$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa File: 8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa (raw, json) Hash identifier: hn7VJ9EJjoDebpwbrN6ZfIYHyZBWOj5T7UTWiQ8VbnA= Subject key identifier: C6:2C:52:44:45:11:E8:BB:02:AC:A2:C2:C5:DF:FA:6C:D3:DA:E5:54 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC235EE79E4E14C2B017BC Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 24.214.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:23:5e:e7:9e:4e:14:c2:b0:17:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=f6b9aef4-236b-41bf-8cd9-28ef4fd0e631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:b0:ac:ce:bd:ab:02:6f:b2:61:09:2e:85: 82:fd:84:b4:f4:1d:aa:67:3b:a6:3d:01:47:60:59: 35:b3:1a:f9:c4:e0:e3:ec:be:59:77:2a:96:ce:40: 4e:4a:2c:33:6a:46:ac:a1:14:b8:44:b9:65:8d:3d: 3b:44:a7:17:f2:00:f9:2b:c4:75:0a:a7:05:ae:89: 18:d9:50:31:00:e8:25:a9:c4:c1:1e:ad:8d:2f:87: ed:cc:b1:44:45:34:1e:97:a0:ad:8e:a8:57:d5:32: 60:0c:0c:14:79:7f:bf:7f:73:74:30:43:6d:94:6f: 3c:5e:1a:dc:47:7b:85:64:4d:30:39:5b:1b:65:fd: 83:4a:fc:16:bc:7b:9f:d2:52:b9:bb:9e:e6:d4:30: 2a:cc:a5:e4:9b:3d:04:a2:9b:b1:0e:cb:34:cb:b3: f9:6a:5c:3c:d3:d9:96:20:26:2b:25:7f:bb:b4:c5: 81:de:d8:bc:37:cc:4b:5d:89:8e:c1:10:db:01:b6: 49:9e:16:f3:6a:99:e1:3b:82:d9:fa:72:9e:2e:80: e6:64:fa:ea:df:51:a4:2c:46:b1:7f:6f:6a:32:9f: 81:da:0b:ca:de:33:49:00:dd:56:b8:83:f1:27:d3: b8:db:1d:06:59:ef:1d:a3:e3:e6:c5:e9:00:1c:4c: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2C:52:44:45:11:E8:BB:02:AC:A2:C2:C5:DF:FA:6C:D3:DA:E5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d8:14:c7:b6:61:06:fe:a0:ef:09:fd:e1:6f:7a:2b:d6:e2: 7b:1e:2d:d5:fa:67:26:34:11:ba:68:71:7b:8b:14:60:5e:3a: 27:f9:cf:72:1e:9a:f5:52:0c:9e:9a:dd:91:ec:c8:a2:41:14: ee:b5:d1:a9:d3:f1:a3:0f:05:fa:48:ab:df:b6:46:43:e3:b7: 0c:c5:3a:e5:20:a3:90:3c:7d:00:a6:89:aa:6d:fd:41:49:3b: b4:d2:44:90:24:f7:f2:3f:0f:1c:9b:8e:19:0f:91:68:b9:95: 28:35:cb:e7:62:9a:6a:22:bd:32:23:eb:f7:46:e4:5a:07:ca: 4a:22:d5:2d:ef:b2:38:2d:5b:9e:4b:d7:b4:53:e6:6a:d4:53: 1e:16:c7:68:01:b4:a1:6f:f1:05:78:25:77:16:79:c7:19:6c: b3:d5:1f:97:8e:90:f3:20:51:d7:e2:c5:c5:af:d5:09:1b:4b: 39:15:fd:04:94:5f:34:5d:95:8f:ae:5d:ea:3f:3c:7b:c3:65: 47:db:02:52:c8:e2:2c:9e:f0:4d:46:d9:73:2f:f1:cc:d3:31: 17:8d:73:7e:b4:40:76:46:b6:9c:83:29:89:9a:eb:13:78:97: 67:c1:6c:e3:b6:ec:28:df:e6:2b:17:6d:8c:34:e4:26:ff:27: 2b:4f:38:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCNe555OFMKwF7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZjZiOWFlZjQtMjM2Yi00MWJmLThjZDktMjhlZjRmZDBlNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEWwrM69qwJvsmEJLoWC/YS09B2qZzumPQFH YFk1sxr5xODj7L5ZdyqWzkBOSiwzakasoRS4RLlljT07RKcX8gD5K8R1CqcFrokY 2VAxAOglqcTBHq2NL4ftzLFERTQel6CtjqhX1TJgDAwUeX+/f3N0MENtlG88Xhrc R3uFZE0wOVsbZf2DSvwWvHuf0lK5u57m1DAqzKXkmz0EopuxDss0y7P5alw809mW ICYrJX+7tMWB3ti8N8xLXYmOwRDbAbZJnhbzapnhO4LZ+nKeLoDmZPrq31GkLEax f29qMp+B2gvK3jNJAN1WuIPxJ9O42x0GWe8do+PmxekAHEzAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYsUkRFEei7AqyiwsXf+mzT2uVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvODA5NWZlOGItYmNlOC0z ZjFjLTkxNmMtMmRjYzgxYzZkNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGNbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHYFMe2YQb+oO8J/eFveivW4nseLdX6ZyY0EbpocXuLFGBeOif5z3Ie mvVSDJ6a3ZHsyKJBFO610anT8aMPBfpIq9+2RkPjtwzFOuUgo5A8fQCmiapt/UFJ O7TSRJAk9/I/DxybjhkPkWi5lSg1y+dimmoivTIj6/dG5FoHykoi1S3vsjgtW55L 17RT5mrUUx4Wx2gBtKFv8QV4JXcWeccZbLPVH5eOkPMgUdfixcWv1QkbSzkV/QSU XzRdlY+uXeo/PHvDZUfbAlLI4iye8E1G2XMv8czTMReNc360QHZGtpyDKYma6xN4 l2fBbOO27Cjf5isXbYw05Cb/JytPOFc= -----END CERTIFICATE-----Generated at Sat Oct 11 16:00:13 2025 by rpki-client