$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa File: cf4be9dc-75c5-3f44-b4d0-65e111847482.roa (raw, json) Hash identifier: cT3a85bgBpna44BjujfAfOqu5WrTY5aS3gM+CUKmcsM= Subject key identifier: 9E:3B:04:64:AD:12:ED:5E:D5:44:F4:62:BE:0A:26:A3:2D:A8:5E:C6 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584B047C17EDF72DF56A3C011DA0 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 4922 IP address blocks: 204.111.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:17:ed:f7:2d:f5:6a:3c:01:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=c2f9e11e-d5e9-46d9-bf89-65ce2db8e361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:72:34:fa:af:a8:1b:96:fa:d3:a7:1d:e2: 76:96:ff:33:0a:cf:bc:56:f2:90:99:fa:d0:95:8b: 8b:b9:07:f8:de:e7:37:12:b3:4a:62:c8:98:5a:4f: 39:80:01:e0:d0:52:d2:a5:7f:b7:36:dc:29:74:8a: 08:38:8c:8b:ad:8d:48:e2:4b:7a:5e:72:0e:8b:24: 9b:05:aa:63:54:38:2c:b8:6e:ba:ef:b3:a7:19:1a: 61:42:57:76:da:eb:45:33:98:df:0e:f4:16:ac:6e: 5b:78:c8:f1:39:59:3a:9b:c2:5a:ca:d0:26:bf:27: 3b:4f:37:28:a1:12:7a:98:49:98:7c:4a:f5:0f:2e: 66:1e:6f:45:1a:fb:4c:34:32:85:41:39:e1:8c:6a: 50:92:02:76:ce:e4:6a:3d:5f:2b:b0:2f:31:89:26: 11:94:e8:b6:bc:73:46:d3:57:dc:b9:49:ed:c0:7c: 9a:3a:59:37:3d:41:c4:3b:8e:9b:79:f5:1a:43:64: 1b:43:6b:eb:a2:f5:4f:ea:ae:19:0f:ca:e9:b8:06: da:d9:d6:59:45:1d:ef:95:bd:54:9f:fd:91:83:ed: 9a:ac:9d:c2:ca:49:94:69:70:b3:36:0f:34:f2:68: fe:15:f8:37:2d:c8:aa:b6:48:1f:0e:ed:f9:3d:b2: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3B:04:64:AD:12:ED:5E:D5:44:F4:62:BE:0A:26:A3:2D:A8:5E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 204.111.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b1:1a:3f:79:c8:28:d3:08:40:4a:51:24:ac:db:55:98:59: d0:54:93:ee:b7:72:03:f9:80:00:59:75:59:0f:22:13:2e:3b: 06:ba:ec:88:3a:78:06:e8:59:13:10:36:58:48:1f:9c:8f:f3: 01:a6:44:f5:d1:16:5b:14:d8:37:92:10:6e:50:8b:e5:1c:8e: e6:22:2b:94:40:3b:b2:f3:d4:05:b3:82:bd:2d:0d:44:6e:60: bc:74:95:5c:b4:0f:9e:b4:b6:9d:81:71:f5:e1:9c:68:ba:0f: 06:fe:3e:3b:5e:64:f1:c2:a4:08:32:78:d9:68:fe:15:6f:0e: 6f:9a:a2:48:73:f8:7b:b0:b6:f7:3c:02:65:e9:33:e8:43:a5: 5c:30:e1:ec:a7:2b:6b:ea:ec:44:69:e7:54:90:23:54:cb:bf: 68:39:c9:d4:28:d1:3e:af:2e:00:d6:10:5c:4c:00:63:6d:db: 62:88:bb:a8:93:f8:e3:b3:01:e9:4f:66:ed:74:94:c8:cd:e2: 82:59:ff:ba:ab:ef:da:b0:4d:72:19:a6:61:ed:4c:fe:80:25: 10:ad:ac:0a:cb:a9:a3:ad:83:ac:f3:7c:db:9f:73:02:9c:ea: f3:a5:43:66:56:20:f7:59:7c:3b:14:bb:f4:81:3a:49:ab:86: 8f:14:fd:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBft9y31ajwBHaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzJmOWUxMWUtZDVlOS00NmQ5LWJmODktNjVjZTJkYjhlMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw85yNPqvqBuW+tOnHeJ2lv8zCs+8VvKQmfrQ lYuLuQf43uc3ErNKYsiYWk85gAHg0FLSpX+3NtwpdIoIOIyLrY1I4kt6XnIOiySb BapjVDgsuG6677OnGRphQld22utFM5jfDvQWrG5beMjxOVk6m8JaytAmvyc7Tzco oRJ6mEmYfEr1Dy5mHm9FGvtMNDKFQTnhjGpQkgJ2zuRqPV8rsC8xiSYRlOi2vHNG 01fcuUntwHyaOlk3PUHEO46befUaQ2QbQ2vrovVP6q4ZD8rpuAba2dZZRR3vlb1U n/2Rg+2arJ3CykmUaXCzNg808mj+Ffg3LciqtkgfDu35PbLJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ47BGStEu1e1UT0Yr4KJqMtqF7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvY2Y0YmU5ZGMtNzVjNS0z ZjQ0LWI0ZDAtNjVlMTExODQ3NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzG+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGxGj95yCjTCEBKUSSs21WYWdBUk+63cgP5gABZdVkPIhMuOwa67Ig6 eAboWRMQNlhIH5yP8wGmRPXRFlsU2DeSEG5Qi+UcjuYiK5RAO7Lz1AWzgr0tDURu YLx0lVy0D560tp2BcfXhnGi6Dwb+PjteZPHCpAgyeNlo/hVvDm+aokhz+Huwtvc8 AmXpM+hDpVww4eynK2vq7ERp51SQI1TLv2g5ydQo0T6vLgDWEFxMAGNt22KIu6iT +OOzAelPZu10lMjN4oJZ/7qr79qwTXIZpmHtTP6AJRCtrArLqaOtg6zzfNufcwKc 6vOlQ2ZWIPdZfDsUu/SBOkmrho8U/R8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:32:49 2025 by rpki-client