$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa File: ad644e07-d08c-3cd4-9561-0b393653ed46.roa (raw, json) Hash identifier: vjCSjs3Bxg/HDMNS7PDKCQCLoHIZSUjb+2dRU3WHljQ= Subject key identifier: 44:90:85:74:93:70:89:CA:E2:58:1D:40:EF:48:C8:69:D1:31:9F:E1 Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Certificate serial: 010D0C9F4328584AD23BAC4394ADA5FC81069D40 Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 60171 IP address blocks: 139.64.228.0/22 maxlen: 24 2605:ba40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ac:43:94:ad:a5:fc:81:06:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=3a9fd00a-18d2-4960-9f15-5e1ac2cd149b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5f:0a:fc:43:bd:60:85:36:e2:5b:b7:4b:e2: 68:ff:74:ca:d7:73:c3:6e:86:27:38:67:43:fe:89: 73:06:d5:6e:3f:5e:54:86:3c:a5:67:eb:50:3f:84: 30:77:a8:dd:f3:2e:9a:cf:a1:a9:08:84:1e:34:af: ce:f7:fc:db:c4:91:4f:b8:55:fc:e0:0b:ac:47:42: 3e:22:72:2c:1e:35:fe:76:2b:e1:fe:f0:ca:12:63: ed:02:a6:6b:52:94:7a:46:42:f6:bc:39:22:1d:92: 43:f7:a7:2c:06:2b:e9:56:5e:52:21:cc:ef:19:a8: 5a:c7:bf:f7:d1:ad:9d:11:27:08:10:2c:59:5f:4b: 2a:fa:41:ab:c9:dd:25:cb:b3:5a:50:c7:4a:74:c6: 6a:59:1e:42:1f:0d:a4:22:7c:1d:f3:46:84:75:c5: 5e:e4:8e:02:3f:d9:da:48:9f:c0:10:f5:5c:04:6e: d3:5d:92:e3:ce:a9:62:d2:2b:a3:fd:d0:68:c4:f2: bf:70:e4:1e:c5:51:66:8a:ae:38:14:f2:2c:34:b5: bb:8f:6e:f9:55:a6:14:eb:aa:bb:b6:9e:03:ca:15: 5a:54:af:3f:78:4e:a1:31:86:1e:7b:02:6c:72:fa: a0:c8:ee:32:f9:42:79:35:f0:ad:d3:ac:8f:3b:0b: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:90:85:74:93:70:89:CA:E2:58:1D:40:EF:48:C8:69:D1:31:9F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl X509v3 Authority Key Identifier: keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer sbgp-ipAddrBlock: critical IPv4: 139.64.228.0/22 IPv6: 2605:ba40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1a:29:f8:c8:fa:2b:cf:7a:08:2b:b6:a2:ff:d5:b2:d5:ff: 89:49:56:f7:cf:01:01:e8:e6:96:17:39:49:7a:9c:e6:fd:77: d3:eb:93:87:71:ca:e1:2c:28:78:31:94:99:69:69:d7:e9:89: d8:36:aa:b2:9e:52:36:f2:5b:82:4d:d2:d9:96:8e:22:0f:2a: 3c:c8:b4:dc:d6:03:08:7f:e4:96:2a:98:40:bb:0b:98:99:d1: 63:8c:0d:f9:b4:67:0c:c1:99:23:42:bb:fa:ab:b7:e5:95:53: 48:42:71:6a:80:f0:ac:8d:e6:2f:d1:72:d1:6d:75:c1:13:eb: 6b:6d:b8:a8:dc:b0:61:8d:c9:02:38:8f:19:5b:d3:f6:05:46: c5:8a:74:fd:9f:2f:31:d8:c3:51:61:bb:2f:88:fd:43:fb:5d: 3a:74:80:10:f2:23:63:0b:20:7f:d5:92:d4:23:dd:b4:91:c8: 40:ee:9c:89:ce:53:06:c0:92:21:8c:3e:35:a7:28:23:c5:5f: 88:9e:8d:93:d4:24:a2:a5:57:a3:f7:68:bc:e8:d6:37:2e:94: be:97:a5:b2:3d:e2:46:5a:13:a1:ab:2f:b6:77:41:09:e8:5d: f1:1e:b8:30:49:54:18:22:72:db:72:a9:aa:bc:44:1b:fb:38: f1:21:e0:12 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErSO6xDlK2l/IEGnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiZjZhYTItN2I3Zi00NmI0LWJkZjItZGQ0ZDA3NWUy NjZmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk M2E5ZmQwMGEtMThkMi00OTYwLTlmMTUtNWUxYWMyY2QxNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA718K/EO9YIU24lu3S+Jo/3TK13PDboYnOGdD /olzBtVuP15UhjylZ+tQP4Qwd6jd8y6az6GpCIQeNK/O9/zbxJFPuFX84AusR0I+ InIsHjX+divh/vDKEmPtAqZrUpR6RkL2vDkiHZJD96csBivpVl5SIczvGahax7/3 0a2dEScIECxZX0sq+kGryd0ly7NaUMdKdMZqWR5CHw2kInwd80aEdcVe5I4CP9na SJ/AEPVcBG7TXZLjzqli0iuj/dBoxPK/cOQexVFmiq44FPIsNLW7j275VaYU66q7 tp4DyhVaVK8/eE6hMYYeewJscvqgyO4y+UJ5NfCt06yPOwsUuQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFESQhXSTcInK4lgdQO9IyGnRMZ/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jm NmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRkMDc1ZTI2NmYvYWQ2NDRlMDctZDA4Yy0z Y2Q0LTk1NjEtMGIzOTM2NTNlZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiZjZhYTItN2I3Zi00NmI0LWJk ZjItZGQ0ZDA3NWUyNjZmL2YzYmY2YWEyLTdiN2YtNDZiNC1iZGYyLWRkNGQwNzVl MjY2Zi5jcmwwHwYDVR0jBBgwFoAUoAvAWaLOXCsgeuKQi8raTgSC9UkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JmNmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRk MDc1ZTI2NmYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCi0DkMA0E AgACMAcDBQAmBbpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABAaKfjI+ivPeggrtqL/1bLV/4lJVvfPAQHo 5pYXOUl6nOb9d9Prk4dxyuEsKHgxlJlpadfpidg2qrKeUjbyW4JN0tmWjiIPKjzI tNzWAwh/5JYqmEC7C5iZ0WOMDfm0ZwzBmSNCu/qrt+WVU0hCcWqA8KyN5i/RctFt dcET62ttuKjcsGGNyQI4jxlb0/YFRsWKdP2fLzHYw1Fhuy+I/UP7XTp0gBDyI2ML IH/VktQj3bSRyEDunInOUwbAkiGMPjWnKCPFX4iejZPUJKKlV6P3aLzo1jculL6X pbI94kZaE6GrL7Z3QQnoXfEeuDBJVBgicttyqaq8RBv7OPEh4BI= -----END CERTIFICATE-----Generated at Fri Oct 24 23:31:25 2025 by rpki-client