$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4fb890ca-03ee-3940-b03e-f9f28a46389b.roa File: 4fb890ca-03ee-3940-b03e-f9f28a46389b.roa (raw, json) Hash identifier: GePNJdNjvFABR8xALs+IhSpR0PwCvE2RlSCgurhStPk= Subject key identifier: BF:B8:AF:85:ED:C6:8C:27:B3:45:57:66:76:0E:85:48:A0:0C:32:D7 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC30B85B5A31644A87E480 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4fb890ca-03ee-3940-b03e-f9f28a46389b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 207.98.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:30:b8:5b:5a:31:64:4a:87:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=f8724527-c58b-473c-b384-d26b2c460668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d2:b4:9e:67:a1:fc:bc:fd:43:49:ad:f2:84: 88:5f:92:5e:b3:d5:04:ae:3f:0a:bd:92:c0:60:9d: d2:32:c0:a1:0d:65:62:cf:a5:f3:ab:14:da:38:cb: 85:ed:7a:96:e6:a4:3a:8f:53:b6:da:ab:55:a0:27: 61:df:f9:e0:31:4e:0a:8e:20:83:df:bf:21:bf:48: 33:8a:72:a4:b9:37:19:46:36:ca:68:4c:c7:13:3d: 07:17:14:98:c2:80:fc:a3:31:2f:d6:79:08:db:fb: f2:5c:72:d1:a2:33:dd:e4:cf:ff:22:68:1c:55:bf: 70:3b:d8:b6:d5:7e:30:3f:f5:d9:38:6b:8a:cc:9c: bf:1b:92:67:7f:e4:a3:8d:18:6d:6b:52:a0:a0:20: ee:c8:e7:e7:09:82:1c:7a:bd:21:a9:87:af:fb:37: 94:2b:b0:70:70:89:73:73:e4:21:e5:ca:f3:f7:7d: 8c:e2:9e:e1:82:c8:e1:1f:6f:ea:3f:1d:5d:9d:88: 41:c4:38:fc:62:c0:6f:0f:fe:d2:86:cc:a0:c9:34: 1b:c0:d9:22:c3:04:19:17:d5:6c:c0:a9:74:b7:29: 9f:0a:b6:c2:0f:4a:b6:8f:4b:2a:5b:7a:ec:0a:b6: e7:61:7a:e6:28:10:b3:7b:27:2f:96:49:2b:45:46: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:AF:85:ED:C6:8C:27:B3:45:57:66:76:0E:85:48:A0:0C:32:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4fb890ca-03ee-3940-b03e-f9f28a46389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 207.98.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1c:f7:7d:f9:d6:57:bd:99:7a:2b:3d:dd:55:64:58:b0:b7: 99:17:20:40:22:cf:a5:6b:d1:e8:52:5d:85:6b:cb:9f:e1:e6: c5:17:30:53:56:3e:fd:e9:54:65:e6:1e:f3:a9:02:4a:b6:8f: 87:70:f0:56:b6:f1:af:ac:1f:a0:0f:7d:c0:a9:58:5a:92:73: a0:c0:d6:59:d0:37:7d:01:04:8b:bc:a7:32:6c:2e:e9:de:8f: d7:7b:23:44:61:a2:df:e3:2c:3b:e9:24:c7:76:58:95:3f:96: e4:56:d6:85:26:a7:0a:6d:e6:8d:a5:0e:9c:84:c6:42:6d:94: 82:5b:7c:ca:b5:83:5f:01:75:78:03:43:06:6a:fc:9c:fb:07: 17:5a:ee:7d:19:bd:e0:b1:79:8c:cb:0d:f7:28:90:0b:c0:f8: 90:7e:4a:d2:9e:6b:f3:ba:28:5e:1f:1f:d4:9b:30:b0:ee:97: 7a:8e:d1:3b:49:6a:98:7b:dc:1c:ad:9b:ff:c2:cb:76:27:ee: d9:31:bb:23:7c:b8:8d:e5:bd:04:25:be:42:2a:83:89:2a:e6: 23:cc:bc:2d:31:92:55:86:0a:d0:f4:d2:a7:f2:a0:b9:24:13: 4e:d8:83:4f:8f:ed:8a:9b:a3:f4:d9:49:56:e2:11:fa:a1:9b: a2:36:0f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzDC4W1oxZEqH5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk Zjg3MjQ1MjctYzU4Yi00NzNjLWIzODQtZDI2YjJjNDYwNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNK0nmeh/Lz9Q0mt8oSIX5Jes9UErj8KvZLA YJ3SMsChDWViz6XzqxTaOMuF7XqW5qQ6j1O22qtVoCdh3/ngMU4KjiCD378hv0gz inKkuTcZRjbKaEzHEz0HFxSYwoD8ozEv1nkI2/vyXHLRojPd5M//ImgcVb9wO9i2 1X4wP/XZOGuKzJy/G5Jnf+SjjRhta1KgoCDuyOfnCYIcer0hqYev+zeUK7BwcIlz c+Qh5crz932M4p7hgsjhH2/qPx1dnYhBxDj8YsBvD/7ShsygyTQbwNkiwwQZF9Vs wKl0tymfCrbCD0q2j0sqW3rsCrbnYXrmKBCzeycvlkkrRUY8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+4r4Xtxowns0VXZnYOhUigDDLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvNGZiODkwY2EtMDNlZS0z OTQwLWIwM2UtZjlmMjhhNDYzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2L6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUc93351le9mXorPd1VZFiwt5kXIEAiz6Vr0ehSXYVry5/h5sUXMFNW Pv3pVGXmHvOpAkq2j4dw8Fa28a+sH6APfcCpWFqSc6DA1lnQN30BBIu8pzJsLune j9d7I0Rhot/jLDvpJMd2WJU/luRW1oUmpwpt5o2lDpyExkJtlIJbfMq1g18BdXgD QwZq/Jz7Bxda7n0ZveCxeYzLDfcokAvA+JB+StKea/O6KF4fH9SbMLDul3qO0TtJ aph73Bytm//Cy3Yn7tkxuyN8uI3lvQQlvkIqg4kq5iPMvC0xklWGCtD00qfyoLkk E07Yg0+P7Yqbo/TZSVbiEfqhm6I2D1U= -----END CERTIFICATE-----Generated at Sat Oct 11 15:51:05 2025 by rpki-client