$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/18003bd3-0648-3b4e-83b4-4d262cfe2535.roa File: 18003bd3-0648-3b4e-83b4-4d262cfe2535.roa (raw, json) Hash identifier: FOaFP/KVsRkKJwC6hSD+/5Z3/vFz1E3LXZaKQ91+qSg= Subject key identifier: 70:CE:1D:D9:D4:38:9A:9D:D5:D5:C5:45:5F:B5:19:92:AB:2E:12:74 Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F4328584B2E5C5F15DA39AC46BB17CF80 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/18003bd3-0648-3b4e-83b4-4d262cfe2535.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 204.89.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:5f:15:da:39:ac:46:bb:17:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=4373196c-dee5-48c5-bd23-12e92a5a7a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:1c:94:28:0f:c9:3a:77:48:c9:2c:d5:bb: 4d:a1:4e:06:6c:d6:9a:f9:3a:e8:03:48:79:c8:14: 9d:79:ff:81:2a:8b:b2:37:be:18:95:86:27:d2:fe: 8f:d6:c7:76:21:6c:d9:80:25:04:37:bf:43:be:48: f6:ea:72:be:99:fc:aa:b7:9e:d9:e0:b5:39:73:64: bc:ee:7d:c8:7e:35:61:1d:90:29:01:8b:38:47:ba: 93:c9:f1:0b:d9:0d:6c:e0:7b:40:8e:03:9c:7e:b8: d0:84:09:20:e0:61:5f:ae:a9:63:2e:d6:35:8c:61: 76:5a:85:45:aa:86:9f:8b:00:b1:c1:24:eb:32:10: 16:94:bb:16:fe:71:a2:86:2f:d6:6d:49:13:d8:cd: d6:e4:db:90:2c:20:02:16:66:71:ca:8b:4d:15:4c: 14:74:53:7b:d4:d7:2a:c9:42:b9:82:1d:3b:18:39: 9f:e7:40:16:5c:71:b3:a5:06:80:16:0b:23:7b:58: ca:74:f7:8b:49:d6:15:91:a4:c2:9a:5d:a5:36:c6: 98:b1:d4:43:de:86:ee:11:09:87:5f:57:fd:eb:ae: 60:14:0c:00:f1:bc:59:77:8b:08:78:1d:6a:14:ed: 4b:31:ad:61:2f:f6:01:ac:35:87:b5:8c:15:17:52: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CE:1D:D9:D4:38:9A:9D:D5:D5:C5:45:5F:B5:19:92:AB:2E:12:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/18003bd3-0648-3b4e-83b4-4d262cfe2535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv4: 204.89.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ce:fb:fb:c5:05:18:6e:f8:05:bb:27:82:4c:90:88:e5:eb: b9:6f:44:dd:30:4c:0f:13:15:04:53:4e:03:05:5e:f0:90:36: dc:08:e3:28:78:e2:09:8a:10:e8:d2:fe:0d:86:03:98:c4:57: 52:93:69:c7:dc:8a:c9:2a:53:47:c4:68:70:be:96:63:9e:1f: 58:07:64:1c:4d:23:27:4f:e1:b6:b9:44:ca:a9:38:f7:3d:3f: 07:dd:c2:30:c0:d2:95:b6:ad:bd:79:60:61:58:57:8a:ea:4c: c6:8a:fe:cb:d6:ba:62:1f:56:cf:a1:ff:43:e8:a8:82:e3:68: e1:68:d4:c1:ed:93:91:3e:ec:c0:b3:22:a2:d2:c2:62:96:f0: d3:8c:ba:c8:74:08:01:08:77:26:43:97:78:5d:0e:12:4f:f6: 12:9f:b2:ed:15:22:b5:d0:0b:14:5c:28:fa:89:2a:91:f6:92: 7c:69:c5:67:46:cb:5d:0f:33:1c:b4:b5:3a:e9:0b:76:f4:cd: cd:b2:5e:a6:bd:d2:9a:1f:5e:4d:5a:89:4c:d2:d5:d7:c7:48: 44:8d:f5:17:60:81:5d:ea:56:9f:d5:2a:fa:3c:48:c0:ca:d9: f2:d8:43:20:72:12:69:0a:0d:d3:46:19:d0:9b:a2:70:a6:e3: 44:94:78:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXF8V2jmsRrsXz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NDM3MzE5NmMtZGVlNS00OGM1LWJkMjMtMTJlOTJhNWE3YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVkclCgPyTp3SMks1btNoU4GbNaa+TroA0h5 yBSdef+BKouyN74YlYYn0v6P1sd2IWzZgCUEN79Dvkj26nK+mfyqt57Z4LU5c2S8 7n3IfjVhHZApAYs4R7qTyfEL2Q1s4HtAjgOcfrjQhAkg4GFfrqljLtY1jGF2WoVF qoafiwCxwSTrMhAWlLsW/nGihi/WbUkT2M3W5NuQLCACFmZxyotNFUwUdFN71Ncq yUK5gh07GDmf50AWXHGzpQaAFgsje1jKdPeLSdYVkaTCml2lNsaYsdRD3obuEQmH X1f9665gFAwA8bxZd4sIeB1qFO1LMa1hL/YBrDWHtYwVF1Is6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDOHdnUOJqd1dXFRV+1GZKrLhJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMTgwMDNiZDMtMDY0OC0z YjRlLTgzYjQtNGQyNjJjZmUyNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFm1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfO+/vFBRhu+AW7J4JMkIjl67lvRN0wTA8TFQRTTgMFXvCQNtwI4yh4 4gmKEOjS/g2GA5jEV1KTacfciskqU0fEaHC+lmOeH1gHZBxNIydP4ba5RMqpOPc9 PwfdwjDA0pW2rb15YGFYV4rqTMaK/svWumIfVs+h/0PoqILjaOFo1MHtk5E+7MCz IqLSwmKW8NOMush0CAEIdyZDl3hdDhJP9hKfsu0VIrXQCxRcKPqJKpH2knxpxWdG y10PMxy0tTrpC3b0zc2yXqa90pofXk1aiUzS1dfHSESN9RdggV3qVp/VKvo8SMDK 2fLYQyByEmkKDdNGGdCbonCm40SUeC0= -----END CERTIFICATE-----Generated at Mon Nov 3 08:36:39 2025 by rpki-client