$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa File: 2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa (raw, json) Hash identifier: I73sPl0iiqT3BWZ+1NkHDwy9vqV68wWHMUVjN+jGq4s= Subject key identifier: 0A:DC:76:1F:68:E6:57:03:2D:51:5D:D4:79:7F:A1:E5:BE:B4:8A:D8 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584B0746B5BB9952268A539F73C0 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 17044 IP address blocks: 170.200.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b5:bb:99:52:26:8a:53:9f:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=15aa2bd3-8cc8-4118-9449-8b9a833d0a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a8:22:23:1a:51:95:94:ee:61:41:ba:ab:ae: d1:67:47:ef:97:c3:90:1c:d2:3c:1e:b8:d2:7c:21: 1d:f6:90:86:9d:7f:45:01:9f:a3:f2:e2:6b:ff:2f: a4:26:a4:c1:37:98:08:e7:cc:a8:58:8e:b6:18:94: c7:18:af:13:49:c6:6d:92:94:8f:45:2b:68:5b:b3: 8a:dc:32:33:65:fd:d8:d1:78:08:a8:78:ad:5c:49: 07:a2:ba:8f:61:1b:8f:bd:b2:98:6d:e6:5d:0d:eb: ed:0a:82:43:63:6d:04:85:29:6e:58:cd:5e:c5:0d: 8d:3c:3a:85:82:c4:6f:bb:79:d3:5e:a0:0d:50:8e: 39:1c:c8:fc:77:30:17:f9:d3:2a:ea:8b:68:2a:2c: 8f:f6:10:2a:ca:33:97:ec:ba:e0:c8:72:d4:9e:44: c1:18:f7:6a:bc:23:6d:ff:e1:fe:69:3d:c0:20:fa: cb:6f:b9:10:9b:53:49:64:da:51:8a:bc:4e:fb:0b: 7c:4b:66:6f:71:f0:ce:48:b8:8a:56:7c:b1:f2:de: 4e:88:c6:d7:e9:1b:ad:45:c3:4f:da:41:68:98:92: 14:22:41:31:4d:8c:e6:d8:60:10:13:31:fe:4c:17: 6c:47:5f:d4:2a:5f:74:15:5a:78:cf:43:d0:8a:b6: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DC:76:1F:68:E6:57:03:2D:51:5D:D4:79:7F:A1:E5:BE:B4:8A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ff:28:86:c8:e0:ed:59:9b:e1:21:24:f8:45:e0:61:2a:6a: 7d:08:e4:1b:ee:78:70:a7:9c:24:ef:15:99:b7:6d:ab:14:85: 09:f5:03:f4:6b:a2:75:d9:4f:15:0a:74:4a:9c:7a:4d:91:c7: ac:4d:79:a4:39:0b:4b:00:43:91:1c:df:77:f3:ce:82:35:57: ed:be:ed:56:07:56:63:ce:e1:d7:f2:58:68:c7:3d:00:95:66: 7b:30:3f:d6:cd:c1:95:0f:6d:99:c3:00:f2:41:bd:ad:d9:db: d8:3f:54:72:b5:0f:c7:0b:42:d4:85:a9:36:be:91:7f:b4:8c: 9e:8a:ee:01:56:ab:c6:24:d2:35:27:de:ca:d0:56:e1:c4:ce: d5:ea:13:fa:0a:3f:bd:8b:48:22:33:f6:65:e8:28:a3:9f:55: 5d:2c:1c:ba:45:f6:5f:3c:97:76:47:d1:c8:ca:50:f7:2f:d9: 36:f8:bd:9f:83:93:0a:43:cd:ab:cc:88:e5:e6:d1:c2:74:45: 01:37:c4:34:03:02:c8:c5:43:88:a8:8d:4d:f1:7e:e7:0b:27: 9d:54:ae:89:b1:50:05:38:01:9a:a8:08:5f:db:6e:67:49:d1: e8:fb:4e:49:75:6f:4e:89:2e:bb:db:66:3f:63:e8:72:65:fa: 5d:a5:27:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrW7mVImilOfc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MTVhYTJiZDMtOGNjOC00MTE4LTk0NDktOGI5YTgzM2QwYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96giIxpRlZTuYUG6q67RZ0fvl8OQHNI8HrjS fCEd9pCGnX9FAZ+j8uJr/y+kJqTBN5gI58yoWI62GJTHGK8TScZtkpSPRStoW7OK 3DIzZf3Y0XgIqHitXEkHorqPYRuPvbKYbeZdDevtCoJDY20EhSluWM1exQ2NPDqF gsRvu3nTXqANUI45HMj8dzAX+dMq6otoKiyP9hAqyjOX7LrgyHLUnkTBGPdqvCNt /+H+aT3AIPrLb7kQm1NJZNpRirxO+wt8S2ZvcfDOSLiKVnyx8t5OiMbX6RutRcNP 2kFomJIUIkExTYzm2GAQEzH+TBdsR1/UKl90FVp4z0PQiraxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArcdh9o5lcDLVFd1Hl/oeW+tIrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMmZmZTdmYTMtZTNlOS0z ZTkyLWI5MGUtMjcwNDcxYTg5ZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz/KIbI4O1Zm+EhJPhF4GEqan0I5BvueHCnnCTvFZm3basUhQn1A/Rr onXZTxUKdEqcek2Rx6xNeaQ5C0sAQ5Ec33fzzoI1V+2+7VYHVmPO4dfyWGjHPQCV ZnswP9bNwZUPbZnDAPJBva3Z29g/VHK1D8cLQtSFqTa+kX+0jJ6K7gFWq8Yk0jUn 3srQVuHEztXqE/oKP72LSCIz9mXoKKOfVV0sHLpF9l88l3ZH0cjKUPcv2Tb4vZ+D kwpDzavMiOXm0cJ0RQE3xDQDAsjFQ4iojU3xfucLJ51UromxUAU4AZqoCF/bbmdJ 0ej7Tkl1b06JLrvbZj9j6HJl+l2lJ7M= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:53 2025 by rpki-client