$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa File: 39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa (raw, json) Hash identifier: 8cCAi7hp3cabiWypZByD+qI4scW8SCmS/RNCr0jTOco= Subject key identifier: F5:90:EA:44:B0:E0:D6:BB:0B:B3:5F:E7:CA:EA:AC:9A:CE:A8:2B:B7 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584B715CA9C182E67162E640618C Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 21782 IP address blocks: 207.246.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a9:c1:82:e6:71:62:e6:40:61:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=bff4693f-07bd-42f8-8d43-a3caeeb1d58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:27:de:84:c3:39:68:18:62:b2:44:88:6b: 35:12:05:05:2a:ee:8b:90:87:1f:06:69:12:2a:1c: 38:74:39:ee:02:26:50:d4:54:d0:1a:4b:4f:ed:a2: e2:50:bc:58:8b:05:b5:00:b3:a1:65:c9:60:66:74: e9:b5:ca:f1:58:4e:e3:02:d9:b1:fb:c1:c5:fc:ca: 42:2a:04:a2:c1:a8:7d:05:45:1a:db:35:93:b2:3c: 0d:06:cf:06:89:a0:21:ee:40:c1:88:30:30:74:df: 51:96:98:4d:aa:55:02:77:2f:c9:1d:74:79:01:81: bd:88:c1:43:6e:25:2e:30:cc:9f:08:54:a9:62:ca: 56:aa:4c:44:48:8b:40:f2:2b:e7:e4:14:29:9a:e6: 28:2b:ba:39:f5:e8:87:da:e4:97:db:c1:93:01:cd: 79:24:48:b4:c6:56:5d:59:dd:6e:f4:bb:10:ee:23: 69:05:dd:f9:ef:ea:53:76:72:28:12:4d:ab:ce:07: a3:f9:57:f2:1c:51:9b:cc:f3:bb:33:21:cf:74:22: dc:1a:7a:8b:34:f1:84:29:18:2b:d9:60:ac:e5:ad: 16:43:70:58:ae:eb:ef:7f:9d:2c:66:d0:2f:13:0a: 69:b3:1f:17:9a:56:ff:c0:9e:71:ad:39:7e:06:58: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:EA:44:B0:E0:D6:BB:0B:B3:5F:E7:CA:EA:AC:9A:CE:A8:2B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 207.246.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ca:8b:13:6c:6e:20:dd:ca:6c:16:0a:ca:a4:17:11:ab:dd: b8:6d:7c:3c:1e:fa:f0:90:79:10:ff:3e:b4:c8:22:e3:1d:99: f9:39:a3:69:b4:4d:68:a5:92:dd:a1:62:98:cd:1d:52:72:04: 9e:0b:93:c6:6e:ca:6b:9a:89:dd:ef:24:18:59:bd:fb:1e:26: c7:f4:50:f2:b0:c9:6f:73:26:39:f8:d9:66:59:10:79:a0:68: 7d:8f:11:1a:49:b7:b0:93:83:d9:14:b7:bc:da:54:7e:60:57: 6e:1f:09:35:29:15:60:9e:94:fb:4b:e6:28:b7:2a:66:d1:74: 17:6e:4c:9c:98:44:f9:96:d9:c1:3d:89:8a:56:5a:05:de:1b: b2:2f:95:5d:c2:aa:ac:b3:6c:83:85:d6:0f:6f:2d:e4:35:0d: 98:93:04:6c:23:f4:34:27:b0:e7:3f:f1:2c:2f:ec:70:7d:0b: ef:a7:fc:65:5e:01:41:2d:55:9d:87:92:c5:2f:09:c6:82:1b: 38:43:0b:6d:75:61:af:11:63:e2:38:39:cc:fb:72:83:f0:55: 1e:5a:bb:a8:dd:17:d3:9d:f8:58:ff:ca:61:9f:e3:49:22:97: 44:45:5e:06:24:76:d2:7b:24:6c:50:e3:81:1f:78:0f:a9:ca: a7:fe:71:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKnBguZxYuZAYYwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmZmNDY5M2YtMDdiZC00MmY4LThkNDMtYTNjYWVlYjFkNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLgn3oTDOWgYYrJEiGs1EgUFKu6LkIcfBmkS Khw4dDnuAiZQ1FTQGktP7aLiULxYiwW1ALOhZclgZnTptcrxWE7jAtmx+8HF/MpC KgSiwah9BUUa2zWTsjwNBs8GiaAh7kDBiDAwdN9RlphNqlUCdy/JHXR5AYG9iMFD biUuMMyfCFSpYspWqkxESItA8ivn5BQpmuYoK7o59eiH2uSX28GTAc15JEi0xlZd Wd1u9LsQ7iNpBd357+pTdnIoEk2rzgej+VfyHFGbzPO7MyHPdCLcGnqLNPGEKRgr 2WCs5a0WQ3BYruvvf50sZtAvEwppsx8Xmlb/wJ5xrTl+BlhLSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWQ6kSw4Na7C7Nf58rqrJrOqCu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMzljMmNjNzctYWUwYy0z OTMxLThmMmEtMDA1ZDU5N2VjODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz/bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3KixNsbiDdymwWCsqkFxGr3bhtfDwe+vCQeRD/PrTIIuMdmfk5o2m0 TWilkt2hYpjNHVJyBJ4Lk8Zuymuaid3vJBhZvfseJsf0UPKwyW9zJjn42WZZEHmg aH2PERpJt7CTg9kUt7zaVH5gV24fCTUpFWCelPtL5ii3KmbRdBduTJyYRPmW2cE9 iYpWWgXeG7IvlV3CqqyzbIOF1g9vLeQ1DZiTBGwj9DQnsOc/8Swv7HB9C++n/GVe AUEtVZ2HksUvCcaCGzhDC211Ya8RY+I4Ocz7coPwVR5au6jdF9Od+Fj/ymGf40ki l0RFXgYkdtJ7JGxQ44EfeA+pyqf+cZ4= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:23 2025 by rpki-client