$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0cee6bc8-cd9f-30dd-afa2-5eb756f74fa1.roa File: 0cee6bc8-cd9f-30dd-afa2-5eb756f74fa1.roa (raw, json) Hash identifier: CRLScetX8ycMk6T2RkJ1j9DZs94WIqLmHVjK8YBB3j4= Subject key identifier: 60:86:88:B0:0A:1F:AD:08:F3:3B:F9:09:A5:CE:EA:A6:9E:14:4E:74 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B5C147985D7CF955B9099DCC0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0cee6bc8-cd9f-30dd-afa2-5eb756f74fa1.roa Signing time: Mon 29 Sep 2025 22:03:19 +0000 ROA not before: Mon 29 Sep 2025 22:03:19 +0000 ROA not after: Sun 28 Dec 2025 23:03:19 +0000 asID: 62731 IP address blocks: 192.31.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:14:79:85:d7:cf:95:5b:90:99:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 29 22:03:19 2025 GMT Not After : Dec 28 23:03:19 2025 GMT Subject: CN=aaca3287-84ab-4216-b265-6c40af24183d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:2c:40:68:2b:fb:24:4c:d0:76:93:5f:b9: 8a:77:58:e7:d4:f8:85:e4:ee:cc:8d:8e:a6:82:d8: 99:96:5b:ec:fa:de:43:27:57:ab:29:90:0d:9c:ed: d0:4e:cb:f5:14:77:42:5a:70:04:2b:63:f6:03:d3: 40:f8:ee:59:3f:8a:af:0f:9d:b2:3a:0f:6d:ee:55: 0c:13:4f:4f:e9:3e:56:3c:6e:f8:87:c5:e7:36:44: 52:a2:2d:a5:4b:a9:f9:b5:14:a3:be:4c:f2:72:f9: 73:9d:ec:42:e2:06:59:a6:23:47:4a:27:15:f8:ad: 11:c8:df:a4:9b:0a:87:94:9f:bd:d4:95:9a:5b:53: 3b:e5:83:ac:87:0d:bf:17:37:fd:fe:0e:de:40:fe: f9:50:a6:f3:18:d3:e7:d5:59:01:52:48:89:e1:88: d6:6a:d9:fd:95:b9:7e:1d:3a:9b:7d:bc:5a:a6:1b: c1:66:2d:6b:ef:ca:7f:15:c7:61:33:8e:b7:34:2f: d4:f4:71:93:2e:1b:59:2d:80:da:71:7d:a9:a7:58: a0:7e:f7:96:84:02:eb:ac:df:17:a8:37:18:f9:56: 0c:67:6d:1c:5a:95:61:25:19:57:70:72:6b:ca:49: 16:29:7a:43:89:2c:36:e6:72:e1:e5:fb:2a:f1:d1: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:88:B0:0A:1F:AD:08:F3:3B:F9:09:A5:CE:EA:A6:9E:14:4E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0cee6bc8-cd9f-30dd-afa2-5eb756f74fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:90:a0:2e:ea:e6:2f:31:2a:d2:a6:c0:b6:30:ff:7d:58:08: 52:9b:09:b1:cd:3b:66:3f:97:6e:40:96:25:23:6b:87:27:06: 9d:87:28:4d:8c:3f:c3:dc:aa:d0:d2:21:87:02:fb:6a:05:12: 19:5f:45:d1:96:d6:d1:64:72:5c:35:c0:0f:54:92:36:e3:c3: ee:53:28:30:73:df:db:53:25:a0:8b:54:05:39:d5:b2:3c:35: 27:79:e8:5e:78:e4:69:f1:ef:8f:c4:13:f1:38:78:78:d8:fd: 88:ef:8b:3d:82:a2:72:93:75:15:df:36:94:fc:ca:97:ae:a2: 4d:17:86:93:45:96:10:85:56:d0:f4:8b:57:bd:54:14:88:85: ad:39:34:1f:2e:c2:92:87:f1:56:77:12:43:34:d4:2a:67:b9: 63:f0:f2:57:ff:64:e4:90:5c:a9:11:8b:b3:5d:7a:09:c1:ba: bf:58:49:f1:34:6c:cb:42:5e:b8:73:c8:e3:0d:9a:05:87:ff: ba:5e:1b:d6:3d:c7:98:fb:66:bf:50:52:fb:5f:ed:f5:54:53: b0:e1:14:5a:9d:68:8e:38:ae:e9:92:04:e7:62:ed:0e:87:5e: 82:7a:a0:fc:b3:b7:5c:47:a3:06:8b:97:44:22:69:bf:3b:45: 9a:55:a0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcFHmF18+VW5CZ3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyOTIyMDMxOVoXDTI1MTIyODIzMDMxOVowLzEtMCsGA1UEAxMk YWFjYTMyODctODRhYi00MjE2LWIyNjUtNmM0MGFmMjQxODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24IsQGgr+yRM0HaTX7mKd1jn1PiF5O7MjY6m gtiZllvs+t5DJ1erKZANnO3QTsv1FHdCWnAEK2P2A9NA+O5ZP4qvD52yOg9t7lUM E09P6T5WPG74h8XnNkRSoi2lS6n5tRSjvkzycvlznexC4gZZpiNHSicV+K0RyN+k mwqHlJ+91JWaW1M75YOshw2/Fzf9/g7eQP75UKbzGNPn1VkBUkiJ4YjWatn9lbl+ HTqbfbxaphvBZi1r78p/FcdhM463NC/U9HGTLhtZLYDacX2pp1igfveWhALrrN8X qDcY+VYMZ20cWpVhJRlXcHJrykkWKXpDiSw25nLh5fsq8dEXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCGiLAKH60I8zv5CaXO6qaeFE50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvMGNlZTZiYzgtY2Q5Zi0z MGRkLWFmYTItNWViNzU2Zjc0ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6QoC7q5i8xKtKmwLYw/31YCFKbCbHNO2Y/l25AliUja4cnBp2HKE2M P8PcqtDSIYcC+2oFEhlfRdGW1tFkclw1wA9Ukjbjw+5TKDBz39tTJaCLVAU51bI8 NSd56F545Gnx74/EE/E4eHjY/Yjviz2ConKTdRXfNpT8ypeuok0XhpNFlhCFVtD0 i1e9VBSIha05NB8uwpKH8VZ3EkM01CpnuWPw8lf/ZOSQXKkRi7NdegnBur9YSfE0 bMtCXrhzyOMNmgWH/7peG9Y9x5j7Zr9QUvtf7fVUU7DhFFqdaI44rumSBOdi7Q6H XoJ6oPyzt1xHowaLl0Qiab87RZpVoLw= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:10 2025 by rpki-client