$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fc3d25a9-50d1-354c-8d61-c0eef1099bb2.roa File: fc3d25a9-50d1-354c-8d61-c0eef1099bb2.roa (raw, json) Hash identifier: fb3xt7xEsCbw/0+KVqVEWcn7OPlHEcnz2KXMk9AbwNM= Subject key identifier: F5:59:A9:63:E9:16:C6:30:11:E6:EC:65:11:9A:58:B1:4A:5A:4C:82 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F4328584A6AF08DC05A1D87E7ABA44180 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fc3d25a9-50d1-354c-8d61-c0eef1099bb2.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 150.9.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:8d:c0:5a:1d:87:e7:ab:a4:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=3eec30b9-b2c0-40ac-a83f-4f8cfda800ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:06:be:c5:70:97:f0:cd:80:9e:0f:2d:fb: 27:01:e7:63:0f:bb:33:78:f6:02:12:b2:4b:d5:5e: 25:7d:1b:19:26:79:d3:10:ea:c9:fb:ac:5b:96:e7: a5:b6:45:ff:71:b3:be:cc:b3:9b:d5:a3:e8:4e:c2: a3:b5:a1:ef:e3:2a:f8:3c:67:ef:14:62:b8:f2:df: 45:fa:a7:52:c4:23:04:74:47:a5:06:eb:d2:8c:49: 9b:78:51:31:56:d4:dd:71:3a:59:3e:3d:ee:18:ed: 8e:ab:3f:7c:a2:e8:06:64:b5:75:5b:10:c2:6d:c9: 6d:3a:0e:9c:38:65:b6:44:b6:25:36:04:04:40:b7: a4:99:8e:93:ab:85:7d:dd:58:71:cf:59:68:1a:f4: 39:17:d9:ca:50:db:7c:99:fc:24:31:80:be:7d:00: 71:b5:58:be:4d:c2:39:f2:ac:3a:13:98:4e:cb:6d: d1:1c:3c:55:0c:ff:12:9f:70:6b:8a:fe:ea:b8:cd: 06:64:ac:df:cf:ae:67:08:b9:89:f9:20:61:aa:6b: 2d:97:5b:b5:09:f6:b2:45:c0:01:04:ec:5b:4f:7a: 74:21:37:b2:d1:6f:af:0b:8e:6c:60:3a:99:4c:a3: ef:0d:a7:7f:3e:7d:0a:92:b0:5a:19:ca:91:d7:bf: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:59:A9:63:E9:16:C6:30:11:E6:EC:65:11:9A:58:B1:4A:5A:4C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fc3d25a9-50d1-354c-8d61-c0eef1099bb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fc:f5:e5:66:b9:3f:cf:ad:5b:79:2a:6a:83:59:3f:cd:1f: 5b:0f:f1:bc:68:86:1e:76:3d:89:3d:84:c3:ed:9d:b8:38:51: d0:9a:53:01:51:51:41:3f:f5:bb:d8:3a:5a:3a:c6:88:0e:85: 93:08:04:25:62:b4:85:10:f5:42:c1:fd:e8:23:10:7c:79:2a: 29:7e:49:5d:29:58:12:11:bb:38:ed:37:c3:8b:d6:f5:ed:14: ee:87:dc:d7:1c:2d:9a:6e:4a:96:25:1f:e5:f0:48:b7:0d:3e: ad:5e:96:72:91:31:c9:7c:ab:6c:40:cb:2f:ab:74:86:0c:0a: 99:2d:47:61:01:a5:20:3e:aa:8e:f0:e3:96:f2:f4:9d:c3:bb: db:ca:77:63:50:ab:cc:de:b8:b0:7d:df:00:69:13:f3:20:3e: b2:f1:ce:75:ae:ff:f7:26:a3:48:1b:3e:27:5a:0a:2b:89:6d: 87:d1:20:28:fc:28:25:f8:97:20:8e:1f:97:5b:aa:0d:a1:ce: ca:a3:d1:ff:c8:c7:9b:6f:85:d1:18:4e:42:ec:0d:26:71:05: 09:2b:9e:6c:30:d6:ac:50:9e:e5:74:05:80:27:59:b2:03:c2: 69:5e:bb:c0:f7:7e:d6:a0:2f:72:b1:23:f2:33:84:09:6d:fe: 00:29:b1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpq8I3AWh2H56ukQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk M2VlYzMwYjktYjJjMC00MGFjLWE4M2YtNGY4Y2ZkYTgwMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyIGvsVwl/DNgJ4PLfsnAedjD7szePYCErJL 1V4lfRsZJnnTEOrJ+6xblueltkX/cbO+zLOb1aPoTsKjtaHv4yr4PGfvFGK48t9F +qdSxCMEdEelBuvSjEmbeFExVtTdcTpZPj3uGO2Oqz98ougGZLV1WxDCbcltOg6c OGW2RLYlNgQEQLekmY6Tq4V93Vhxz1loGvQ5F9nKUNt8mfwkMYC+fQBxtVi+TcI5 8qw6E5hOy23RHDxVDP8Sn3Briv7quM0GZKzfz65nCLmJ+SBhqmstl1u1CfayRcAB BOxbT3p0ITey0W+vC45sYDqZTKPvDad/Pn0KkrBaGcqR17/ahwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVZqWPpFsYwEebsZRGaWLFKWkyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvZmMzZDI1YTktNTBkMS0z NTRjLThkNjEtYzBlZWYxMDk5YmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn89eVmuT/PrVt5KmqDWT/NH1sP8bxohh52PYk9hMPtnbg4UdCaUwFR UUE/9bvYOlo6xogOhZMIBCVitIUQ9ULB/egjEHx5Kil+SV0pWBIRuzjtN8OL1vXt FO6H3NccLZpuSpYlH+XwSLcNPq1elnKRMcl8q2xAyy+rdIYMCpktR2EBpSA+qo7w 45by9J3Du9vKd2NQq8zeuLB93wBpE/MgPrLxznWu//cmo0gbPidaCiuJbYfRICj8 KCX4lyCOH5dbqg2hzsqj0f/Ix5tvhdEYTkLsDSZxBQkrnmww1qxQnuV0BYAnWbID wmleu8D3ftagL3KxI/IzhAlt/gApsdk= -----END CERTIFICATE-----Generated at Sat Aug 2 05:24:56 2025 by rpki-client