$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa File: 8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa (raw, json) Hash identifier: l5Hli4eIiff1XKDjgz7KRFHVX3CIhalQcrFJzsRXdhE= Subject key identifier: 79:F7:D6:A2:BE:FE:8A:C6:C8:92:C0:04:17:6E:F6:8D:45:B6:6C:D5 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584B2B919235DF8C60F1A4D28280 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 398090 IP address blocks: 104.171.200.0/22 maxlen: 24 192.222.48.0/20 maxlen: 24 198.145.39.0/24 maxlen: 24 209.20.156.0/22 maxlen: 24 2607:bb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:92:35:df:8c:60:f1:a4:d2:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=6565bc29-2bac-4de7-8547-0d84fdf9ee21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:52:3e:3f:fb:f0:56:98:8f:f3:cd:49:64: 38:b7:fc:40:55:9d:58:79:e0:45:96:db:a8:f6:4a: 34:45:5a:3c:12:ca:4c:0d:73:4b:29:39:89:9f:52: 33:d9:6a:8f:db:af:ef:39:34:15:20:ed:5f:ad:42: cb:ec:9b:6b:af:08:17:ea:6e:f5:fc:4d:75:02:f4: 28:ee:20:5b:b7:51:c6:3f:46:d3:ea:d7:4c:3b:10: 31:cf:92:11:da:8d:4b:16:4e:f3:50:55:a2:1c:a0: e7:a6:b6:b1:c6:9f:81:95:dd:30:e4:34:ad:39:43: df:1d:f1:46:3b:34:17:9c:74:9c:e8:03:82:62:10: 11:dd:a7:b4:26:b1:2d:20:d6:b2:62:df:b2:4b:80: d0:62:27:93:81:35:ff:ac:0a:61:a2:61:1a:e4:20: 40:6f:70:72:36:fb:eb:4d:95:57:e6:05:4f:6d:04: 45:7a:b4:15:a6:ee:b7:52:3b:22:f2:82:6b:6e:1e: 78:e9:bc:d8:51:2b:2b:93:ab:de:d8:8b:8f:16:ed: 0f:7f:a8:b6:82:4a:0e:3b:01:38:c7:6b:16:74:bc: d6:91:2b:b2:91:45:7a:ca:00:8f:10:fe:f7:9f:58: 53:ac:a3:4e:2c:86:92:5e:ed:9d:92:25:e2:09:79: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F7:D6:A2:BE:FE:8A:C6:C8:92:C0:04:17:6E:F6:8D:45:B6:6C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 104.171.200.0/22 192.222.48.0/20 198.145.39.0/24 209.20.156.0/22 IPv6: 2607:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:63:94:f4:24:1f:1f:60:7d:d3:0a:67:ab:e3:d0:06:e9:e0: 06:cd:76:0a:24:29:2f:7c:98:dd:ca:7c:c2:22:c1:62:2a:58: a8:f3:49:bf:d8:15:e1:69:5e:1e:7c:f5:92:6d:3b:fa:52:37: f1:51:9a:5b:58:6f:31:3f:d6:22:fe:cb:bc:34:1e:2c:41:d5: d9:cd:7e:c6:6a:52:be:67:f4:93:3b:a9:37:e4:31:04:ae:0c: 80:ad:92:7e:f3:90:ff:08:26:ef:87:8d:66:6e:8f:ee:19:eb: cc:9e:1f:c0:8e:b8:b7:b4:1d:aa:7d:4a:1f:d2:6e:1b:46:12: 6d:15:60:95:a0:14:89:71:e0:b3:3c:fb:71:af:48:85:63:ee: e0:d3:d0:28:7b:9b:b0:71:01:f7:34:77:dc:9b:eb:bd:e4:3b: 6c:ad:d3:b9:b4:48:38:79:74:cd:33:8c:13:ae:b6:ef:e1:59: 0f:cb:c6:ad:89:b4:6f:3a:33:ec:0a:df:f4:d1:b0:00:9d:e6: 74:dc:5f:00:4c:38:fe:21:d4:8c:fe:b6:bb:54:70:12:9b:83: 50:82:60:84:aa:a1:e0:8d:02:e4:e2:8b:81:e4:a7:8f:c8:4a: c6:5b:3b:bc:94:69:47:33:e1:57:18:6f:9e:ff:bd:68:e3:47: 26:e1:68:88 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEsrkZI134xg8aTSgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk NjU2NWJjMjktMmJhYy00ZGU3LTg1NDctMGQ4NGZkZjllZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVRSPj/78FaYj/PNSWQ4t/xAVZ1YeeBFltuo 9ko0RVo8EspMDXNLKTmJn1Iz2WqP26/vOTQVIO1frULL7JtrrwgX6m71/E11AvQo 7iBbt1HGP0bT6tdMOxAxz5IR2o1LFk7zUFWiHKDnpraxxp+Bld0w5DStOUPfHfFG OzQXnHSc6AOCYhAR3ae0JrEtINayYt+yS4DQYieTgTX/rAphomEa5CBAb3ByNvvr TZVX5gVPbQRFerQVpu63Ujsi8oJrbh546bzYUSsrk6ve2IuPFu0Pf6i2gkoOOwE4 x2sWdLzWkSuykUV6ygCPEP73n1hTrKNOLIaSXu2dkiXiCXl6BwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFHn31qK+/orGyJLABBdu9o1FtmzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvOGExMWUwYmItN2NmYS0z YTIwLWIyZTAtYjRlNmZjNzEwZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCaKvIAwQE wN4wAwQAxpEnAwQC0RScMA0EAgACMAcDBQAmB7tAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACNjlPQkHx9g fdMKZ6vj0Abp4AbNdgokKS98mN3KfMIiwWIqWKjzSb/YFeFpXh589ZJtO/pSN/FR mltYbzE/1iL+y7w0HixB1dnNfsZqUr5n9JM7qTfkMQSuDICtkn7zkP8IJu+HjWZu j+4Z68yeH8COuLe0Hap9Sh/SbhtGEm0VYJWgFIlx4LM8+3GvSIVj7uDT0Ch7m7Bx Afc0d9yb673kO2yt07m0SDh5dM0zjBOutu/hWQ/Lxq2JtG86M+wK3/TRsACd5nTc XwBMOP4h1Iz+trtUcBKbg1CCYISqoeCNAuTii4Hkp4/ISsZbO7yUaUcz4VcYb57/ vWjjRybhaIg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:24:15 2025 by rpki-client