$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ff7838d-8a50-315e-a498-efd5e29a3945.roa File: 3ff7838d-8a50-315e-a498-efd5e29a3945.roa (raw, json) Hash identifier: bChIxQK9RVbU7yzXHeFdADSK1BliuDonImyIBRxHt+I= Subject key identifier: ED:F7:ED:85:05:2C:90:9A:48:43:9B:34:0D:46:0F:B5:1A:53:C7:19 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB7593BECF6DA88EA50927C0 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ff7838d-8a50-315e-a498-efd5e29a3945.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 7106 IP address blocks: 209.173.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:93:be:cf:6d:a8:8e:a5:09:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=86b23bb9-8eef-426a-abde-3579137e5a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:4c:45:b8:ae:f7:0f:ae:90:54:58:e8:9f: 82:fb:58:35:b2:f1:97:3f:e0:fe:86:51:91:5e:20: 46:40:b7:f4:88:3d:81:1b:14:7f:43:0f:57:b4:cf: 44:6b:27:0f:ad:53:3f:4b:64:d6:f6:5c:fa:48:7a: eb:1e:8e:4e:7b:67:be:68:7b:56:5c:2f:90:f4:d5: fc:60:be:de:4a:9d:34:b1:b8:0d:b4:37:49:54:a6: 63:4f:d1:9e:01:0f:03:26:77:18:58:12:16:f4:16: f2:9b:e2:50:c1:30:fc:1f:b7:6e:58:bd:ea:83:3b: 6b:dd:0d:8d:56:17:20:41:1f:da:38:72:f0:71:b9: 22:a1:c6:30:3f:9d:03:0a:ad:ce:d8:33:16:76:c9: e6:62:e3:db:59:25:c5:7f:96:2c:6a:b8:c2:db:e6: 54:29:72:dd:b6:16:e6:5e:ac:0f:4a:ac:21:1f:07: 81:04:d8:fc:03:c4:7f:51:ce:bf:74:a3:7f:3b:35: e2:b1:b0:43:e9:5b:ce:17:7d:61:0b:fe:f0:0a:d0: 38:87:5d:75:f7:9b:6c:cd:45:71:0b:dc:32:9a:6e: e0:08:b6:e8:cd:8f:3c:3e:f3:e1:5d:eb:a9:de:92: f1:96:e3:ff:75:f5:1f:aa:64:37:6f:08:12:48:51: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F7:ED:85:05:2C:90:9A:48:43:9B:34:0D:46:0F:B5:1A:53:C7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ff7838d-8a50-315e-a498-efd5e29a3945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:1d:62:50:91:a6:f3:67:b0:db:a2:1b:ba:6b:3b:a8:62:c8: 79:58:2a:82:fe:8d:53:8f:84:db:77:92:21:c1:0d:99:a3:17: 20:2f:a5:1b:17:4f:71:ad:37:59:c6:a4:d6:d0:fc:f8:a2:ed: 7c:4a:a9:44:e3:14:90:04:72:77:fa:80:ea:22:25:c7:2a:6f: d9:66:39:6e:ac:39:68:38:f8:84:80:00:64:6b:b1:c9:da:68: bd:a5:e2:c4:77:20:b0:f2:82:c1:c6:8c:33:5c:0e:33:41:ea: 0b:ef:ec:e0:1b:65:71:8f:3d:24:e0:17:9d:dd:52:87:90:d2: 64:9e:54:41:4d:0e:56:35:4c:aa:13:3e:eb:20:41:73:43:7e: bb:aa:53:a2:b4:58:3c:2d:8a:7d:b5:aa:e3:39:d1:67:d9:e9: 5b:48:9d:a1:ef:94:ed:c1:0e:ac:d9:ca:ce:16:bc:98:dd:a7: d3:ba:bd:82:33:28:16:c4:da:5a:22:83:20:b3:fd:69:78:bc: 1d:36:14:33:b8:0d:fb:19:85:fc:04:d2:bf:89:20:bb:ba:0d: 01:b2:8a:97:7f:d2:65:d2:0a:7f:dd:84:2d:25:6f:2f:d1:02: 9b:22:7d:70:7e:28:d2:76:f6:48:78:ad:e3:ba:26:55:92:73: d7:62:d2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZO+z22ojqUJJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ODZiMjNiYjktOGVlZi00MjZhLWFiZGUtMzU3OTEzN2U1YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fdMRbiu9w+ukFRY6J+C+1g1svGXP+D+hlGR XiBGQLf0iD2BGxR/Qw9XtM9EaycPrVM/S2TW9lz6SHrrHo5Oe2e+aHtWXC+Q9NX8 YL7eSp00sbgNtDdJVKZjT9GeAQ8DJncYWBIW9Bbym+JQwTD8H7duWL3qgztr3Q2N VhcgQR/aOHLwcbkiocYwP50DCq3O2DMWdsnmYuPbWSXFf5YsarjC2+ZUKXLdthbm XqwPSqwhHweBBNj8A8R/Uc6/dKN/OzXisbBD6VvOF31hC/7wCtA4h11195tszUVx C9wymm7gCLbozY88PvPhXeup3pLxluP/dfUfqmQ3bwgSSFHXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO337YUFLJCaSEObNA1GD7UaU8cZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvM2ZmNzgzOGQtOGE1MC0z MTVlLWE0OTgtZWZkNWUyOWEzOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0a2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUdYlCRpvNnsNuiG7prO6hiyHlYKoL+jVOPhNt3kiHBDZmjFyAvpRsX T3GtN1nGpNbQ/Pii7XxKqUTjFJAEcnf6gOoiJccqb9lmOW6sOWg4+ISAAGRrscna aL2l4sR3ILDygsHGjDNcDjNB6gvv7OAbZXGPPSTgF53dUoeQ0mSeVEFNDlY1TKoT PusgQXNDfruqU6K0WDwtin21quM50WfZ6VtInaHvlO3BDqzZys4WvJjdp9O6vYIz KBbE2loigyCz/Wl4vB02FDO4DfsZhfwE0r+JILu6DQGyipd/0mXSCn/dhC0lby/R ApsifXB+KNJ29kh4reO6JlWSc9di0tA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:45 2025 by rpki-client