$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/339b97a0-f1f4-35d1-8b69-acbddcd19122.roa File: 339b97a0-f1f4-35d1-8b69-acbddcd19122.roa (raw, json) Hash identifier: JtstNYuhqeuUaqL7mE/vemkspfQtGW9+EEpzaHdQCio= Subject key identifier: 3C:46:2E:BE:F5:61:1A:68:29:4B:E1:2D:3F:D1:66:4E:2F:08:89:3E Certificate issuer: /CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b Certificate serial: 010D0C9F4328584B26814F1FA77C95C80560BAF8 Authority key identifier: C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/339b97a0-f1f4-35d1-8b69-acbddcd19122.roa Signing time: Wed 10 Sep 2025 17:28:58 +0000 ROA not before: Wed 10 Sep 2025 17:28:58 +0000 ROA not after: Tue 09 Dec 2025 18:28:58 +0000 asID: 399589 IP address blocks: 208.95.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:81:4f:1f:a7:7c:95:c8:05:60:ba:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b Validity Not Before: Sep 10 17:28:58 2025 GMT Not After : Dec 9 18:28:58 2025 GMT Subject: CN=aec47cc6-50b4-4f19-a0cd-7972347df26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:21:7b:ff:8f:15:f1:60:d2:d0:15:3e:a6: e2:8e:f0:ce:c2:28:02:61:9f:aa:a9:c3:4e:5a:9e: 8c:46:ed:8b:38:ff:a3:e2:63:a3:ca:c4:46:e0:12: b4:cb:95:49:4a:68:eb:86:52:a4:10:33:d7:18:36: 62:e4:89:7c:95:ff:43:aa:1c:89:7c:ae:77:bb:86: 2f:0e:40:58:87:21:fe:34:28:53:d3:ec:bc:56:58: fe:9d:8f:e8:6d:73:69:6f:0f:28:37:06:a7:28:b8: 3f:d6:1d:58:1f:30:80:96:6f:6b:e0:04:d6:95:ee: 4f:86:67:ee:b6:59:78:c0:71:4a:e0:7c:6e:9e:97: e3:48:4a:c1:1f:9e:d9:c8:21:95:a9:f8:cb:c6:b2: 65:a0:7a:43:5c:41:56:38:e8:2f:dd:46:8b:11:10: 75:94:af:44:c5:ec:ef:56:64:df:8f:3c:97:0a:b6: d0:63:e8:51:63:8e:33:4d:24:f2:6c:b2:e6:8f:e0: 97:df:fe:1c:06:2a:6b:24:c5:4f:bd:46:c1:5a:74: 3b:28:16:0d:c7:c3:55:fa:46:2d:12:ea:aa:bc:13: e4:53:c4:63:4f:8b:37:e9:6e:31:b8:84:00:a7:97: ec:c1:fa:86:02:4a:12:12:f5:6f:d3:ce:7d:da:72: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:2E:BE:F5:61:1A:68:29:4B:E1:2D:3F:D1:66:4E:2F:08:89:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/339b97a0-f1f4-35d1-8b69-acbddcd19122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl X509v3 Authority Key Identifier: keyid:C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer sbgp-ipAddrBlock: critical IPv4: 208.95.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:78:ee:c6:36:b4:b0:06:4f:6a:c6:eb:0b:26:33:41:10:c2: 70:02:31:5b:c9:f0:3c:c1:8e:fe:d0:c2:ff:0e:4c:4c:89:80: 12:59:fa:d1:3a:bf:c2:ab:98:98:ee:88:39:72:a1:8c:78:54: ce:60:06:89:79:80:c6:3c:54:26:e9:b8:0c:83:a4:5b:38:5a: 5b:82:ec:95:c3:56:07:ae:c6:30:6f:db:91:e5:31:f2:4a:99: 30:5f:75:c3:ea:8f:55:84:61:63:fa:f4:1c:be:16:c0:c5:d3: 1c:57:bf:b2:1b:06:62:62:f7:f1:30:e2:ba:83:06:cc:da:a2: 6e:42:e1:34:7f:fe:3e:7e:36:c0:31:e6:28:de:af:67:74:d2: 86:07:0c:69:63:fb:6a:2f:0a:51:de:85:39:9e:0a:8a:a2:9d: 0a:84:d8:aa:b7:60:88:58:c7:a8:05:e8:d1:79:23:a3:6e:e7: 3e:cf:87:0f:4e:e9:e5:59:50:61:0b:d2:45:6c:6d:71:4e:5a: 01:61:31:ed:34:c8:61:5f:f1:ce:21:ee:93:1c:bb:2f:ae:46: 25:1e:5d:f5:8d:64:2c:c1:26:76:2c:a8:77:6e:27:2b:1f:a5: 40:2d:93:cc:c1:3d:f7:8f:01:38:09:c8:35:0e:d7:10:7f:60: b8:91:39:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmgU8fp3yVyAVguvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ5MmYyMWEtZDIyZS00MDcyLThhNGMtZmRjNGM2NDgz ZTRiMB4XDTI1MDkxMDE3Mjg1OFoXDTI1MTIwOTE4Mjg1OFowLzEtMCsGA1UEAxMk YWVjNDdjYzYtNTBiNC00ZjE5LWEwY2QtNzk3MjM0N2RmMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorohe/+PFfFg0tAVPqbijvDOwigCYZ+qqcNO Wp6MRu2LOP+j4mOjysRG4BK0y5VJSmjrhlKkEDPXGDZi5Il8lf9DqhyJfK53u4Yv DkBYhyH+NChT0+y8Vlj+nY/obXNpbw8oNwanKLg/1h1YHzCAlm9r4ATWle5Phmfu tll4wHFK4HxunpfjSErBH57ZyCGVqfjLxrJloHpDXEFWOOgv3UaLERB1lK9Exezv VmTfjzyXCrbQY+hRY44zTSTybLLmj+CX3/4cBiprJMVPvUbBWnQ7KBYNx8NV+kYt EuqqvBPkU8RjT4s36W4xuIQAp5fswfqGAkoSEvVv08592nKZDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxGLr71YRpoKUvhLT/RZk4vCIk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDky ZjIxYS1kMjJlLTQwNzItOGE0Yy1mZGM0YzY0ODNlNGIvMzM5Yjk3YTAtZjFmNC0z NWQxLThiNjktYWNiZGRjZDE5MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ5MmYyMWEtZDIyZS00MDcyLThh NGMtZmRjNGM2NDgzZTRiL2FkOTJmMjFhLWQyMmUtNDA3Mi04YTRjLWZkYzRjNjQ4 M2U0Yi5jcmwwHwYDVR0jBBgwFoAUwtdU4ghNEhYZOMu5sSyV5pNBHT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDkyZjIxYS1kMjJlLTQwNzItOGE0Yy1mZGM0 YzY0ODNlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF47sY2tLAGT2rG6wsmM0EQwnACMVvJ8DzBjv7Qwv8OTEyJgBJZ+tE6 v8KrmJjuiDlyoYx4VM5gBol5gMY8VCbpuAyDpFs4WluC7JXDVgeuxjBv25HlMfJK mTBfdcPqj1WEYWP69By+FsDF0xxXv7IbBmJi9/Ew4rqDBszaom5C4TR//j5+NsAx 5ijer2d00oYHDGlj+2ovClHehTmeCoqinQqE2Kq3YIhYx6gF6NF5I6Nu5z7Phw9O 6eVZUGEL0kVsbXFOWgFhMe00yGFf8c4h7pMcuy+uRiUeXfWNZCzBJnYsqHduJysf pUAtk8zBPfePATgJyDUO1xB/YLiROXk= -----END CERTIFICATE-----Generated at Mon Nov 3 14:44:58 2025 by rpki-client