$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa File: 3b17e899-4e7e-3822-926f-bb9ab91e287d.roa (raw, json) Hash identifier: wYgaDI5/rgSADQHfvbo9SvOuei7+y7Jv/jWkU7jU8x8= Subject key identifier: 94:14:6D:B1:B1:BA:4A:EA:43:D9:0F:A6:7D:A8:ED:07:0B:5D:0E:34 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584B8A500D5ABE275CE0633FC800 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa Signing time: Thu 16 Oct 2025 11:30:33 +0000 ROA not before: Thu 16 Oct 2025 11:30:33 +0000 ROA not after: Wed 14 Jan 2026 12:30:33 +0000 asID: 30383 IP address blocks: 198.208.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:50:0d:5a:be:27:5c:e0:63:3f:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Oct 16 11:30:33 2025 GMT Not After : Jan 14 12:30:33 2026 GMT Subject: CN=91fcac0a-0593-491c-a226-e0084326b854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:62:00:cc:69:b4:69:43:a9:bf:92:4f:2a: 52:0d:20:7e:20:2e:69:6f:2a:67:3d:df:a9:45:22: 25:7d:82:0c:f6:18:fa:d6:67:b2:e3:44:85:6c:f0: 63:ca:c1:f1:44:b5:91:81:c3:93:8f:2c:17:22:7e: fd:be:b6:3d:40:1c:23:cc:b1:92:8a:9a:9e:40:5d: 3a:98:fb:2e:8e:97:70:fd:f9:b9:b5:44:37:5a:c5: 7c:df:00:01:ce:11:22:14:df:34:82:d5:3b:95:29: fc:9a:5b:6f:99:3e:84:b4:4a:3f:a9:c3:30:ab:57: b5:ba:10:31:54:2a:8f:44:be:81:f9:17:50:4d:9e: 3f:02:90:fa:53:10:a0:ed:40:ec:c1:6e:5d:07:e5: cb:d0:21:d5:8b:9d:fd:4e:82:5d:4b:bf:12:82:03: 29:43:cb:9c:a1:f0:2e:e1:86:2c:ff:fc:8a:04:55: a8:53:24:43:9e:74:04:67:89:b7:4a:bf:f2:75:68: 85:98:89:17:a1:87:8e:31:77:ee:07:7b:b5:99:01: c4:a5:06:88:5f:e9:8f:0b:b5:66:37:2e:13:4a:4a: 2e:27:cc:4e:a4:df:99:90:39:74:7e:d9:79:bc:01: 64:1c:b6:d3:5b:a6:5a:c6:28:15:b0:0d:67:02:65: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:14:6D:B1:B1:BA:4A:EA:43:D9:0F:A6:7D:A8:ED:07:0B:5D:0E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:46:4c:cd:19:b7:2f:bb:a5:e5:1d:ff:7a:8d:4a:34:ec:79: 75:65:91:13:33:fa:9e:00:f2:9d:d2:a6:16:61:24:ed:98:8c: a7:24:e2:d2:9f:86:5e:b9:0a:f6:29:7a:c8:58:a6:04:da:b3: cb:9e:b4:20:e9:20:96:23:58:73:64:eb:ee:39:2c:f3:01:e5: 23:d5:cd:6e:40:12:9f:df:2e:70:33:83:30:70:f2:0a:ae:7a: ce:ec:4d:85:ef:c2:a6:fc:ce:14:58:f0:ca:a4:c3:d7:77:4b: 25:39:cb:9b:9f:2b:3d:ae:89:a1:b8:c2:ee:55:5e:2f:0b:a3: 0c:46:d0:f5:0e:6f:5a:8e:3f:a6:fe:0c:2e:69:40:8c:b5:95: e7:3f:d8:ab:98:ea:10:49:16:f2:e4:e4:e1:fc:69:ad:ad:e2: e5:4f:1a:bb:26:d0:62:ab:60:71:6e:d6:95:35:0e:54:e0:b6: 0b:04:c6:c2:3a:8b:cb:12:1a:6e:65:14:a3:2f:68:c2:a8:9a: 59:ad:5c:f1:db:c8:b7:6e:6d:d9:5e:81:6c:5b:bc:50:1f:e1: a2:d6:87:3f:62:f1:3d:e9:09:3b:f4:9b:7e:12:d5:f1:ba:db: cb:3b:e4:0b:3e:4d:d8:54:8c:6c:ac:f8:f6:7a:d3:52:dc:07: 02:04:e1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKUA1avidc4GM/yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MTAxNjExMzAzM1oXDTI2MDExNDEyMzAzM1owLzEtMCsGA1UEAxMk OTFmY2FjMGEtMDU5My00OTFjLWEyMjYtZTAwODQzMjZiODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGpiAMxptGlDqb+STypSDSB+IC5pbypnPd+p RSIlfYIM9hj61mey40SFbPBjysHxRLWRgcOTjywXIn79vrY9QBwjzLGSipqeQF06 mPsujpdw/fm5tUQ3WsV83wABzhEiFN80gtU7lSn8mltvmT6EtEo/qcMwq1e1uhAx VCqPRL6B+RdQTZ4/ApD6UxCg7UDswW5dB+XL0CHVi539ToJdS78SggMpQ8ucofAu 4YYs//yKBFWoUyRDnnQEZ4m3Sr/ydWiFmIkXoYeOMXfuB3u1mQHEpQaIX+mPC7Vm Ny4TSkouJ8xOpN+ZkDl0ftl5vAFkHLbTW6ZaxigVsA1nAmUtHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQUbbGxukrqQ9kPpn2o7QcLXQ40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvM2IxN2U4OTktNGU3ZS0z ODIyLTkyNmYtYmI5YWI5MWUyODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhGTM0Zty+7peUd/3qNSjTseXVlkRMz+p4A8p3SphZhJO2YjKck4tKf hl65CvYpeshYpgTas8uetCDpIJYjWHNk6+45LPMB5SPVzW5AEp/fLnAzgzBw8gqu es7sTYXvwqb8zhRY8Mqkw9d3SyU5y5ufKz2uiaG4wu5VXi8LowxG0PUOb1qOP6b+ DC5pQIy1lec/2KuY6hBJFvLk5OH8aa2t4uVPGrsm0GKrYHFu1pU1DlTgtgsExsI6 i8sSGm5lFKMvaMKomlmtXPHbyLdubdlegWxbvFAf4aLWhz9i8T3pCTv0m34S1fG6 28s75As+TdhUjGys+PZ601LcBwIE4Qk= -----END CERTIFICATE-----Generated at Tue Nov 4 09:41:46 2025 by rpki-client