$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa File: 3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa (raw, json) Hash identifier: hn/4C0aVmTKrb5UIfkuRFfVZDKSP2PJNXUC22C7y0U0= Subject key identifier: 0A:79:C3:F5:79:63:52:D2:C9:EB:43:94:18:37:94:BE:B3:69:FA:A7 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584B532E9A5AF40A789C08B65B80 Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa Signing time: Fri 26 Sep 2025 16:53:58 +0000 ROA not before: Fri 26 Sep 2025 16:53:58 +0000 ROA not after: Thu 25 Dec 2025 17:53:58 +0000 asID: 11115 IP address blocks: 64.9.194.0/24 maxlen: 24 72.13.0.0/20 maxlen: 24 205.145.128.0/20 maxlen: 24 216.71.161.0/24 maxlen: 24 216.71.164.0/24 maxlen: 24 216.71.186.0/24 maxlen: 24 216.71.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:2e:9a:5a:f4:0a:78:9c:08:b6:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: Sep 26 16:53:58 2025 GMT Not After : Dec 25 17:53:58 2025 GMT Subject: CN=93c210e3-9b3c-4695-8796-d194f683fb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:49:2d:f4:c3:6d:fd:9b:1c:ee:50:80:9b:83: 66:1b:68:5f:41:80:f1:57:17:0a:2a:80:1d:1e:b4: 30:ee:39:69:3c:e8:d8:dd:04:b5:9a:57:a2:a6:a2: 2b:9a:c5:8f:b7:02:cb:f8:85:d2:b1:e6:fc:db:cc: 58:43:b8:47:5c:d5:af:3a:e5:55:d3:f4:c8:f1:b2: d5:85:33:cb:f1:2f:91:e6:52:90:cb:bf:aa:0a:66: 66:b5:d1:68:dc:07:30:73:da:e8:24:a8:39:6c:e9: 4b:ea:75:40:e3:74:8e:92:7e:56:26:a6:a5:f0:c5: 6a:d9:0c:86:c7:bb:69:21:cc:a6:9a:82:c0:cd:45: 93:2d:f4:9d:84:6c:34:c3:29:07:01:8c:21:8e:ed: 65:ba:2c:27:7b:eb:68:8c:f4:8c:8d:a1:0c:48:2e: 9c:59:d1:72:31:49:ba:8b:a6:ad:e4:dd:ad:1f:e2: 0e:a0:fc:4f:b6:68:8e:09:69:f5:ff:76:ef:df:38: e2:6f:42:72:6f:eb:00:27:d2:d9:e4:d3:7a:9c:1b: af:20:38:8a:25:e0:86:b0:9a:01:48:87:e2:ef:20: 6d:b2:20:60:6a:a4:86:bf:5e:a6:f0:b3:71:22:da: fc:2b:c0:ec:43:8f:39:d4:cb:65:70:7c:4d:a5:6b: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:79:C3:F5:79:63:52:D2:C9:EB:43:94:18:37:94:BE:B3:69:FA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 64.9.194.0/24 72.13.0.0/20 205.145.128.0/20 216.71.161.0/24 216.71.164.0/24 216.71.186.0/24 216.71.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:db:a0:2d:71:6b:75:15:1a:45:b4:a8:4e:31:90:9b:68:e9: 27:b4:56:f5:21:c3:62:31:76:0b:2b:93:86:f3:27:fb:ac:94: d4:f5:c3:3a:45:18:3f:62:2d:3f:41:6c:19:b5:15:8b:4f:71: d8:bc:c6:92:ba:70:64:89:93:dd:bf:62:83:1a:b8:b9:1c:dc: 34:75:c9:95:ce:7b:48:62:cc:fb:f8:b0:e3:87:64:44:ac:44: 9d:0f:c1:51:5d:68:4a:0c:bd:ac:cc:54:9d:67:4d:d9:11:a3: f5:e8:32:c4:39:d6:aa:3e:b5:d1:d4:0f:a0:ff:fa:2c:de:dd: 60:76:03:b0:70:73:f5:86:95:78:fc:50:92:2a:37:a7:42:4b: cb:2c:f9:de:d5:62:02:1e:40:76:4f:30:1a:c7:dc:58:e5:6e: c5:01:c2:3a:78:0c:30:9f:28:3c:22:19:a1:2c:50:92:22:31: 56:51:b9:c4:9a:f5:f9:66:85:1e:fe:d4:a0:f9:97:41:a8:c5: 9a:dd:7d:4b:99:94:be:d2:78:83:49:6a:2a:28:dc:76:2d:51: 2f:26:e7:b1:cc:ef:5a:53:48:05:29:c0:81:9b:69:36:62:c8: 64:02:7a:1f:b5:65:c3:40:a7:96:f8:90:ae:0d:51:73:56:a1: 36:d4:21:11 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEtTLppa9Ap4nAi2W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI1MDkyNjE2NTM1OFoXDTI1MTIyNTE3NTM1OFowLzEtMCsGA1UEAxMk OTNjMjEwZTMtOWIzYy00Njk1LTg3OTYtZDE5NGY2ODNmYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUkt9MNt/Zsc7lCAm4NmG2hfQYDxVxcKKoAd HrQw7jlpPOjY3QS1mleipqIrmsWPtwLL+IXSseb828xYQ7hHXNWvOuVV0/TI8bLV hTPL8S+R5lKQy7+qCmZmtdFo3Acwc9roJKg5bOlL6nVA43SOkn5WJqal8MVq2QyG x7tpIcymmoLAzUWTLfSdhGw0wykHAYwhju1luiwne+tojPSMjaEMSC6cWdFyMUm6 i6at5N2tH+IOoPxPtmiOCWn1/3bv3zjib0Jyb+sAJ9LZ5NN6nBuvIDiKJeCGsJoB SIfi7yBtsiBgaqSGv16m8LNxItr8K8DsQ4851MtlcHxNpWsepQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFAp5w/V5Y1LSyetDlBg3lL6zafqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvM2RiYWY2NzQtYWIxNS0z Y2FmLThhY2MtM2QyYzFhNzFjNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAQAnCAwQE SA0AAwQEzZGAAwQA2EehAwQA2EekAwQA2Ee6AwQA2Ee8MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGfboC1x a3UVGkW0qE4xkJto6Se0VvUhw2Ixdgsrk4bzJ/uslNT1wzpFGD9iLT9BbBm1FYtP cdi8xpK6cGSJk92/YoMauLkc3DR1yZXOe0hizPv4sOOHZESsRJ0PwVFdaEoMvazM VJ1nTdkRo/XoMsQ51qo+tdHUD6D/+ize3WB2A7Bwc/WGlXj8UJIqN6dCS8ss+d7V YgIeQHZPMBrH3FjlbsUBwjp4DDCfKDwiGaEsUJIiMVZRucSa9flmhR7+1KD5l0Go xZrdfUuZlL7SeINJaioo3HYtUS8m57HM71pTSAUpwIGbaTZiyGQCeh+1ZcNAp5b4 kK4NUXNWoTbUIRE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:32 2025 by rpki-client