$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa File: be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa (raw, json) Hash identifier: 84KNs/exACkYieK/OSHHIChUXp7u/i8zySgwROsvfJU= Subject key identifier: EA:AA:E6:A2:71:E9:3D:04:51:C3:4C:48:59:20:CE:9C:1C:B5:39:EB Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B583C7C45DB94B6DD77406E00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 18785 IP address blocks: 216.106.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7c:45:db:94:b6:dd:77:40:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=98d51daf-30be-4dd0-a3a8-402883fb9e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:a3:ec:36:f9:7d:98:56:f1:7e:4c:13:79: f1:9a:0c:71:7a:cb:5d:1a:4b:f8:73:67:ea:3c:22: 0a:c0:a1:8c:0c:a6:c4:ce:f3:36:96:a3:d2:ff:93: b1:d9:4d:5f:3b:27:31:d5:e1:5a:48:f1:c8:08:36: 24:11:7c:57:3b:cd:c7:6d:67:a8:40:7c:5f:95:48: b4:93:0a:2d:5e:0c:32:cc:80:bd:f7:11:e1:70:9d: 24:ea:c8:77:03:a1:95:50:c4:c2:7d:47:35:3e:dc: 35:9e:a0:37:04:e8:db:c2:1c:8e:7a:7b:de:29:4b: dd:30:35:e9:d1:cb:33:05:c9:d6:97:68:5a:b3:a2: 40:80:b7:52:9b:16:86:80:b4:eb:a7:1b:e2:02:40: 16:70:f9:c9:2b:1a:92:a2:ac:6e:a5:c6:e2:5d:8c: ca:c8:24:62:2e:5f:84:4f:58:04:3d:f8:e6:c7:ad: ff:d0:dc:c1:20:65:71:bd:79:88:79:89:cc:c7:95: 0d:40:0f:1f:4a:81:ba:36:18:25:bc:9b:7b:12:a1: b5:0a:af:d8:04:bd:ee:7d:1d:b6:e9:aa:f8:a4:7a: 79:c1:5f:ec:6b:67:13:df:0b:a9:6f:8b:7b:53:ea: 04:a6:e7:ac:3f:f1:9c:3c:65:bc:07:8a:67:9b:48: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:E6:A2:71:E9:3D:04:51:C3:4C:48:59:20:CE:9C:1C:B5:39:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ea:1b:49:3a:34:bb:c5:74:1c:f7:7e:a3:c6:fc:20:30:f3: dc:7a:e8:3a:83:65:66:2d:a7:e9:61:94:75:1f:1d:e0:28:0b: 8e:07:5e:53:9d:a7:c3:b7:7d:19:80:d0:78:3d:05:a6:83:77: 6b:44:1a:77:87:0d:97:0a:c3:b7:1a:0b:c1:6a:a5:3a:d8:15: 6d:38:47:8b:60:aa:1b:be:c9:10:5b:92:90:3a:aa:38:6c:04: d9:c9:de:eb:15:4d:ba:19:90:18:76:cd:3e:9c:91:ad:4f:10: c2:60:19:27:1d:a8:68:5e:8b:09:41:ba:0b:f9:17:95:3e:55: f1:b5:87:60:56:f6:89:94:6d:3b:ef:53:f8:46:ce:0e:21:b8: f1:d2:14:94:79:16:90:14:84:55:6d:53:98:e5:95:8c:b9:aa: 98:41:6d:63:8e:49:b7:bf:4f:66:98:0a:a8:d0:e3:1b:4a:60: 42:dc:77:70:db:20:15:92:de:16:78:23:64:4b:bd:94:8f:41: 4c:52:8a:1d:0c:3e:a3:cc:ba:75:75:d4:43:fe:be:19:8e:cb: af:ca:aa:b0:9c:77:88:fa:8e:b7:e0:f1:a0:95:6f:fd:22:6a: b4:99:ef:25:8d:2f:ee:38:c4:54:e2:0f:7c:61:fa:80:e0:0b: fb:7f:a3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPHxF25S23XdAbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OThkNTFkYWYtMzBiZS00ZGQwLWEzYTgtNDAyODgzZmI5ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbaj7Db5fZhW8X5ME3nxmgxxestdGkv4c2fq PCIKwKGMDKbEzvM2lqPS/5Ox2U1fOycx1eFaSPHICDYkEXxXO83HbWeoQHxflUi0 kwotXgwyzIC99xHhcJ0k6sh3A6GVUMTCfUc1Ptw1nqA3BOjbwhyOenveKUvdMDXp 0cszBcnWl2has6JAgLdSmxaGgLTrpxviAkAWcPnJKxqSoqxupcbiXYzKyCRiLl+E T1gEPfjmx63/0NzBIGVxvXmIeYnMx5UNQA8fSoG6NhglvJt7EqG1Cq/YBL3ufR22 6ar4pHp5wV/sa2cT3wupb4t7U+oEpuesP/GcPGW8B4pnm0hIsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqq5qJx6T0EUcNMSFkgzpwctTnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYmU4ZmM2ZGUtMDFjOC0z NTBjLWE0OWQtZGM1Y2I3ZGNjYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Gr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrqG0k6NLvFdBz3fqPG/CAw89x66DqDZWYtp+lhlHUfHeAoC44HXlOd p8O3fRmA0Hg9BaaDd2tEGneHDZcKw7caC8FqpTrYFW04R4tgqhu+yRBbkpA6qjhs BNnJ3usVTboZkBh2zT6cka1PEMJgGScdqGheiwlBugv5F5U+VfG1h2BW9omUbTvv U/hGzg4huPHSFJR5FpAUhFVtU5jllYy5qphBbWOOSbe/T2aYCqjQ4xtKYELcd3Db IBWS3hZ4I2RLvZSPQUxSih0MPqPMunV11EP+vhmOy6/KqrCcd4j6jrfg8aCVb/0i arSZ7yWNL+44xFTiD3xh+oDgC/t/o9A= -----END CERTIFICATE-----Generated at Fri Oct 10 19:47:41 2025 by rpki-client