$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa File: 0e4645bc-c3fe-36b8-8d81-10da41797a09.roa (raw, json) Hash identifier: aJHJJeek2uTMlLVBoBXggYCnjpa/J85n8XXLX9uLSUk= Subject key identifier: 42:7A:CF:58:A0:0D:4B:DA:04:5A:54:60:05:21:BE:7E:8A:87:25:AE Certificate issuer: /CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17 Certificate serial: 010D0C9F4328584B05E1435731FA7B20479F2B80 Authority key identifier: D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 46572 IP address blocks: 139.60.32.0/22 maxlen: 24 199.184.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:43:57:31:fa:7b:20:47:9f:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17 Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=9c53b4ac-59f9-4a10-9b84-c28affe5f2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:a6:1a:b5:b8:24:68:67:58:95:ce:58:96: 78:17:39:61:fb:56:68:b0:c5:0c:68:25:00:10:46: e8:85:79:80:69:19:45:1d:e7:58:c7:1f:95:6f:4a: db:73:16:fc:c7:f9:f2:6d:aa:02:bb:97:12:cd:99: 39:08:93:be:ae:2b:3c:aa:2f:f7:21:93:6b:31:66: 5d:ff:73:a3:00:74:b5:60:6c:33:37:cd:a5:f8:ba: 5f:67:ba:2a:5b:fe:86:af:6e:aa:bc:1b:84:22:18: a0:a2:94:8c:e5:07:73:7e:15:20:99:ba:93:c7:ae: 5b:ed:df:bb:4b:84:20:51:10:d6:f8:8e:eb:55:29: 3d:65:e6:0e:2b:96:80:29:9e:32:34:67:d9:71:61: 33:c7:00:05:1c:c2:fb:b1:3c:9e:ab:75:52:c7:6a: e5:c9:aa:cb:5d:8b:d4:63:50:e8:46:7d:b0:45:ed: de:16:47:69:8a:6d:e4:60:50:9b:21:84:8c:a4:80: 86:7e:b4:4c:61:48:a5:43:96:0d:c4:76:97:e4:e2: f1:de:6d:88:a2:72:50:df:3e:23:9c:6c:08:3f:b1: 47:8e:71:48:9b:bb:e8:ab:73:29:7b:6c:be:55:da: d6:c0:fd:38:80:eb:c4:07:d8:27:2b:05:4a:b1:63: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7A:CF:58:A0:0D:4B:DA:04:5A:54:60:05:21:BE:7E:8A:87:25:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl X509v3 Authority Key Identifier: keyid:D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer sbgp-ipAddrBlock: critical IPv4: 139.60.32.0/22 199.184.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3c:79:43:3d:98:42:87:15:07:ba:bb:de:3b:87:65:e1:26: 6c:db:fa:49:18:61:f6:bb:93:f6:99:7a:79:9b:01:40:49:fe: d6:6f:55:b6:3a:91:92:1e:6d:e9:26:0b:a2:ca:3f:79:14:ac: d9:87:17:23:03:28:d3:62:ef:34:d4:e3:63:7e:ec:77:d1:37: f7:5b:0f:55:54:9e:2a:8c:51:9a:bd:92:2f:a1:41:f6:27:90: b4:cb:af:da:ab:0c:4e:30:ed:8d:00:23:d0:fd:1f:d8:c6:ed: d3:09:ff:43:71:6e:6d:42:6e:da:b1:0f:8d:4e:02:3f:ba:04: be:76:3b:5f:1d:d5:fc:11:0b:3e:a5:d6:42:8f:7c:ba:2f:26: 9a:53:69:c8:b5:e7:12:8e:01:3d:fd:e1:ec:6b:3b:fd:14:e5: 05:35:5a:4c:f3:b0:63:f3:a2:ca:50:be:f3:64:16:70:7f:8a: 60:3e:71:aa:c4:d8:ab:52:f6:61:7f:0e:48:62:4c:b4:4d:fc: f4:d1:2d:59:de:45:b7:07:4b:50:30:bf:88:0d:89:1a:83:13: 9e:c5:49:9f:7b:b5:d8:14:72:f8:3f:b7:22:d6:ae:13:3a:dd: 43:49:52:c3:2e:a6:6f:fe:a5:e3:a7:a4:72:42:dc:fd:a1:4e: a5:38:51:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsF4UNXMfp7IEefK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFlZjRiMzgtYjVkYy00YjM3LTkwYjUtZWI5ZTI2MmJm YTE3MB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk OWM1M2I0YWMtNTlmOS00YTEwLTliODQtYzI4YWZmZTVmMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KamGrW4JGhnWJXOWJZ4Fzlh+1ZosMUMaCUA EEbohXmAaRlFHedYxx+Vb0rbcxb8x/nybaoCu5cSzZk5CJO+ris8qi/3IZNrMWZd /3OjAHS1YGwzN82l+LpfZ7oqW/6Gr26qvBuEIhigopSM5QdzfhUgmbqTx65b7d+7 S4QgURDW+I7rVSk9ZeYOK5aAKZ4yNGfZcWEzxwAFHML7sTyeq3VSx2rlyarLXYvU Y1DoRn2wRe3eFkdpim3kYFCbIYSMpICGfrRMYUilQ5YNxHaX5OLx3m2IonJQ3z4j nGwIP7FHjnFIm7voq3Mpe2y+VdrWwP04gOvEB9gnKwVKsWMpoQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEJ6z1igDUvaBFpUYAUhvn6KhyWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMWVm NGIzOC1iNWRjLTRiMzctOTBiNS1lYjllMjYyYmZhMTcvMGU0NjQ1YmMtYzNmZS0z NmI4LThkODEtMTBkYTQxNzk3YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDFlZjRiMzgtYjVkYy00YjM3LTkw YjUtZWI5ZTI2MmJmYTE3L2QxZWY0YjM4LWI1ZGMtNGIzNy05MGI1LWViOWUyNjJi ZmExNy5jcmwwHwYDVR0jBBgwFoAU0Y4/hEmYgtckosg/JONjCxYxYpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMWVmNGIzOC1iNWRjLTRiMzctOTBiNS1lYjll MjYyYmZhMTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizwgAwQD x7iAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC08eUM9mEKHFQe6u947h2XhJmzb+kkYYfa7k/aZenmbAUBJ /tZvVbY6kZIebekmC6LKP3kUrNmHFyMDKNNi7zTU42N+7HfRN/dbD1VUniqMUZq9 ki+hQfYnkLTLr9qrDE4w7Y0AI9D9H9jG7dMJ/0Nxbm1CbtqxD41OAj+6BL52O18d 1fwRCz6l1kKPfLovJppTaci15xKOAT394exrO/0U5QU1WkzzsGPzospQvvNkFnB/ imA+carE2KtS9mF/DkhiTLRN/PTRLVneRbcHS1Awv4gNiRqDE57FSZ97tdgUcvg/ tyLWrhM63UNJUsMupm/+peOnpHJC3P2hTqU4USw= -----END CERTIFICATE-----Generated at Fri Oct 10 16:09:11 2025 by rpki-client