$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa File: 6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa (raw, json) Hash identifier: CCkQMsKxtNVMFeJb5hmJkhCRgc9rzIsfEVywzTocgHg= Subject key identifier: A3:50:45:F1:2D:C8:01:A9:82:4D:E4:7D:66:99:52:05:3F:50:C6:B3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B66320611C6A06AD94133E5F0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 13576 IP address blocks: 208.53.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:06:11:c6:a0:6a:d9:41:33:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=400d977c-15dc-458a-9d5f-18f33befe49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:23:7b:fe:25:08:5b:39:36:01:a3:1b:6b: 07:d0:0e:18:1e:34:ae:c1:e8:53:65:ba:ef:45:55: f2:2f:9d:94:13:f8:0e:1d:c9:ae:e6:7d:43:41:db: 6e:7c:a8:eb:f4:6d:12:73:19:00:b5:75:b4:bb:7f: bb:e8:82:0e:17:7e:66:30:c6:b4:82:dd:45:f1:df: 3a:a9:ad:e7:02:80:b4:f0:5f:41:63:82:f9:28:2d: 66:c0:0d:79:99:87:3c:a3:17:4e:f5:4d:ba:67:59: 1c:25:7d:c2:d1:1f:fd:de:90:29:d4:6a:03:a6:df: bf:1f:54:47:0d:f2:d4:10:8b:09:4e:78:0a:ed:34: 1a:99:40:58:20:cb:36:15:d3:eb:68:e0:c9:d1:66: a8:79:bf:a1:b3:a5:9c:df:03:8d:01:5c:67:6f:5d: aa:23:08:df:57:3e:d1:af:79:7e:0f:ee:f4:65:66: ce:59:8a:c5:6b:c8:fb:7b:d7:7b:65:0e:07:e9:5c: f5:14:10:8d:a7:fe:fe:c7:77:fd:f6:bd:38:02:a5: 1b:88:10:43:ad:f4:65:c3:25:2d:cb:8e:77:92:ab: 4c:e6:35:8a:ee:3f:d8:28:8f:bb:15:22:c6:52:53: 81:04:c1:dd:2a:3e:6f:21:b1:bc:6f:37:20:e2:1c: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:45:F1:2D:C8:01:A9:82:4D:E4:7D:66:99:52:05:3F:50:C6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6a3cdf50-0115-3be3-8a15-f5ba482c6f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:34:be:52:02:d8:3f:52:1c:f3:d3:e6:8b:5a:86:49:0f:83: 55:e2:6f:ed:ad:cd:10:79:a8:34:3e:f7:2b:5e:4d:9b:a7:ab: da:88:d6:82:94:b0:65:34:cb:d4:fe:4d:ff:99:f4:ed:2b:e8: 8e:dd:42:f9:ab:36:a4:26:ee:3e:b3:aa:65:70:ac:bb:56:b5: f5:32:7c:d9:02:40:46:7b:3c:76:ef:a9:08:08:0b:12:d4:1b: d8:e4:9a:1d:e9:20:90:3c:91:97:42:6b:89:0a:10:8e:4d:24: 49:78:22:54:6f:e9:0c:66:bb:65:86:19:8d:3d:a2:25:cc:69: ca:d3:86:17:27:42:d8:f5:d6:0e:10:80:17:f8:ee:6b:b4:b0: 2c:cb:2d:9f:05:c5:b7:69:9e:cd:b0:e1:97:db:4c:aa:66:87: 47:66:e3:29:38:73:25:18:b4:d6:33:98:4a:e9:93:d7:a1:95: a1:6e:09:e4:17:45:7e:73:14:41:6d:b6:db:6c:ff:45:38:c2: 5f:3b:24:c6:45:58:b4:fc:75:37:6d:7c:4b:7a:1f:19:d0:a6: 6d:a2:cf:62:c0:dd:b8:a9:3a:6a:20:34:61:6e:81:db:31:8d: f3:de:4d:63:0f:e7:d9:1a:cc:c2:69:59:6e:57:dc:78:5a:97: a1:89:9d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgYRxqBq2UEz5fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NDAwZDk3N2MtMTVkYy00NThhLTlkNWYtMThmMzNiZWZlNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQje/4lCFs5NgGjG2sH0A4YHjSuwehTZbrv RVXyL52UE/gOHcmu5n1DQdtufKjr9G0ScxkAtXW0u3+76IIOF35mMMa0gt1F8d86 qa3nAoC08F9BY4L5KC1mwA15mYc8oxdO9U26Z1kcJX3C0R/93pAp1GoDpt+/H1RH DfLUEIsJTngK7TQamUBYIMs2FdPraODJ0Waoeb+hs6Wc3wONAVxnb12qIwjfVz7R r3l+D+70ZWbOWYrFa8j7e9d7ZQ4H6Vz1FBCNp/7+x3f99r04AqUbiBBDrfRlwyUt y453kqtM5jWK7j/YKI+7FSLGUlOBBMHdKj5vIbG8bzcg4hyLOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNQRfEtyAGpgk3kfWaZUgU/UMazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNmEzY2RmNTAtMDExNS0z YmUzLThhMTUtZjViYTQ4MmM2ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG80vlIC2D9SHPPT5otahkkPg1Xib+2tzRB5qDQ+9yteTZunq9qI1oKU sGU0y9T+Tf+Z9O0r6I7dQvmrNqQm7j6zqmVwrLtWtfUyfNkCQEZ7PHbvqQgICxLU G9jkmh3pIJA8kZdCa4kKEI5NJEl4IlRv6Qxmu2WGGY09oiXMacrThhcnQtj11g4Q gBf47mu0sCzLLZ8Fxbdpns2w4ZfbTKpmh0dm4yk4cyUYtNYzmErpk9ehlaFuCeQX RX5zFEFtttts/0U4wl87JMZFWLT8dTdtfEt6HxnQpm2iz2LA3bipOmogNGFugdsx jfPeTWMP59kazMJpWW5X3Hhal6GJnZM= -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:56 2025 by rpki-client