$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa File: fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa (raw, json) Hash identifier: E8P+8tDaNskgAUN405OCdKP9D/3xjg1f9GAajeVzXK0= Subject key identifier: B3:2F:77:B4:0A:43:2F:F6:42:C3:E5:5C:4E:5D:66:7B:5B:C1:67:15 Certificate issuer: /CN=2e06fcf2-dda2-4ce0-8a33-46133120abec Certificate serial: 010D0C9F4328584B0B76ABB4DAA12B35B1137280 Authority key identifier: 41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 999 IP address blocks: 208.89.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ab:b4:da:a1:2b:35:b1:13:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e06fcf2-dda2-4ce0-8a33-46133120abec Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a774550b-de30-4373-bb78-dfc136cf60b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:78:5a:8a:90:e9:52:5d:84:94:da:7f:c0: ab:1e:a8:d3:45:e0:15:08:71:e9:b4:57:ea:c8:8e: 85:76:d8:1b:09:46:f8:e5:0e:4d:f2:42:2a:a7:ef: 04:79:a0:ba:14:ee:cc:fe:3b:5d:22:55:0e:39:59: 6b:31:3b:ae:48:cc:2f:c4:0c:8b:31:ce:2d:9d:87: 16:07:61:46:80:49:44:1b:02:bd:63:b0:5e:6d:de: 45:e5:e1:95:22:82:47:38:0c:21:79:7c:ed:57:36: 20:74:68:e0:2f:74:2c:eb:8f:b7:ad:37:df:32:a9: 29:b3:c4:1d:be:86:bd:0d:bc:9c:80:fd:34:b7:cb: 31:7a:3c:be:3b:95:d1:0b:83:62:22:c3:8b:da:cb: 18:0b:75:8e:5a:d3:ab:10:d6:35:33:16:c1:5c:33: e0:c3:a3:9d:0a:65:17:ef:c2:4a:ff:bc:b3:82:ad: 38:5a:af:f5:8c:67:18:f2:26:18:15:31:50:1a:82: 4e:eb:0f:97:14:51:b0:e7:d4:9e:50:e4:98:db:49: c9:fa:74:5e:4a:a8:bf:ef:d4:55:57:d6:c7:e2:42: bd:2a:36:86:16:9a:a2:55:d8:d6:6d:f7:82:2d:c4: ef:7f:bd:4d:48:82:43:5f:32:4c:82:65:5c:49:0b: 68:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2F:77:B4:0A:43:2F:F6:42:C3:E5:5C:4E:5D:66:7B:5B:C1:67:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl X509v3 Authority Key Identifier: keyid:41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer sbgp-ipAddrBlock: critical IPv4: 208.89.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:29:ae:cb:d0:c4:53:18:a7:75:d3:19:42:ea:0d:71:ad:2e: 7e:0b:78:c0:da:3a:c3:e4:5c:0d:e2:00:4f:bd:f5:06:7f:38: 68:64:1b:28:cc:b2:97:46:30:d1:ee:91:aa:e9:5c:0f:3f:e0: c5:cc:cf:ac:bb:ee:23:4f:e5:3d:fd:88:c1:79:bd:d1:d6:8c: 0d:c2:c2:21:0e:df:79:72:47:4d:f9:97:2e:53:e5:2f:bf:a7: 58:f5:9c:f7:ac:4c:6c:21:7b:b1:bc:3a:57:8d:d1:a1:bd:66: 1b:45:1f:0a:81:62:69:93:2e:07:94:00:73:ef:dd:8d:94:f0: 7c:0c:32:a9:9a:6a:7c:3d:60:04:72:23:17:5b:05:04:0b:05: 11:73:60:45:60:ad:e9:f2:49:00:c7:21:51:95:f3:2d:c4:c4: a2:0a:1f:1b:78:14:4b:ab:05:55:aa:0d:bf:c0:d6:b8:e5:26: e4:70:c4:ee:cd:f2:f6:53:87:35:6a:26:8e:39:25:42:6c:c8: 78:da:1b:a7:0c:df:17:b0:54:b6:20:c3:5c:0f:a5:a6:aa:e3: 55:f1:42:6f:1f:ab:82:38:21:ef:14:83:3a:a6:73:14:71:96: d5:fd:68:e2:16:2d:2c:3d:8f:97:37:08:eb:9e:47:c5:5d:b8: 71:f1:57:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqu02qErNbETcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUwNmZjZjItZGRhMi00Y2UwLThhMzMtNDYxMzMxMjBh YmVjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTc3NDU1MGItZGUzMC00MzczLWJiNzgtZGZjMTM2Y2Y2MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fB4WoqQ6VJdhJTaf8CrHqjTReAVCHHptFfq yI6FdtgbCUb45Q5N8kIqp+8EeaC6FO7M/jtdIlUOOVlrMTuuSMwvxAyLMc4tnYcW B2FGgElEGwK9Y7Bebd5F5eGVIoJHOAwheXztVzYgdGjgL3Qs64+3rTffMqkps8Qd voa9DbycgP00t8sxejy+O5XRC4NiIsOL2ssYC3WOWtOrENY1MxbBXDPgw6OdCmUX 78JK/7yzgq04Wq/1jGcY8iYYFTFQGoJO6w+XFFGw59SeUOSY20nJ+nReSqi/79RV V9bH4kK9KjaGFpqiVdjWbfeCLcTvf71NSIJDXzJMgmVcSQtojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMvd7QKQy/2QsPlXE5dZntbwWcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZTA2 ZmNmMi1kZGEyLTRjZTAtOGEzMy00NjEzMzEyMGFiZWMvZmQzYmY0YjktMDVlYi0z ZjQ5LWJmMjktYWEyZWMwNjFlNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmUwNmZjZjItZGRhMi00Y2UwLThh MzMtNDYxMzMxMjBhYmVjLzJlMDZmY2YyLWRkYTItNGNlMC04YTMzLTQ2MTMzMTIw YWJlYy5jcmwwHwYDVR0jBBgwFoAUQQwQ0R/TT8hdS91VkrN2Hv1BNH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZTA2ZmNmMi1kZGEyLTRjZTAtOGEzMy00NjEz MzEyMGFiZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAprsvQxFMYp3XTGULqDXGtLn4LeMDaOsPkXA3iAE+99QZ/OGhkGyjM spdGMNHukarpXA8/4MXMz6y77iNP5T39iMF5vdHWjA3CwiEO33lyR035ly5T5S+/ p1j1nPesTGwhe7G8OleN0aG9ZhtFHwqBYmmTLgeUAHPv3Y2U8HwMMqmaanw9YARy IxdbBQQLBRFzYEVgrenySQDHIVGV8y3ExKIKHxt4FEurBVWqDb/A1rjlJuRwxO7N 8vZThzVqJo45JUJsyHjaG6cM3xewVLYgw1wPpaaq41XxQm8fq4I4Ie8UgzqmcxRx ltX9aOIWLSw9j5c3COueR8VduHHxV7Y= -----END CERTIFICATE-----Generated at Tue Oct 14 04:37:50 2025 by rpki-client