$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa File: 47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa (raw, json) Hash identifier: LXR3XYqUhT7NIezYCjMG3Np7EEKSCdHRhKz6C9aN6/c= Subject key identifier: D8:A9:B2:4A:8A:E8:7D:F2:C6:D2:8A:38:CC:3C:40:21:B3:D7:48:70 Certificate issuer: /CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Certificate serial: 010D0C9F4328584B59A1DF4A12C6C34DDFDED5C0 Authority key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 11507 IP address blocks: 192.139.34.0/24 maxlen: 24 204.209.40.0/23 maxlen: 23 204.209.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:df:4a:12:c6:c3:4d:df:de:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=419d0605-9143-41ff-aacf-16407becdf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:32:b0:e1:55:bb:9a:72:a9:c1:53:b5:11:11: 83:d6:e7:66:58:f8:93:ff:fd:fb:86:a3:b9:1e:8f: 47:3e:67:72:b6:93:f3:aa:0f:71:38:7a:e8:40:69: bf:30:ce:c0:c8:7d:1c:68:05:01:6c:b3:32:6d:d1: 19:73:40:85:d4:60:2d:2c:73:de:85:12:1c:9c:7e: 42:79:66:08:bb:33:b7:ef:92:2d:13:ed:71:2e:66: c7:9f:19:5f:73:91:b1:f0:ce:53:fd:3d:71:62:e8: 1e:1a:cf:04:8a:93:dc:61:96:19:83:d3:bc:46:bc: e2:df:2f:c8:ab:d5:69:7d:12:1d:15:97:49:4e:1d: 5d:48:3d:f0:a5:21:7d:e6:24:ed:4a:8c:fd:16:ea: d3:b0:94:eb:50:7f:4d:54:24:e7:8d:f2:04:f1:3d: c2:3e:95:83:7e:13:be:af:b2:fd:54:fb:2b:b6:78: e2:28:98:cc:03:b1:c2:eb:19:f7:2d:5e:a2:83:82: 5f:24:2f:1d:3d:7d:96:dd:5d:f2:e9:52:0a:30:9e: c1:44:d3:6a:4e:d4:4f:f2:22:24:70:c5:95:b9:12: 37:d2:c0:39:28:40:6a:6b:52:ab:c2:20:fb:cb:83: 35:bf:bb:7d:70:92:c6:4a:ea:fd:de:b7:28:65:b6: 3f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A9:B2:4A:8A:E8:7D:F2:C6:D2:8A:38:CC:3C:40:21:B3:D7:48:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl X509v3 Authority Key Identifier: keyid:71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer sbgp-ipAddrBlock: critical IPv4: 192.139.34.0/24 204.209.40.0-204.209.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e3:b8:f1:be:e0:9b:75:90:83:8a:ec:c3:fc:be:9a:6d:99: be:3e:3a:4b:48:37:18:66:3b:33:e8:b5:d8:db:b4:22:d8:62: 01:b2:0c:3f:be:5a:b0:3d:9d:bf:a9:15:d5:5d:c6:68:31:64: a1:36:75:3f:35:c8:2c:12:37:a1:40:7b:54:16:52:df:d7:68: 26:c9:70:b8:39:c0:b2:bd:4c:c2:a9:2a:3d:7d:7c:89:19:c0: 51:15:cb:dd:50:27:41:81:c5:d1:d4:e2:72:64:f0:f2:38:2b: 68:f5:27:cf:92:98:0e:eb:2f:83:0b:c8:83:e2:3d:e0:fb:d6: 49:7d:08:af:60:53:66:8e:6f:94:f0:fb:74:d1:7c:a1:88:9d: e7:db:fa:71:26:5b:28:97:ef:59:bf:42:94:f8:a6:27:f1:d0: fb:6d:b3:87:4d:47:28:3e:a9:b5:a0:6f:15:17:27:4c:91:54: dc:46:96:ed:34:15:3c:20:5d:fc:f2:c8:72:9e:a7:02:76:fb: 9c:f6:28:a5:a5:57:94:a8:39:a8:b7:4d:02:87:15:bc:f0:7b: fc:fe:5c:7f:71:3c:d8:f5:e8:32:92:64:08:7e:d9:52:26:a9: df:57:77:4c:7b:7a:1a:f3:8d:61:36:c7:69:fd:f5:de:19:a3: c8:51:61:1a -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEtZod9KEsbDTd/e1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzOWJmYTctZWQ1MS00ZDE3LTljZTUtNTM2YTRiOTBh NjJmMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NDE5ZDA2MDUtOTE0My00MWZmLWFhY2YtMTY0MDdiZWNkZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTKw4VW7mnKpwVO1ERGD1udmWPiT//37hqO5 Ho9HPmdytpPzqg9xOHroQGm/MM7AyH0caAUBbLMybdEZc0CF1GAtLHPehRIcnH5C eWYIuzO375ItE+1xLmbHnxlfc5Gx8M5T/T1xYugeGs8EipPcYZYZg9O8Rrzi3y/I q9VpfRIdFZdJTh1dSD3wpSF95iTtSoz9FurTsJTrUH9NVCTnjfIE8T3CPpWDfhO+ r7L9VPsrtnjiKJjMA7HC6xn3LV6ig4JfJC8dPX2W3V3y6VIKMJ7BRNNqTtRP8iIk cMWVuRI30sA5KEBqa1KrwiD7y4M1v7t9cJLGSur93rcoZbY/zQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFNipskqK6H3yxtKKOMw8QCGz10hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5 YmZhNy1lZDUxLTRkMTctOWNlNS01MzZhNGI5MGE2MmYvNDc3NTQ0MDMtNzE5Yy0z MmJiLWEzYTgtOGVkMmFjNjhhOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2UzOWJmYTctZWQ1MS00ZDE3LTlj ZTUtNTM2YTRiOTBhNjJmLzNlMzliZmE3LWVkNTEtNGQxNy05Y2U1LTUzNmE0Yjkw YTYyZi5jcmwwHwYDVR0jBBgwFoAUcWui+aDPLJNZzNxUg3FABNoMzCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5YmZhNy1lZDUxLTRkMTctOWNlNS01MzZh NGI5MGE2MmYuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwIsiMAwD BAPM0SgDBADM0SowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAJ+O48b7gm3WQg4rsw/y+mm2Zvj46S0g3GGY7 M+i12Nu0IthiAbIMP75asD2dv6kV1V3GaDFkoTZ1PzXILBI3oUB7VBZS39doJslw uDnAsr1MwqkqPX18iRnAURXL3VAnQYHF0dTicmTw8jgraPUnz5KYDusvgwvIg+I9 4PvWSX0Ir2BTZo5vlPD7dNF8oYid59v6cSZbKJfvWb9ClPimJ/HQ+22zh01HKD6p taBvFRcnTJFU3EaW7TQVPCBd/PLIcp6nAnb7nPYopaVXlKg5qLdNAocVvPB7/P5c f3E82PXoMpJkCH7ZUiap31d3THt6GvONYTbHaf313hmjyFFhGg== -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:28 2025 by rpki-client