$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa File: d11d7e2d-3067-3749-a2e7-fb3533597efa.roa (raw, json) Hash identifier: pjLWaq6i/7D9qN/zwsXGa4TzcDu/jptQ8PR9pk1yc+o= Subject key identifier: 95:14:A8:86:1B:A8:47:C7:19:EB:63:EE:4E:DF:D0:23:40:CB:8B:0B Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584B127163CD4830C8C4245F8800 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 21782 IP address blocks: 64.127.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:63:cd:48:30:c8:c4:24:5f:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=04964a1d-fef1-4eb1-a941-ae7be5098ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:c9:56:aa:d3:26:76:fd:32:5c:6d:49:b7: cf:ee:6a:19:41:d0:0f:26:56:fe:cd:31:b1:00:4c: 03:cd:91:54:8e:40:73:d3:8b:f3:fb:c9:22:d3:94: c3:a5:38:54:4e:d2:7f:5d:27:ed:e3:c8:e9:45:dd: 89:00:c4:82:d8:a1:0f:c1:cf:6d:3c:2f:f7:c7:e5: 3f:d8:22:0a:66:4d:7c:f3:51:59:37:b0:e4:bd:d7: 95:8f:58:2d:91:8a:d4:f2:85:38:b9:e7:7a:fa:d4: b0:04:64:84:72:0c:dd:ba:0c:a4:de:cf:68:d1:03: 52:d1:93:cf:be:53:b0:f7:18:ac:8c:be:09:8a:d2: ed:85:20:2c:54:1f:4f:bf:5e:d7:5e:e9:71:30:45: 3e:85:cf:c6:5b:e7:37:69:ea:8e:f5:da:75:d6:53: ef:11:10:25:42:10:d2:c1:39:9a:77:74:bb:1d:f3: 5f:0c:f1:95:9b:fd:2c:19:ce:94:36:38:18:ec:e1: 40:1d:15:07:c6:cc:94:de:7d:dd:ae:f5:ed:50:bf: e3:33:71:1f:0f:33:30:b3:98:07:11:21:b8:69:23: 7f:52:3e:a8:96:30:c3:f1:67:8c:1a:cc:ee:a5:a2: f0:6d:29:be:39:b5:ed:99:4d:d2:cf:85:c8:7a:f9: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:14:A8:86:1B:A8:47:C7:19:EB:63:EE:4E:DF:D0:23:40:CB:8B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 64.127.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f5:01:f3:1f:21:bc:f8:71:26:60:c0:a8:5e:14:b8:86:23: 84:25:a3:f7:df:89:8a:60:41:ea:25:06:ce:f7:a2:43:43:df: d7:81:be:1c:3e:38:20:65:e5:1c:8a:f2:60:b3:ea:78:5a:70: d3:24:33:bd:6c:1c:cb:18:cc:14:4a:46:5c:8b:6d:e5:d3:15: c3:e5:be:be:7b:4e:9a:03:1a:cd:59:25:0c:d4:b0:06:f0:e4: 9a:f8:d6:5c:d6:15:ed:ef:af:13:b0:9b:1e:2b:c5:23:31:36: 6f:2d:7c:fd:61:f8:03:d7:91:49:91:a7:77:4a:22:0c:be:27: c9:f9:54:83:d1:56:b7:03:2b:57:52:fa:21:87:f6:5d:b5:1a: da:aa:ff:49:20:33:62:26:e6:0f:75:ac:e6:2c:c0:be:04:ea: 4e:6b:62:ab:8d:d5:31:c4:88:ce:74:7e:2e:8b:27:64:28:7b: e5:86:57:16:5a:5d:f1:6f:64:57:ab:99:42:97:d9:42:a3:c4: 9f:1d:d1:e0:39:1a:29:00:a6:12:0f:91:59:01:47:d4:57:da: 5a:14:72:38:41:63:38:32:82:7a:80:04:de:9e:c1:08:6e:c9: 9d:40:e9:7c:82:3d:2d:cd:b5:b3:36:4d:28:1d:d7:97:f6:6d: 15:66:5b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWPNSDDIxCRfiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk MDQ5NjRhMWQtZmVmMS00ZWIxLWE5NDEtYWU3YmU1MDk4YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnabJVqrTJnb9MlxtSbfP7moZQdAPJlb+zTGx AEwDzZFUjkBz04vz+8ki05TDpThUTtJ/XSft48jpRd2JAMSC2KEPwc9tPC/3x+U/ 2CIKZk1881FZN7DkvdeVj1gtkYrU8oU4ued6+tSwBGSEcgzdugyk3s9o0QNS0ZPP vlOw9xisjL4JitLthSAsVB9Pv17XXulxMEU+hc/GW+c3aeqO9dp11lPvERAlQhDS wTmad3S7HfNfDPGVm/0sGc6UNjgY7OFAHRUHxsyU3n3drvXtUL/jM3EfDzMws5gH ESG4aSN/Uj6oljDD8WeMGszupaLwbSm+ObXtmU3Sz4XIevlHOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUUqIYbqEfHGetj7k7f0CNAy4sLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvZDExZDdlMmQtMzA2Ny0z NzQ5LWEyZTctZmIzNTMzNTk3ZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQH+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB71AfMfIbz4cSZgwKheFLiGI4Qlo/ffiYpgQeolBs73okND39eBvhw+ OCBl5RyK8mCz6nhacNMkM71sHMsYzBRKRlyLbeXTFcPlvr57TpoDGs1ZJQzUsAbw 5Jr41lzWFe3vrxOwmx4rxSMxNm8tfP1h+APXkUmRp3dKIgy+J8n5VIPRVrcDK1dS +iGH9l21Gtqq/0kgM2Im5g91rOYswL4E6k5rYquN1THEiM50fi6LJ2Qoe+WGVxZa XfFvZFermUKX2UKjxJ8d0eA5GikAphIPkVkBR9RX2loUcjhBYzgygnqABN6ewQhu yZ1A6XyCPS3NtbM2TSgd15f2bRVmW9Q= -----END CERTIFICATE-----Generated at Sat Oct 11 05:51:07 2025 by rpki-client