$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa File: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json) Hash identifier: FIZ3xJMvnPKUekYvK3IflROLqHYHvYvdFrSm+5fWMLU= Subject key identifier: 1D:7C:2E:08:E3:CC:02:F1:86:50:37:C5:4E:EC:1F:04:F3:D4:D7:E3 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584B328C4463AB268F00485C3DC0 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 399521 IP address blocks: 172.98.8.0/24 maxlen: 24 172.98.9.0/24 maxlen: 24 172.98.10.0/24 maxlen: 24 172.98.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:44:63:ab:26:8f:00:48:5c:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=64fb50e2-03a9-49da-80ae-b10e9dec4d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:9b:9f:f8:67:c0:54:1d:9c:fa:9f:92:a0: 09:63:b4:fb:20:99:72:5b:8b:7e:96:8f:08:c5:33: ea:42:0b:f1:f3:db:36:ce:c0:89:b2:97:36:13:9d: e1:1a:27:92:a4:1c:26:c9:26:a4:48:9e:1e:5f:67: a1:d3:41:86:ec:0c:23:26:f4:d3:83:eb:8c:53:33: 3a:80:a5:06:11:6d:72:88:aa:50:66:b2:65:1a:39: 8d:8a:30:c7:72:e6:e1:97:bd:bd:b1:b9:78:41:bf: b3:22:64:72:85:5f:21:8d:f1:51:e7:42:40:11:ab: 28:21:c8:9b:14:1e:3d:02:41:0a:bc:4b:f7:6f:32: b0:44:33:c3:99:33:bc:30:4a:8a:25:9a:62:84:f1: ea:e8:90:08:2d:5c:e2:23:bd:1e:d5:8b:8d:0b:31: e6:37:38:2b:15:fa:3b:bb:83:61:b4:f9:24:98:c0: 3c:78:09:5e:06:07:4e:dc:ef:f4:f2:db:cc:b0:8e: 8a:a5:5a:01:be:25:92:80:94:1b:59:8f:26:c3:ac: 05:53:64:38:c3:7f:4c:13:51:96:73:3e:e3:37:da: 85:26:92:98:d0:19:a9:5c:29:7c:da:97:cf:cb:75: 7f:8b:07:53:22:e1:4c:64:61:be:42:ae:a1:af:90: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7C:2E:08:E3:CC:02:F1:86:50:37:C5:4E:EC:1F:04:F3:D4:D7:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: 172.98.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b4:b0:a7:07:83:5f:ab:ba:dd:58:8d:35:e5:61:8e:b0:b3: f9:6d:f4:d0:4f:30:d2:2d:39:42:e7:d8:c8:fb:d0:44:8f:2a: e7:03:50:f8:69:b5:b1:82:32:f4:07:b1:d3:f2:e2:9f:95:12: 7a:ad:82:f3:b3:f2:f8:e6:02:34:5f:ed:dc:55:43:f2:a7:c0: eb:91:a2:85:0a:bb:9d:aa:e2:d7:a5:bd:49:44:0f:39:fe:ba: 59:e2:c9:fe:ee:b7:01:16:18:8c:f6:f0:5d:5f:53:53:7c:f3: 52:d0:b5:27:42:39:54:75:e1:27:82:d2:e0:61:b9:a3:e1:ca: 11:17:3c:8d:01:d1:e1:30:17:5e:f2:b5:a9:c5:1e:6e:a9:a8: 2a:04:7f:7a:a9:08:fb:4f:4f:34:11:d4:91:cb:cc:a6:0b:87: c8:16:2a:89:1e:8d:cb:85:48:c5:eb:4f:06:37:9d:7a:5d:7e: 5e:da:89:ba:4f:17:70:6c:d7:11:74:ba:26:d4:46:c0:e7:3b: 28:b1:57:ca:8d:3a:8d:d3:09:3f:cd:c4:d7:5a:b2:56:f0:8c: 35:e5:e5:8c:31:1d:ab:ce:ad:1c:82:a3:b9:7c:6f:38:a6:de: 46:0f:54:a9:42:75:83:78:e4:6f:ec:01:c6:2f:9c:6f:de:59: 01:82:20:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjERjqyaPAEhcPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NjRmYjUwZTItMDNhOS00OWRhLTgwYWUtYjEwZTlkZWM0ZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoybn/hnwFQdnPqfkqAJY7T7IJlyW4t+lo8I xTPqQgvx89s2zsCJspc2E53hGieSpBwmySakSJ4eX2eh00GG7AwjJvTTg+uMUzM6 gKUGEW1yiKpQZrJlGjmNijDHcubhl729sbl4Qb+zImRyhV8hjfFR50JAEasoIcib FB49AkEKvEv3bzKwRDPDmTO8MEqKJZpihPHq6JAILVziI70e1YuNCzHmNzgrFfo7 u4NhtPkkmMA8eAleBgdO3O/08tvMsI6KpVoBviWSgJQbWY8mw6wFU2Q4w39ME1GW cz7jN9qFJpKY0BmpXCl82pfPy3V/iwdTIuFMZGG+Qq6hr5DO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB18LgjjzALxhlA3xU7sHwTz1NfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvZWY1YjRmODQtZmNkOS0z ZTVmLWI5ODYtNjExNGJjMWVmMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES0sKcHg1+rut1YjTXlYY6ws/lt9NBPMNItOULn2Mj70ESPKucDUPhp tbGCMvQHsdPy4p+VEnqtgvOz8vjmAjRf7dxVQ/KnwOuRooUKu52q4telvUlEDzn+ ulniyf7utwEWGIz28F1fU1N881LQtSdCOVR14SeC0uBhuaPhyhEXPI0B0eEwF17y tanFHm6pqCoEf3qpCPtPTzQR1JHLzKYLh8gWKokejcuFSMXrTwY3nXpdfl7aibpP F3Bs1xF0uibURsDnOyixV8qNOo3TCT/NxNdaslbwjDXl5YwxHavOrRyCo7l8bzim 3kYPVKlCdYN45G/sAcYvnG/eWQGCIC8= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:46 2025 by rpki-client