dc:69:c5:5e:3a:c7:52:b0:94:27:76:4d: fa:f5:44:73:81:5c:b8:77:c4:ad:ca:1e:68:35:ec:ee:a0:71: a9:56:32:27:8a:07:4d:7b:74:4a:86:bd:6b:95:e5:26:9f:e8: 3e:38:8a:f5:63:e0:22:97:64:8e:f8:3e:f7:86:45:40:ba:0d: 75:e3:40:47:4b:93:ea:ad:ff:6d:3a:c4:e9:65:af:3f:ea:2a: 81:b6:ae:cb:97:05:5e:4d:e5:1e:b7:fb:b6:8e:aa:ac:9a:7b: 8e:dd:14:69:62:19:09:a1:2c:47:38:2f:70:89:62:10:7c:7f: b3:62:c9:0b:5b:63:98:2b:d7:90:d4:60:b1:df:14:d6:a5:4b: 84:2b:f4:39:c5:d9:72:1b:3a:8c:e0:c8:a7:05:b2:be:a4:22: 2c:92:f5:4f:4e:0e:65:b2:f0:a4:23:d4:10:9c:b5:90:db:65: 94:5d:d0:26:68:e4:85:e5:1a:95:26:4a:8d:13:b9:c2:2c:2c: 53:23:df:cf:df:cd:54:9b:2f:00:47:56:9e:62:00:60:8a:1f: a0:86:bb:83:59:e4:2e:7e:e1:75:e0:32:ec:83:35:72:50:fd: 5b:a0:c3:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCKoOfaFNjti8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MTk1NDgyYmItMDIxNi00ZjVlLWE3MmQtY2QzZmNmNzAyYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrVvhQr26A3hNNRKSvuWXaUFOsrPeIogH/Jy v2mkoatJHCeM7yUBf8gC6GNuEDMXMe2CtU4TPC9nSVi20Dm7uAKW80nCLTLuwvPt q4bYB+SMQkddJLCkuNIW8Xp7Ptcw4E/ZCy/yjVoq95vvuPj35oQHtzbuWTQq9nnk lg+ePWYOsS4JrBVz2gHtMsEfuonk53eX/EFIVRd7E2Fvddij15PytQCg2r+qpowc 6puY7zx06Koxq2l6ilCpMogg+0B31WyLV4Sl2+QFnyhH05tamkZcXWFTf+EH9RTU SOv0tQQE476mCNuxWfVTN9a/k8B4GfGCA0q0hULFX8xp6xti1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHRdVikXNoBVxLdbyjey0nkyRFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2Y3YWRlMmMtMmIwYy0z OTdmLThhZDEtYTZkMDliNzc0ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGNYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH84AcBcvRfO3QDZWEZB3MZI21t+xKZx09xpxV46x1KwlCd2Tfr1RHOB XLh3xK3KHmg17O6gcalWMieKB017dEqGvWuV5Saf6D44ivVj4CKXZI74PveGRUC6 DXXjQEdLk+qt/206xOllrz/qKoG2rsuXBV5N5R63+7aOqqyae47dFGliGQmhLEc4 L3CJYhB8f7NiyQtbY5gr15DUYLHfFNalS4Qr9DnF2XIbOozgyKcFsr6kIiyS9U9O DmWy8KQj1BCctZDbZZRd0CZo5IXlGpUmSo0TucIsLFMj38/fzVSbLwBHVp5iAGCK H6CGu4NZ5C5+4XXgMuyDNXJQ/Vugw6M= -----END CERTIFICATE-----Generated at Sat Oct 11 16:00:12 2025 by rpki-client