$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa File: 9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa (raw, json) Hash identifier: ba9D32vmSZ+3pd05sFN1YS4yYIdqkD6lCV162UAwqIQ= Subject key identifier: 2F:C0:40:A4:B2:C3:82:39:45:73:45:1B:4D:A9:C8:4F:06:BC:0D:59 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584B41E7299F2470F98FE2D11F80 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398090 IP address blocks: 167.17.96.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:29:9f:24:70:f9:8f:e2:d1:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=03ba73a5-e6e6-4861-9957-426219c6fbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:8b:4e:48:66:71:44:05:a2:77:e2:4e:e3: 12:7b:23:ad:bd:c9:78:2b:51:61:56:e2:53:03:ae: d4:56:74:36:4d:37:73:ef:5d:e5:34:45:29:d3:8d: b3:2e:18:a0:07:c6:9b:d4:0b:14:4e:05:54:8c:eb: b7:69:e7:86:51:c1:97:2d:5e:1b:9e:5d:e0:9d:45: 94:74:3e:7a:d1:7e:cc:b4:8e:3c:82:ac:a1:69:23: b2:95:4c:0f:b1:4a:79:1b:bc:eb:99:57:1a:55:29: 90:93:c2:8d:a8:1d:aa:08:de:8d:48:74:4d:ea:0d: 3f:72:a4:ea:90:b6:da:da:e8:5f:13:10:7c:40:5b: fe:9e:42:65:88:fa:e5:ee:30:b7:75:ea:72:b6:04: 5b:34:cd:2f:40:08:a8:76:80:0c:5c:0f:5c:25:86: 8d:1e:0c:36:a3:1d:0d:d3:d8:5a:43:5b:1d:b0:8f: ef:f3:03:67:7b:e9:87:fe:f5:d9:c2:7b:08:ab:08: 08:5f:10:9b:cb:55:78:0c:2e:37:1c:74:da:3d:0d: 24:5c:f0:27:d2:78:39:ae:98:42:53:26:f4:1d:d8: 80:00:69:5c:52:0d:fe:ec:df:5d:e1:05:d6:94:4b: d8:4b:ba:fd:a2:12:3f:ff:6d:32:16:cf:5c:40:9a: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C0:40:A4:B2:C3:82:39:45:73:45:1B:4D:A9:C8:4F:06:BC:0D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 167.17.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:75:0b:52:de:0d:ef:78:6f:dd:39:65:5e:ac:d2:70:f0:6a: bd:dd:02:7c:5f:08:b6:56:42:14:eb:c1:55:5d:48:30:fd:89: 16:63:bb:51:81:bb:e9:9a:cb:aa:11:93:b6:1c:0f:7e:7c:21: 23:cb:c9:45:f4:d7:93:40:6b:ce:c0:ca:ed:6e:a4:ab:69:d3: 38:d2:07:f0:b6:74:59:d4:ce:83:30:6d:96:01:af:45:66:f5: 0b:f8:46:7f:1f:7c:90:29:13:91:83:96:dd:9a:78:20:f4:f7: 03:65:d6:5f:4b:e9:76:17:bf:1b:41:82:04:a2:8d:76:85:8e: ec:72:22:32:5d:a9:f7:e5:9a:a2:d9:14:94:1e:0f:13:57:6e: b8:43:52:a4:25:28:95:7e:c4:ad:13:00:ea:f8:f9:cc:10:5f: 28:63:96:44:cb:b1:88:55:46:ce:39:62:9b:89:43:03:4e:ed: 37:6a:fb:f8:a8:dd:d8:b6:9a:fa:9c:2b:70:36:42:0c:f8:d2: d6:e5:16:00:4b:70:77:17:61:38:91:97:b0:64:3d:fe:0c:4a: a9:0f:02:c1:5a:1e:72:c6:0c:6e:28:4c:2d:93:74:02:b5:d7: c2:ac:c2:82:d3:dc:98:ad:de:75:b7:8a:4f:b7:d9:50:86:79: b5:01:8c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5ymfJHD5j+LRH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MDNiYTczYTUtZTZlNi00ODYxLTk5NTctNDI2MjE5YzZmYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AaLTkhmcUQFonfiTuMSeyOtvcl4K1FhVuJT A67UVnQ2TTdz713lNEUp042zLhigB8ab1AsUTgVUjOu3aeeGUcGXLV4bnl3gnUWU dD560X7MtI48gqyhaSOylUwPsUp5G7zrmVcaVSmQk8KNqB2qCN6NSHRN6g0/cqTq kLba2uhfExB8QFv+nkJliPrl7jC3depytgRbNM0vQAiodoAMXA9cJYaNHgw2ox0N 09haQ1sdsI/v8wNne+mH/vXZwnsIqwgIXxCby1V4DC43HHTaPQ0kXPAn0ng5rphC Uyb0HdiAAGlcUg3+7N9d4QXWlEvYS7r9ohI//20yFs9cQJp4aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/AQKSyw4I5RXNFG02pyE8GvA1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvOWQ3OTk1NmItMmYwOS0z MWExLTlhYWYtZmE2MmRlOWZlZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpxFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN1C1LeDe94b905ZV6s0nDwar3dAnxfCLZWQhTrwVVdSDD9iRZju1GB u+may6oRk7YcD358ISPLyUX015NAa87Ayu1upKtp0zjSB/C2dFnUzoMwbZYBr0Vm 9Qv4Rn8ffJApE5GDlt2aeCD09wNl1l9L6XYXvxtBggSijXaFjuxyIjJdqfflmqLZ FJQeDxNXbrhDUqQlKJV+xK0TAOr4+cwQXyhjlkTLsYhVRs45YpuJQwNO7Tdq+/io 3di2mvqcK3A2Qgz40tblFgBLcHcXYTiRl7BkPf4MSqkPAsFaHnLGDG4oTC2TdAK1 18KswoLT3Jit3nW3ik+32VCGebUBjLI= -----END CERTIFICATE-----Generated at Fri Oct 10 22:24:18 2025 by rpki-client