$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa File: 3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa (raw, json) Hash identifier: sN2YQ8WKs/0MLI8wHjHcABpTJUJx9GPNfo6uOniVFlU= Subject key identifier: 83:E0:99:54:5E:BB:A1:05:41:3B:0E:A4:39:54:8C:92:E8:10:49:75 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB759397C7D5D271C289BE80 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 7106 IP address blocks: 74.126.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:93:97:c7:d5:d2:71:c2:89:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=2b82f515-68d7-416b-8220-2e6b874e495e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:13:6c:bb:8b:f3:41:4b:dc:f0:4d:ca:5f: d4:52:ad:1d:83:fc:96:fd:11:02:1b:81:36:76:80: 9f:5d:53:0e:3a:e4:6f:5e:fb:9d:6b:64:ca:a3:70: 46:ff:61:7a:fb:f1:3d:cb:98:9b:96:4e:c9:52:4d: e4:c6:35:39:ce:ed:17:95:2a:fe:41:b9:00:8f:97: c6:f9:63:c9:ee:70:26:27:67:7e:2b:d1:ab:90:fd: c3:7b:cf:ee:c0:c1:ea:51:d1:d7:8d:20:c1:d1:eb: ec:90:80:cc:7a:20:a0:0a:65:3b:ec:5d:dc:91:0e: 5c:16:de:69:18:0d:d0:be:55:f0:0d:dc:8e:40:c4: ff:57:04:72:29:0f:07:4e:da:d7:30:39:f8:ac:0b: e7:65:42:8c:90:56:97:10:14:fa:00:50:3a:35:88: 76:dc:e6:b4:ca:cd:56:9d:c6:f5:ae:4a:2b:f7:2a: 73:bd:eb:cc:6a:71:fd:1e:95:1b:7c:1f:b5:8f:cc: 5e:f0:3c:66:cb:4d:89:eb:97:00:44:95:73:bd:90: 9b:89:84:9b:a9:71:38:56:3c:00:14:07:53:d9:70: b1:dc:9f:b3:ea:92:31:db:90:9e:f7:b3:a0:26:c2: 23:fb:6e:6f:41:eb:2a:fe:8f:23:96:5d:61:77:d0: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E0:99:54:5E:BB:A1:05:41:3B:0E:A4:39:54:8C:92:E8:10:49:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 74.126.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c5:cf:22:a1:e4:de:17:1f:27:c8:c1:e6:c1:14:ed:5d:0c: 88:29:be:cd:96:56:ec:0d:51:81:85:bc:97:d9:04:d3:2a:54: cd:2e:7d:db:44:83:68:6c:61:13:6e:30:3d:e3:b8:18:89:dc: 2c:97:57:8d:16:76:90:dc:db:51:0a:b5:07:d3:58:e6:04:33: c9:8f:d6:af:a2:3a:b0:5b:9c:c6:e3:32:16:84:0e:c2:b6:72: d1:46:5c:4e:99:1a:1d:36:dd:2d:11:d9:59:25:c3:f5:f9:b9: 6c:08:e7:64:51:57:a3:41:2d:bd:78:f0:3b:cd:c9:31:98:f5: 85:ec:1c:0b:4f:d5:c1:95:2e:0d:a8:cf:22:8c:57:9e:b0:45: 8b:2a:b0:2c:75:f7:9c:49:b0:fc:14:ae:a4:6d:7b:f4:f5:18: 32:f1:24:37:d3:a0:59:a5:97:49:4a:69:17:bf:85:eb:23:1b: 33:52:a8:64:45:f9:5d:f9:16:fa:72:bf:3a:92:c3:2f:88:49: f8:de:6c:3f:b4:8d:5d:6d:cf:fe:6d:c4:88:e8:23:3c:9a:dc: 5d:27:54:bf:74:c8:79:00:12:7b:db:cc:f9:14:ec:c2:93:52: 7c:b5:38:ea:ed:3a:af:7b:bd:21:6a:03:2c:f7:43:ca:b1:c3: d9:a2:fd:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZOXx9XSccKJvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MmI4MmY1MTUtNjhkNy00MTZiLTgyMjAtMmU2Yjg3NGU0OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT8TbLuL80FL3PBNyl/UUq0dg/yW/RECG4E2 doCfXVMOOuRvXvuda2TKo3BG/2F6+/E9y5iblk7JUk3kxjU5zu0XlSr+QbkAj5fG +WPJ7nAmJ2d+K9GrkP3De8/uwMHqUdHXjSDB0evskIDMeiCgCmU77F3ckQ5cFt5p GA3QvlXwDdyOQMT/VwRyKQ8HTtrXMDn4rAvnZUKMkFaXEBT6AFA6NYh23Oa0ys1W ncb1rkor9ypzvevManH9HpUbfB+1j8xe8Dxmy02J65cARJVzvZCbiYSbqXE4VjwA FAdT2XCx3J+z6pIx25Ce97OgJsIj+25vQesq/o8jll1hd9B1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPgmVReu6EFQTsOpDlUjJLoEEl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvM2NhNmZlMDktYjk5NC0z Y2I2LWIyZTctNzNjMDgwM2QxOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXFzyKh5N4XHyfIwebBFO1dDIgpvs2WVuwNUYGFvJfZBNMqVM0ufdtE g2hsYRNuMD3juBiJ3CyXV40WdpDc21EKtQfTWOYEM8mP1q+iOrBbnMbjMhaEDsK2 ctFGXE6ZGh023S0R2Vklw/X5uWwI52RRV6NBLb148DvNyTGY9YXsHAtP1cGVLg2o zyKMV56wRYsqsCx195xJsPwUrqRte/T1GDLxJDfToFmll0lKaRe/hesjGzNSqGRF +V35FvpyvzqSwy+ISfjebD+0jV1tz/5txIjoIzya3F0nVL90yHkAEnvbzPkU7MKT Uny1OOrtOq97vSFqAyz3Q8qxw9mi/ZY= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:21 2025 by rpki-client