$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa File: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (raw, json) Hash identifier: 1aRDQY4jv7txRWFlopnAqESIYkDkqhAJNRXaKmz1+bM= Subject key identifier: 25:79:BC:DE:CD:7D:8B:50:66:BE:1C:CE:1C:66:1C:35:EE:EA:00:39 Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584B59A1DDEB58B08EDD56EA6600 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 395379 IP address blocks: 136.228.64.0/19 maxlen: 19 143.223.112.0/20 maxlen: 20 161.129.192.0/20 maxlen: 20 2604:e340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:dd:eb:58:b0:8e:dd:56:ea:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=06e9bf04-c1bf-4c16-b5d6-0989c5a8d6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:ba:3f:48:df:c3:34:88:a5:09:db:41:65: cd:b2:7a:50:10:91:7e:bb:91:78:97:83:a6:60:d8: 45:76:bb:02:5e:24:48:19:70:0a:40:87:66:67:10: 09:10:d1:16:07:cb:7b:4e:78:89:fb:4f:f7:d5:44: 95:34:cd:94:5f:97:80:c4:71:0b:ae:68:2e:71:f9: 49:ae:df:29:00:36:33:7e:97:0c:9b:6b:a8:70:49: 19:39:e1:43:e1:00:62:78:12:77:09:55:a8:fa:ca: 5a:75:f4:f0:e5:ea:96:50:6e:74:ce:b8:23:25:58: f7:97:ed:98:ac:49:2f:24:73:8b:b2:56:71:1f:e7: a0:cf:d2:55:95:26:cf:ee:74:1c:81:7f:1a:50:ee: 79:1a:dc:01:f2:d1:a9:e3:83:14:2f:0b:a0:1b:66: e0:dc:e8:46:ff:6c:30:6a:43:c8:71:38:ab:a2:35: fc:68:32:30:98:93:43:96:7d:b5:9a:95:f1:32:9d: 77:91:2a:bd:2c:cc:39:37:c6:64:36:1b:e0:d6:ba: ef:57:ef:4d:80:4c:74:0f:23:d6:b8:44:c7:7e:fb: 1b:88:78:e2:b1:4e:41:dd:f7:b0:fb:61:0c:8b:34: 55:4f:ac:7b:8a:48:1e:0a:bb:6b:35:e6:ea:64:04: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:79:BC:DE:CD:7D:8B:50:66:BE:1C:CE:1C:66:1C:35:EE:EA:00:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.64.0/19 143.223.112.0/20 161.129.192.0/20 IPv6: 2604:e340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:54:f4:08:45:7c:66:de:7c:b8:f6:c2:bb:20:9c:b7:b9:45: 3c:1b:7a:e7:a4:17:a1:52:c3:9a:a4:62:14:18:03:a5:89:2d: ee:4e:b8:c6:a8:f3:fe:58:91:f5:5d:08:3e:ca:20:90:67:0c: 45:31:d7:71:43:a4:53:69:ac:4d:7a:81:60:a9:dd:61:b8:ca: f8:b0:4d:b3:ca:79:fa:7c:2e:67:12:54:c8:11:d7:8e:75:36: c9:55:45:7a:9d:eb:33:ab:e9:4e:56:d7:db:d4:aa:ce:37:68: 18:e1:fc:98:de:13:ff:64:bb:a1:00:82:3f:5e:55:31:38:4f: 4f:61:10:5a:76:f2:91:7a:e2:87:98:4b:09:3c:a1:19:ea:80: e1:63:75:86:16:1b:35:ff:54:4f:85:14:ca:b3:05:c5:ba:af: e7:13:91:dd:65:ad:e1:c6:aa:e9:a2:8b:c3:a7:d8:6b:f8:7e: 58:c5:e1:b6:ff:50:ff:71:75:74:8b:8c:af:c4:2e:a0:5e:db: 74:d0:11:c7:95:f8:71:53:90:fb:25:94:cf:56:b2:09:9b:84: 9f:25:21:ed:17:f6:d3:f3:7d:f0:7f:36:1b:4b:9e:cf:8c:84: bf:b7:6f:e7:ea:ac:d9:2c:3b:90:64:c6:23:f6:33:b0:40:51: d7:d6:3f:2d -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEtZod3rWLCO3VbqZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk MDZlOWJmMDQtYzFiZi00YzE2LWI1ZDYtMDk4OWM1YThkNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRC6P0jfwzSIpQnbQWXNsnpQEJF+u5F4l4Om YNhFdrsCXiRIGXAKQIdmZxAJENEWB8t7TniJ+0/31USVNM2UX5eAxHELrmgucflJ rt8pADYzfpcMm2uocEkZOeFD4QBieBJ3CVWo+spadfTw5eqWUG50zrgjJVj3l+2Y rEkvJHOLslZxH+egz9JVlSbP7nQcgX8aUO55GtwB8tGp44MULwugG2bg3OhG/2ww akPIcTirojX8aDIwmJNDln21mpXxMp13kSq9LMw5N8ZkNhvg1rrvV+9NgEx0DyPW uETHfvsbiHjisU5B3few+2EMizRVT6x7ikgeCrtrNebqZAS7wQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFCV5vN7NfYtQZr4czhxmHDXu6gA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMzVkZDM4ZGEtZWYyYy0z YWEyLTk2NWQtMDk3MzkwNDNjYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFiORAAwQE j99wAwQEoYHAMA0EAgACMAcDBQAmBONAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEhU9AhFfGbefLj2wrsg nLe5RTwbeuekF6FSw5qkYhQYA6WJLe5OuMao8/5YkfVdCD7KIJBnDEUx13FDpFNp rE16gWCp3WG4yviwTbPKefp8LmcSVMgR1451NslVRXqd6zOr6U5W19vUqs43aBjh /JjeE/9ku6EAgj9eVTE4T09hEFp28pF64oeYSwk8oRnqgOFjdYYWGzX/VE+FFMqz BcW6r+cTkd1lreHGqumii8On2Gv4fljF4bb/UP9xdXSLjK/ELqBe23TQEceV+HFT kPsllM9WsgmbhJ8lIe0X9tPzffB/NhtLns+MhL+3b+fqrNksO5BkxiP2M7BAUdfW Py0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:01 2025 by rpki-client