$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa File: cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa (raw, json) Hash identifier: DT2dD0kiQkr+lm7f+bqeTYsk2aAeIfzt5NCJYY+qenw= Subject key identifier: F3:87:B2:97:1C:F8:D2:7F:B2:7B:DD:F0:15:0C:91:12:F1:3F:38:95 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584B127165CF2E53755AEE138400 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 21782 IP address blocks: 192.95.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:65:cf:2e:53:75:5a:ee:13:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=3bfb59e6-da67-4a10-85c1-0854291d1998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:fc:a7:c9:88:e5:9b:ac:33:9a:cb:13:6e: dc:2a:e2:59:d5:1e:88:02:76:7e:c8:1b:23:86:b5: 55:14:cc:f1:6e:14:0b:17:46:b3:81:90:cb:fe:cf: 9f:cd:28:b7:10:75:95:9c:3b:e8:44:04:56:34:7a: 2a:20:e4:b1:31:c5:2b:4e:a8:c4:1d:dd:e3:f5:08: 15:fd:1b:88:ab:20:13:4b:6b:5d:67:ef:94:e2:23: 3d:9e:92:31:c8:37:e9:d4:49:02:ae:5a:c1:13:75: 81:9d:22:ab:2e:1f:3f:ab:79:2d:89:aa:81:c2:5e: 12:91:67:cb:9f:b4:27:9e:e0:56:de:a3:b4:7f:10: 6f:51:eb:0c:54:e6:c8:4a:8f:d0:a0:07:a7:94:ac: 8a:4e:4a:ea:fb:7e:87:98:7f:22:2f:b8:b4:ef:ca: 10:d6:da:63:4a:9d:5f:49:64:07:5a:ef:15:26:d0: 75:20:9a:5e:21:fc:49:40:ec:70:a6:e8:b7:12:b6: 66:97:70:6a:db:1f:d1:fc:f7:54:d3:6c:a6:84:d6: e2:5e:2a:88:22:c6:be:4b:2a:94:51:a1:a9:3c:48: f3:86:95:24:3f:bc:93:81:ce:1c:17:4d:db:34:af: b2:45:ba:5b:02:18:ec:77:f2:21:0f:5b:73:3e:cb: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:87:B2:97:1C:F8:D2:7F:B2:7B:DD:F0:15:0C:91:12:F1:3F:38:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/cd31d2f4-0491-32e7-8b25-5cd58f9bc9c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 192.95.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d5:01:5c:87:d8:b8:d6:fe:01:bb:1f:34:13:04:a3:47:2e: 06:65:80:04:01:c9:5b:f1:1b:16:84:73:ce:42:b1:b7:53:82: 01:1c:c5:b5:39:2c:97:92:8e:9a:e4:e6:e8:91:16:ba:4d:9f: cf:ce:0a:cb:97:bd:46:cd:dd:27:13:81:c0:c4:80:5e:ae:dc: 73:bd:af:16:a4:06:fe:91:a9:51:f4:5b:cb:9b:53:55:99:72: a5:af:80:f7:76:fe:f9:1b:f9:2b:6e:30:f6:e4:52:5f:c0:4f: ab:bb:93:88:08:cd:45:2a:04:b5:a2:b9:f3:e1:ea:87:e0:38: 2f:a2:e9:98:f2:c0:15:a5:96:5c:84:58:cf:cd:2d:d1:eb:3b: d2:af:b9:3b:e2:81:bb:8c:fc:4c:50:15:ea:23:01:d0:0e:9d: a3:75:65:f7:a6:d5:5b:f1:f7:a0:d6:f1:8a:41:9e:7f:5f:83: 45:d5:32:a5:23:cb:3e:bd:eb:3e:92:10:a7:b0:5c:86:29:d6: 55:fa:7c:96:fa:27:1b:26:bf:2f:b0:2b:00:88:d4:ea:17:92: f8:c4:13:a0:93:81:20:4f:ac:35:37:bf:ec:18:aa:e7:56:e4: fe:83:d5:39:38:71:e5:71:7b:cd:3d:f7:c2:99:8c:4d:02:34: 02:9a:1a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWXPLlN1Wu4ThAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk M2JmYjU5ZTYtZGE2Ny00YTEwLTg1YzEtMDg1NDI5MWQxOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY/8p8mI5ZusM5rLE27cKuJZ1R6IAnZ+yBsj hrVVFMzxbhQLF0azgZDL/s+fzSi3EHWVnDvoRARWNHoqIOSxMcUrTqjEHd3j9QgV /RuIqyATS2tdZ++U4iM9npIxyDfp1EkCrlrBE3WBnSKrLh8/q3ktiaqBwl4SkWfL n7QnnuBW3qO0fxBvUesMVObISo/QoAenlKyKTkrq+36HmH8iL7i078oQ1tpjSp1f SWQHWu8VJtB1IJpeIfxJQOxwpui3ErZml3Bq2x/R/PdU02ymhNbiXiqIIsa+SyqU UaGpPEjzhpUkP7yTgc4cF03bNK+yRbpbAhjsd/IhD1tzPssGeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOHspcc+NJ/snvd8BUMkRLxPziVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvY2QzMWQyZjQtMDQ5MS0z MmU3LThiMjUtNWNkNThmOWJjOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwF9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHVAVyH2LjW/gG7HzQTBKNHLgZlgAQByVvxGxaEc85CsbdTggEcxbU5 LJeSjprk5uiRFrpNn8/OCsuXvUbN3ScTgcDEgF6u3HO9rxakBv6RqVH0W8ubU1WZ cqWvgPd2/vkb+StuMPbkUl/AT6u7k4gIzUUqBLWiufPh6ofgOC+i6ZjywBWlllyE WM/NLdHrO9KvuTvigbuM/ExQFeojAdAOnaN1Zfem1Vvx96DW8YpBnn9fg0XVMqUj yz696z6SEKewXIYp1lX6fJb6Jxsmvy+wKwCI1OoXkvjEE6CTgSBPrDU3v+wYqudW 5P6D1Tk4ceVxe80998KZjE0CNAKaGsM= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:14 2025 by rpki-client