$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa File: b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa (raw, json) Hash identifier: 0/yMp6nICwrtDngyOXLOaHu1bRtEMuJEdKMILgWBh40= Subject key identifier: 05:7B:F8:1B:67:29:1C:31:61:BB:AC:E3:51:11:85:C0:F1:3F:28:6E Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584B21CC252A111290F44D589110 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 10430 IP address blocks: 169.204.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:25:2a:11:12:90:f4:4d:58:91:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=66ac3ebe-9acb-423f-b716-14b586bd5809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:c2:03:76:71:18:81:fd:59:85:78:66:c4: 94:6d:8d:fc:f1:11:e6:24:69:fc:33:e9:a4:bf:94: e6:28:4f:67:16:60:b5:f8:df:61:e9:cf:32:a3:5c: d8:79:e0:ef:7e:5d:5d:20:17:32:88:45:08:1e:4e: 33:2a:34:84:2b:68:90:82:ab:d3:ae:08:75:c5:75: dc:32:fb:fc:4d:33:7d:52:d7:af:e8:b1:69:7d:f1: d1:d9:a2:70:fe:3a:16:eb:24:34:4d:11:15:ae:bc: 0b:54:8f:e4:7a:79:3b:06:c8:d8:bc:47:4a:89:59: 26:d1:dd:b0:a8:95:09:2d:b8:02:58:34:d6:69:59: 96:3f:63:a9:bc:2d:e3:0d:58:9d:d3:a1:6d:3e:9b: 83:8c:bd:98:35:df:d3:5e:31:56:0d:a9:28:33:61: 13:5e:63:86:36:c6:41:20:0c:c5:db:c1:08:c2:76: b1:8c:c6:f1:cf:99:eb:9f:00:ae:a9:a6:70:3b:c5: 17:e8:3b:9f:63:25:8b:cc:4b:42:9a:c1:4b:41:27: 06:f0:37:ee:3b:4f:27:83:15:f1:e4:8a:3c:d6:fe: 3a:86:30:42:0a:04:ef:c2:35:cd:1d:45:9a:d7:42: 5a:0f:01:84:d0:c7:cf:8c:5e:29:76:60:d6:5d:9c: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7B:F8:1B:67:29:1C:31:61:BB:AC:E3:51:11:85:C0:F1:3F:28:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 169.204.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c9:7c:f0:47:9e:1d:07:6e:d4:b5:a7:48:63:e8:b5:1f:45: 37:3e:a2:c6:84:92:f4:9d:3c:f4:30:c3:cc:89:a5:fe:6a:9b: e2:89:90:1a:a5:4d:77:e0:82:3e:02:38:c3:80:94:a8:26:3c: bf:c5:e5:49:20:53:df:a4:e5:2a:f6:97:06:82:da:75:fe:8d: 00:83:da:27:01:26:e7:e6:a1:a7:73:79:32:2a:86:0b:72:1c: e5:2a:f7:55:e8:a1:7e:e1:88:30:7f:c1:f0:d5:2a:4a:9f:40: ba:1b:a3:c1:6c:87:e4:2f:1a:7f:41:df:88:5e:4e:5a:cc:27: 30:75:c8:af:79:01:6b:10:7d:e6:2d:f6:6f:fc:50:cb:b6:2f: cf:ed:77:6d:c8:6d:ff:56:89:b8:2b:16:24:15:0f:bb:e8:63: 91:a1:49:11:27:f0:75:05:29:6c:39:d1:73:b6:57:36:47:e1: ae:c2:6e:d7:09:db:f6:47:2c:ae:b8:16:81:d6:87:76:e4:96: f1:b9:b5:4f:6b:b0:92:33:21:cb:8f:a5:83:2e:cc:95:c5:0a: da:ac:fa:44:fb:bc:91:23:26:95:7f:eb:36:76:47:1f:31:99: 1d:f2:87:ad:7f:aa:d1:61:68:e0:9f:c8:bf:4c:b9:90:cb:18: 6f:89:a2:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEshzCUqERKQ9E1YkRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NjZhYzNlYmUtOWFjYi00MjNmLWI3MTYtMTRiNTg2YmQ1ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW3CA3ZxGIH9WYV4ZsSUbY388RHmJGn8M+mk v5TmKE9nFmC1+N9h6c8yo1zYeeDvfl1dIBcyiEUIHk4zKjSEK2iQgqvTrgh1xXXc Mvv8TTN9Utev6LFpffHR2aJw/joW6yQ0TREVrrwLVI/kenk7BsjYvEdKiVkm0d2w qJUJLbgCWDTWaVmWP2OpvC3jDVid06FtPpuDjL2YNd/TXjFWDakoM2ETXmOGNsZB IAzF28EIwnaxjMbxz5nrnwCuqaZwO8UX6DufYyWLzEtCmsFLQScG8DfuO08ngxXx 5Io81v46hjBCCgTvwjXNHUWa10JaDwGE0MfPjF4pdmDWXZzUEwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAV7+BtnKRwxYbus41ERhcDxPyhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvYjM1ZGVhNWMtYjE3ZC0z ZTRhLTgzZmQtZmZlNjMzYjJmMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqcwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFsl88EeeHQdu1LWnSGPotR9FNz6ixoSS9J089DDDzIml/mqb4omQGqVN d+CCPgI4w4CUqCY8v8XlSSBT36TlKvaXBoLadf6NAIPaJwEm5+ahp3N5MiqGC3Ic 5Sr3VeihfuGIMH/B8NUqSp9AuhujwWyH5C8af0HfiF5OWswnMHXIr3kBaxB95i32 b/xQy7Yvz+13bcht/1aJuCsWJBUPu+hjkaFJESfwdQUpbDnRc7ZXNkfhrsJu1wnb 9kcsrrgWgdaHduSW8bm1T2uwkjMhy4+lgy7MlcUK2qz6RPu8kSMmlX/rNnZHHzGZ HfKHrX+q0WFo4J/Iv0y5kMsYb4miPw== -----END CERTIFICATE-----Generated at Thu Oct 9 08:50:06 2025 by rpki-client