$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/ddb46e68-d0c9-3ed7-a921-4d5b7365dfcf.roa File: ddb46e68-d0c9-3ed7-a921-4d5b7365dfcf.roa (raw, json) Hash identifier: wrE+152W3Yb91Hhje/HRt1llI3359FqGp1B+jv+11ds= Subject key identifier: 49:9F:A4:38:34:A2:8F:E1:30:1A:4D:20:9D:11:35:D6:F9:D0:79:49 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584BBB758B37BFA9930EAD3D3530 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/ddb46e68-d0c9-3ed7-a921-4d5b7365dfcf.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 23158 IP address blocks: 69.165.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8b:37:bf:a9:93:0e:ad:3d:35:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=1b46c634-9923-476b-9557-52aedb989c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:ae:f9:d1:de:c0:13:08:e2:97:fb:52:5e: f0:24:93:06:1d:b1:7d:ec:69:36:2f:fa:0e:f5:2b: 72:17:a1:90:60:1b:fb:53:ba:96:e3:f3:95:1a:fe: e6:dc:e7:ae:ed:50:12:bf:d1:20:58:f2:3a:18:92: 78:4a:d1:58:8e:1a:fa:fd:ae:b9:54:1e:0a:5e:2b: c0:5c:18:63:ec:f5:fa:e4:82:b9:6a:da:cb:f3:ef: 03:89:a8:5f:a9:3e:43:6b:38:90:31:1b:21:2d:16: 9c:7b:5c:30:09:0f:92:6d:55:ec:76:06:ee:97:21: c6:9d:d5:40:62:ed:df:17:7d:04:51:7f:61:d9:13: c2:7d:34:58:e5:32:41:64:6f:d9:4e:6c:fd:ec:74: 14:77:6c:c2:1a:9b:10:ef:b3:58:c9:34:0e:25:e2: bc:1c:53:e3:aa:ed:cf:db:b5:a8:c0:54:7d:ad:68: 36:45:6e:5c:a7:e2:40:06:f7:a3:20:a8:1b:d6:fb: d0:72:34:7a:23:3b:f5:bd:9a:93:75:32:d4:b4:76: 5d:f5:9e:18:01:a5:5d:3a:06:57:16:30:d5:21:2c: 53:b3:69:95:09:04:57:ce:c7:d9:21:d1:1e:3b:29: 8a:a3:02:95:6e:be:cb:51:81:5d:d3:83:f9:0a:4c: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9F:A4:38:34:A2:8F:E1:30:1A:4D:20:9D:11:35:D6:F9:D0:79:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/ddb46e68-d0c9-3ed7-a921-4d5b7365dfcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 69.165.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f8:62:7c:14:e7:d1:f7:0c:1b:96:70:de:6f:1c:8a:98:78: 4e:aa:75:b4:2a:32:0c:a1:64:1f:3b:98:da:b5:08:ab:bc:bd: 04:2a:e8:ad:06:2a:db:0d:ee:cd:01:72:72:03:bf:42:cb:4e: b1:c0:bd:bb:19:c0:00:70:07:87:33:17:4e:ea:3e:75:8e:69: 9a:d0:58:a3:fb:be:6c:b7:da:50:c4:c7:17:f8:fc:59:b8:6f: 89:13:34:ec:32:39:42:eb:f3:ec:9e:eb:31:db:16:d3:61:9c: 68:20:b1:d0:e7:ce:55:e9:80:6e:64:13:0e:8f:41:5d:13:2c: 89:a0:9c:6e:e0:13:6b:db:2a:58:64:8f:b1:48:ed:6c:6e:eb: c8:c7:95:03:d4:eb:93:6b:d1:5a:35:f8:5e:1b:1c:23:91:02: 03:4d:a7:cf:4f:69:41:f2:29:58:5b:09:9c:d3:b1:30:9b:eb: 14:1b:75:68:8a:54:ad:49:ff:1b:25:20:4e:44:24:81:3d:b7: 45:2c:ab:4a:4d:47:9d:af:98:1e:df:5d:43:fc:db:93:7f:96: bb:4e:89:f8:62:59:4a:04:79:3a:4c:b1:7d:5c:3d:d4:15:c5: 38:2c:82:30:26:14:5b:a3:91:0c:73:38:c1:06:03:d3:e8:6f: 56:9e:b3:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYs3v6mTDq09NTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MWI0NmM2MzQtOTkyMy00NzZiLTk1NTctNTJhZWRiOTg5YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvmu+dHewBMI4pf7Ul7wJJMGHbF97Gk2L/oO 9StyF6GQYBv7U7qW4/OVGv7m3Oeu7VASv9EgWPI6GJJ4StFYjhr6/a65VB4KXivA XBhj7PX65IK5atrL8+8DiahfqT5DaziQMRshLRace1wwCQ+SbVXsdgbulyHGndVA Yu3fF30EUX9h2RPCfTRY5TJBZG/ZTmz97HQUd2zCGpsQ77NYyTQOJeK8HFPjqu3P 27WowFR9rWg2RW5cp+JABvejIKgb1vvQcjR6Izv1vZqTdTLUtHZd9Z4YAaVdOgZX FjDVISxTs2mVCQRXzsfZIdEeOymKowKVbr7LUYFd04P5CkzeQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmfpDg0oo/hMBpNIJ0RNdb50HlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvZGRiNDZlNjgtZDBjOS0z ZWQ3LWE5MjEtNGQ1YjczNjVkZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERaUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz4YnwU59H3DBuWcN5vHIqYeE6qdbQqMgyhZB87mNq1CKu8vQQq6K0G KtsN7s0BcnIDv0LLTrHAvbsZwABwB4czF07qPnWOaZrQWKP7vmy32lDExxf4/Fm4 b4kTNOwyOULr8+ye6zHbFtNhnGggsdDnzlXpgG5kEw6PQV0TLImgnG7gE2vbKlhk j7FI7Wxu68jHlQPU65Nr0Vo1+F4bHCORAgNNp89PaUHyKVhbCZzTsTCb6xQbdWiK VK1J/xslIE5EJIE9t0Usq0pNR52vmB7fXUP825N/lrtOifhiWUoEeTpMsX1cPdQV xTgsgjAmFFujkQxzOMEGA9Pob1aes60= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:09 2025 by rpki-client