$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa File: c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (raw, json) Hash identifier: i0jNwtUZVw6poa89OWwAjjjbypek+2YkM0eCuCdeoJQ= Subject key identifier: C6:61:F1:2A:5B:C2:C2:A4:DE:68:F1:72:DF:D1:40:A5:83:61:E3:19 Certificate issuer: /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Certificate serial: 010D0C9F4328584AE0311BC66F8C3F0A9E46A780 Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 398803 IP address blocks: 136.175.44.0/22 maxlen: 24 2602:fd08::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:1b:c6:6f:8c:3f:0a:9e:46:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=a78d69a3-a231-4938-82f3-45243ff60af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:2f:3f:24:07:b0:4a:57:f5:9a:dc:07:65: b1:97:d4:df:4f:e6:de:18:ae:d1:9f:de:8a:a6:83: 5a:c7:8f:e3:93:e9:a1:bd:f5:00:cb:49:f7:c6:36: d1:5f:62:6b:6e:e6:3e:5d:12:4c:ec:b6:1d:cb:5f: 2e:a1:a1:c6:68:77:9a:d3:9f:d6:f0:d5:de:da:70: ec:7d:b4:79:44:68:9a:42:e4:ad:07:30:b0:44:99: 2c:7e:33:e0:13:47:7f:6f:e8:d1:95:fb:2f:8f:33: 32:3a:8b:c3:35:66:0b:9d:20:5a:0b:32:fb:5f:2a: 66:84:f2:65:23:f2:65:95:e7:8f:e2:40:34:47:8d: 5e:81:29:94:a4:ef:12:ae:cc:95:12:55:cc:22:12: 3d:4d:b3:ce:1d:5e:d2:d2:fb:cd:f1:78:2d:9e:66: 02:ae:07:4a:d3:23:e2:f5:c6:72:f9:53:06:c3:74: f0:b7:1d:f1:4a:c6:35:72:60:fd:f3:3b:96:7e:a4: 06:d2:56:e1:a9:af:bc:9b:3a:ce:25:d0:c6:0f:fe: da:c6:34:7d:fb:6d:e7:b6:c0:76:c0:4d:8d:c9:ec: 7b:58:98:3b:21:c2:6a:4b:7a:e0:de:57:b2:93:62: 55:fc:2e:f0:97:4c:44:ae:cc:eb:fd:e0:63:f7:c5: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:61:F1:2A:5B:C2:C2:A4:DE:68:F1:72:DF:D1:40:A5:83:61:E3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl X509v3 Authority Key Identifier: keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer sbgp-ipAddrBlock: critical IPv4: 136.175.44.0/22 IPv6: 2602:fd08::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2a:91:e9:18:f3:95:8f:26:f3:cb:21:85:2d:cc:bd:7b:d8: 62:d7:77:b0:f2:20:10:0c:d5:b8:94:3a:1e:d0:c5:47:df:02: c7:99:09:26:be:95:d8:26:56:8d:ec:19:b7:57:1a:20:50:58: 1c:a7:02:b7:71:03:1b:ca:ce:5c:09:b1:a9:94:3f:a7:16:2a: 37:e1:cf:76:0c:0b:c4:1d:25:2c:19:18:85:b7:a0:a0:e9:00: 2d:de:8b:3e:f9:d8:d7:aa:b9:65:75:62:88:57:4f:6b:1e:51: 98:2a:00:13:2d:13:8a:34:18:ba:8f:d2:01:79:73:db:64:a5: 02:7e:17:ab:ba:c5:69:49:12:c4:2c:36:b5:00:53:88:54:96: 05:b1:00:e4:74:72:41:ec:0d:33:2f:f8:bd:2a:55:69:68:38: 9a:21:15:51:5f:73:b6:7d:cb:8e:5c:2e:08:01:b2:6a:94:10: 61:a0:77:90:34:bd:b7:e3:16:be:13:ff:20:d5:17:49:4b:fd: ac:ba:58:c0:de:62:15:c6:eb:99:0e:4a:63:c0:1f:df:44:d3: de:0f:e3:a3:3d:2b:d4:d6:9a:cf:db:c2:27:be:41:74:33:8f: 7c:5b:89:88:97:8a:67:d9:16:1b:86:fc:59:4b:ac:ed:16:52: 79:9e:e9:00 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErgMRvGb4w/Cp5Gp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFkMDg2OTItN2RlMS00OTczLWI3YWUtNWEwMzk3ZTZi NjBjMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk YTc4ZDY5YTMtYTIzMS00OTM4LTgyZjMtNDUyNDNmZjYwYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC4vPyQHsEpX9ZrcB2Wxl9TfT+beGK7Rn96K poNax4/jk+mhvfUAy0n3xjbRX2JrbuY+XRJM7LYdy18uoaHGaHea05/W8NXe2nDs fbR5RGiaQuStBzCwRJksfjPgE0d/b+jRlfsvjzMyOovDNWYLnSBaCzL7XypmhPJl I/JlleeP4kA0R41egSmUpO8SrsyVElXMIhI9TbPOHV7S0vvN8XgtnmYCrgdK0yPi 9cZy+VMGw3Twtx3xSsY1cmD98zuWfqQG0lbhqa+8mzrOJdDGD/7axjR9+23ntsB2 wE2Nyex7WJg7IcJqS3rg3leyk2JV/C7wl0xErszr/eBj98WJ3wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMZh8SpbwsKk3mjxct/RQKWDYeMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MWQw ODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAzOTdlNmI2MGMvYzNjZmJhYmItNDA1NS0z ZDhmLTg3ZTktMzM5YTIyZjQ2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzFkMDg2OTItN2RlMS00OTczLWI3 YWUtNWEwMzk3ZTZiNjBjLzcxZDA4NjkyLTdkZTEtNDk3My1iN2FlLTVhMDM5N2U2 YjYwYy5jcmwwHwYDVR0jBBgwFoAUsY6RxJzyR2i+Iqp+7ZLAkU6999swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MWQwODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAz OTdlNmI2MGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCiK8sMA4E AgACMAgDBgQmAv0IADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsKpHpGPOVjybzyyGFLcy9e9hi13ew8iAQ DNW4lDoe0MVH3wLHmQkmvpXYJlaN7Bm3VxogUFgcpwK3cQMbys5cCbGplD+nFio3 4c92DAvEHSUsGRiFt6Cg6QAt3os++djXqrlldWKIV09rHlGYKgATLROKNBi6j9IB eXPbZKUCfherusVpSRLELDa1AFOIVJYFsQDkdHJB7A0zL/i9KlVpaDiaIRVRX3O2 fcuOXC4IAbJqlBBhoHeQNL234xa+E/8g1RdJS/2suljA3mIVxuuZDkpjwB/fRNPe D+OjPSvU1prP28InvkF0M498W4mIl4pn2RYbhvxZS6ztFlJ5nukA -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:37 2025 by rpki-client