$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa File: f42044dc-4bba-3889-9d93-7be101a8b14b.roa (raw, json) Hash identifier: 4HnHf9GBLbUK09mMEXuv1Sry32behQG1UfapVWpre4Y= Subject key identifier: C1:63:F9:51:09:D3:B8:56:E8:78:AD:A5:F8:3B:0E:03:3A:14:F9:0C Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F4328584B1806D75C7E481FB47940B500 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 400928 IP address blocks: 76.164.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d7:5c:7e:48:1f:b4:79:40:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ff87b719-1136-4a54-8da3-15787bd0bbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:6c:07:bf:8b:dd:55:89:0f:3d:ad:3f:f0: 66:13:a8:c8:3c:e9:e4:bd:f7:95:89:3f:61:c6:78: cf:d4:fd:77:46:fb:71:4e:2e:1e:b0:67:b9:5d:4a: ee:64:62:54:ec:86:a2:cb:89:95:1b:6c:c3:17:6e: 34:05:92:06:d9:03:98:c1:9f:e8:53:14:1d:37:e5: ab:79:b3:72:0c:58:34:68:df:da:a2:94:20:2b:43: bd:a6:fb:bb:59:7b:5d:37:7d:b6:83:c6:37:5b:ef: ce:aa:2a:3c:30:5a:2e:ac:59:e3:9b:49:ac:3b:03: 5c:3c:ea:e4:0c:b9:11:49:76:a0:4c:a0:7f:62:a7: f6:ea:4d:22:c3:68:ed:87:82:0e:f5:49:98:ea:a3: 10:df:fd:94:68:ae:f4:c9:0e:1b:73:55:cb:a6:84: b9:3f:08:72:9d:37:e2:ce:b2:7c:a9:7b:96:ed:9f: be:2c:79:87:a7:8e:ec:b8:c3:1e:18:11:be:1b:65: ba:3b:15:3e:10:a6:93:35:3f:f7:f4:8c:21:fc:fb: 9d:ad:e2:8d:e6:e6:cb:60:2d:41:33:2d:d4:8c:90: b0:e9:2c:62:6b:b6:24:06:16:c3:37:9a:46:c9:a9: d9:f4:ae:3f:43:6f:a2:46:83:81:23:92:9b:13:28: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:63:F9:51:09:D3:B8:56:E8:78:AD:A5:F8:3B:0E:03:3A:14:F9:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv4: 76.164.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:08:66:51:65:54:bb:2c:2f:af:1e:0c:42:a3:82:50:b9:22: 2a:59:04:e2:65:52:8a:f5:de:55:16:8a:eb:24:41:dd:79:35: 4d:c4:13:56:14:07:19:b1:a7:d1:1d:3e:5e:bd:54:19:ec:8a: e5:c4:1e:08:4f:df:0d:dd:f5:ea:13:f1:14:5a:f7:ba:51:22: 71:b7:30:a6:d2:1e:fb:ac:5c:77:f9:c8:64:cc:dc:80:d5:f2: 57:f4:42:09:97:08:0c:b6:30:05:b7:be:96:c3:c5:e2:6c:2c: ed:19:aa:c3:d5:0b:69:e3:e6:3f:80:51:b7:b7:ae:55:5d:8a: 02:9d:ef:64:1a:8d:28:72:1a:b9:95:bd:44:99:24:de:b5:d3: 20:b8:fe:db:d9:dd:4b:11:3a:e8:a3:8a:7e:8f:5a:40:83:e0: 49:18:5d:e5:e3:9b:92:f3:a9:ea:32:1c:c4:26:fd:56:6c:b4: dc:3b:bd:d1:e9:60:f7:1b:32:57:c0:a5:69:a4:26:33:26:50: 75:2e:92:53:5f:8a:11:5a:e6:10:23:ca:e9:ac:f8:9e:e4:5c: b0:c2:89:88:bd:ca:eb:be:30:99:53:3e:74:e8:57:6e:8a:db: 3e:07:b8:be:0d:03:c9:11:08:71:98:19:85:f3:e5:70:0d:a1: bf:c2:33:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtdcfkgftHlAtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmY4N2I3MTktMTEzNi00YTU0LThkYTMtMTU3ODdiZDBiYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis9sB7+L3VWJDz2tP/BmE6jIPOnkvfeViT9h xnjP1P13RvtxTi4esGe5XUruZGJU7Iaiy4mVG2zDF240BZIG2QOYwZ/oUxQdN+Wr ebNyDFg0aN/aopQgK0O9pvu7WXtdN322g8Y3W+/Oqio8MFourFnjm0msOwNcPOrk DLkRSXagTKB/Yqf26k0iw2jth4IO9UmY6qMQ3/2UaK70yQ4bc1XLpoS5PwhynTfi zrJ8qXuW7Z++LHmHp47suMMeGBG+G2W6OxU+EKaTNT/39Iwh/PudreKN5ubLYC1B My3UjJCw6Sxia7YkBhbDN5pGyanZ9K4/Q2+iRoOBI5KbEyiUjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFj+VEJ07hW6Hitpfg7DgM6FPkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvZjQyMDQ0ZGMtNGJiYS0z ODg5LTlkOTMtN2JlMTAxYThiMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYIZlFlVLssL68eDEKjglC5IipZBOJlUor13lUWiuskQd15NU3EE1YU Bxmxp9EdPl69VBnsiuXEHghP3w3d9eoT8RRa97pRInG3MKbSHvusXHf5yGTM3IDV 8lf0QgmXCAy2MAW3vpbDxeJsLO0ZqsPVC2nj5j+AUbe3rlVdigKd72QajShyGrmV vUSZJN610yC4/tvZ3UsROuijin6PWkCD4EkYXeXjm5LzqeoyHMQm/VZstNw7vdHp YPcbMlfApWmkJjMmUHUuklNfihFa5hAjyums+J7kXLDCiYi9yuu+MJlTPnToV26K 2z4HuL4NA8kRCHGYGYXz5XANob/CM5E= -----END CERTIFICATE-----Generated at Wed Sep 17 20:34:37 2025 by rpki-client