$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa File: 9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa (raw, json) Hash identifier: CBE/5GtkNi9wyNEuWb7FRvd8vAt1EMbGKeVyED6DvK4= Subject key identifier: 56:A3:CB:43:47:5F:0C:D9:A9:95:EF:02:26:D1:A1:88:C9:BD:34:2B Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584B2A2C3651C9BEB7DBA7FB5900 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 25697 IP address blocks: 209.151.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:36:51:c9:be:b7:db:a7:fb:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=92e530be-c610-41b9-86cf-3cadcc4e8eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:ed:b0:57:37:50:df:c4:40:32:03:86:42: 2f:4a:42:f8:77:23:eb:89:a0:77:25:8a:e4:58:83: e9:a0:ff:ad:b4:ab:7f:ed:f8:ab:4f:97:8a:2e:46: 6f:a5:9a:15:47:1a:4d:61:11:79:ce:5a:f0:61:06: 34:7d:15:3a:d0:0f:16:44:81:5f:c6:19:e1:47:fa: f9:8d:f6:d9:bf:b1:87:e5:36:c9:a8:ce:a2:d7:4c: ae:01:a1:bd:eb:4e:70:c1:7a:73:80:2a:94:5a:c7: 7c:42:df:af:27:23:42:ff:46:61:d8:ec:9e:6c:94: ec:7a:b0:ad:a8:ca:4c:d9:4c:cb:c5:0c:15:9c:19: 60:60:1a:df:cd:9b:4d:66:f6:d2:6f:d2:f7:50:a6: d3:ee:eb:c1:a2:0e:de:1d:43:7a:71:6d:e4:70:bc: 55:17:54:cc:ef:a5:61:e2:58:47:6a:28:75:16:46: 0f:41:4a:14:c7:34:c9:fc:c6:65:a6:b7:1c:a9:84: 72:da:97:b1:2d:b6:72:3b:34:ec:c4:2a:1a:ff:c3: 99:b1:3e:c9:8a:5e:f9:ab:ce:3b:af:53:9a:af:d9: 8b:f3:7f:d7:0e:94:11:1e:0f:39:ca:00:c5:21:a5: 5b:e5:b7:11:aa:ba:93:a4:d1:fe:fd:ba:3f:34:cf: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A3:CB:43:47:5F:0C:D9:A9:95:EF:02:26:D1:A1:88:C9:BD:34:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e2:82:61:d4:20:20:af:ad:72:5e:a8:a7:a9:80:3e:57:6d: 56:48:41:7a:eb:59:c6:73:26:c3:44:6b:94:9c:4f:a7:2b:33: 2a:a6:d2:5d:e5:73:89:50:ca:c4:f6:d5:0c:13:96:91:8f:b6: b3:24:9f:84:bd:32:40:cb:fb:e6:44:13:ca:77:ad:22:f1:15: 01:9b:c4:45:a0:68:34:73:34:26:b6:16:bf:84:da:13:54:e2: 50:7a:d9:fa:65:9d:3e:1e:19:66:67:dd:7c:9f:26:58:3a:d6: f8:5e:f5:37:1d:49:71:a3:75:4d:17:f5:18:3e:48:d6:bd:f0: 9c:25:dc:9d:92:9f:0a:e0:d5:8e:2f:8b:90:d2:93:68:0a:87: b6:1c:29:38:13:7a:2b:5b:6b:2b:46:81:8b:f4:e1:3c:78:ec: e0:1d:24:e1:e4:37:96:42:87:bf:f9:f7:fb:7b:fd:ab:93:67: 9d:7c:8f:0b:5c:f3:f3:f4:3f:d3:13:0f:b0:6a:c6:7b:12:fb: c9:e2:11:0d:29:90:e1:09:35:a0:77:c4:29:52:db:09:f4:66: 0f:1c:65:28:a0:04:ea:4a:79:48:42:09:42:2d:a2:75:93:7b: 61:f8:e0:dc:4d:2c:44:31:1a:54:48:6f:8a:ee:a4:27:e0:7c: 15:99:00:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDZRyb6326f7WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OTJlNTMwYmUtYzYxMC00MWI5LTg2Y2YtM2NhZGNjNGU4ZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZjtsFc3UN/EQDIDhkIvSkL4dyPriaB3JYrk WIPpoP+ttKt/7firT5eKLkZvpZoVRxpNYRF5zlrwYQY0fRU60A8WRIFfxhnhR/r5 jfbZv7GH5TbJqM6i10yuAaG9605wwXpzgCqUWsd8Qt+vJyNC/0Zh2OyebJTserCt qMpM2UzLxQwVnBlgYBrfzZtNZvbSb9L3UKbT7uvBog7eHUN6cW3kcLxVF1TM76Vh 4lhHaih1FkYPQUoUxzTJ/MZlprccqYRy2pexLbZyOzTsxCoa/8OZsT7Jil75q847 r1Oar9mL83/XDpQRHg85ygDFIaVb5bcRqrqTpNH+/bo/NM9l8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFajy0NHXwzZqZXvAibRoYjJvTQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvOWFjZjQ3YmEtODE5Ny0z NTk4LTk4ZmUtZDc1NDRiN2M2ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3igmHUICCvrXJeqKepgD5XbVZIQXrrWcZzJsNEa5ScT6crMyqm0l3l c4lQysT21QwTlpGPtrMkn4S9MkDL++ZEE8p3rSLxFQGbxEWgaDRzNCa2Fr+E2hNU 4lB62fplnT4eGWZn3XyfJlg61vhe9TcdSXGjdU0X9Rg+SNa98Jwl3J2Snwrg1Y4v i5DSk2gKh7YcKTgTeitbaytGgYv04Tx47OAdJOHkN5ZCh7/59/t7/auTZ518jwtc 8/P0P9MTD7BqxnsS+8niEQ0pkOEJNaB3xClS2wn0Zg8cZSigBOpKeUhCCUItonWT e2H44NxNLEQxGlRIb4rupCfgfBWZAAQ= -----END CERTIFICATE-----Generated at Fri Sep 19 16:02:34 2025 by rpki-client