$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa File: 37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa (raw, json) Hash identifier: 3xNzOfrSeWjQaJbk34DWkPBPoZi+v2xNeOwjsl/gni8= Subject key identifier: CD:28:1F:49:79:5B:7C:21:9F:DF:6C:42:5A:E6:C3:32:EC:F6:69:AA Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584B92DCDFD6502631A222A80580 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30041 IP address blocks: 69.173.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:df:d6:50:26:31:a2:22:a8:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=cd5d8037-3582-41fb-8baa-125f1dfd35a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:c2:a6:ff:71:05:43:f5:8d:15:f3:69:2e: 82:fe:7e:2a:d1:69:76:86:85:17:15:ad:b5:59:27: 85:ec:ef:08:fe:60:71:37:ef:e2:e4:20:6d:40:0e: 1c:7b:69:b9:ee:27:28:e8:36:82:49:27:54:d5:86: 9a:c1:ce:20:e4:3c:6d:eb:33:21:9f:0c:cb:f7:fc: 03:ff:93:56:0a:a1:ab:25:89:e6:c1:51:17:30:70: 65:05:be:87:ce:80:f9:c5:cf:3d:61:a6:31:36:fc: ee:82:a0:c0:c6:13:5c:67:56:10:a9:72:2d:8c:e9: 99:c6:e0:9e:08:a0:83:2f:e8:4e:df:41:b7:9a:81: ef:43:2d:6e:61:91:7b:61:26:2e:b6:ae:7f:be:92: 28:77:ab:fc:17:44:70:2e:1c:d8:4e:50:6f:7c:64: e1:e0:9e:85:08:fc:26:63:8b:c4:2e:ca:75:29:86: b3:39:dd:e3:91:f8:3d:c2:83:ea:99:42:44:0d:0f: 68:6b:c1:9b:18:f3:57:18:9f:c9:a6:ae:ae:95:49: 95:3f:cf:35:80:41:ba:1e:20:cd:9b:23:69:0f:a5: b4:23:3a:fb:f4:a0:7b:89:ca:66:db:59:63:7a:26: 92:4f:53:06:31:bb:e6:54:ab:fd:2a:0f:6d:b8:1d: c8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:1F:49:79:5B:7C:21:9F:DF:6C:42:5A:E6:C3:32:EC:F6:69:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 69.173.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:48:d1:26:04:16:c3:fe:d3:d5:fb:32:f6:57:0e:57:24:f8: 72:98:6b:17:dc:f0:b1:d8:86:e8:30:cf:9a:4f:f8:c8:74:d5: ea:4e:69:fd:dc:47:d3:26:05:2d:8a:0d:4f:0f:eb:cf:52:74: 01:51:1a:db:e4:ba:f9:0b:f6:bc:ea:87:6e:23:25:d5:32:ea: df:f5:9e:a1:86:bf:73:2c:f5:3f:c6:75:26:ec:b4:cc:36:d4: 1b:14:64:18:87:c2:27:7a:f1:64:ee:66:3e:25:37:51:eb:4c: 59:8e:63:b1:89:ff:a8:6c:15:86:b4:a1:96:9e:34:15:d9:24: 62:1d:72:12:81:c8:e8:77:be:f5:19:b3:bd:0e:9c:5f:19:a9: 49:59:8f:53:6d:dc:3e:19:0d:d3:7e:14:20:a3:29:18:d2:b5: 74:52:2a:7c:16:d6:99:89:c1:4f:b0:cc:af:87:01:6b:fe:e0: ee:b3:09:71:9c:15:a6:49:e4:4f:43:fa:b1:52:93:47:ba:5d: 80:ab:81:ba:bc:8e:81:5d:6d:0d:45:87:76:21:b9:69:13:71: 9c:7a:f1:fc:30:65:b0:e8:06:39:21:27:7e:35:bd:75:d8:a8: 0d:e5:21:ed:00:f9:3c:81:38:14:84:0d:2c:57:88:1a:3b:0e: 4d:97:d9:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3N/WUCYxoiKoBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Y2Q1ZDgwMzctMzU4Mi00MWZiLThiYWEtMTI1ZjFkZmQzNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnvCpv9xBUP1jRXzaS6C/n4q0Wl2hoUXFa21 WSeF7O8I/mBxN+/i5CBtQA4ce2m57ico6DaCSSdU1Yaawc4g5Dxt6zMhnwzL9/wD /5NWCqGrJYnmwVEXMHBlBb6HzoD5xc89YaYxNvzugqDAxhNcZ1YQqXItjOmZxuCe CKCDL+hO30G3moHvQy1uYZF7YSYutq5/vpIod6v8F0RwLhzYTlBvfGTh4J6FCPwm Y4vELsp1KYazOd3jkfg9woPqmUJEDQ9oa8GbGPNXGJ/Jpq6ulUmVP881gEG6HiDN myNpD6W0Izr79KB7icpm21ljeiaST1MGMbvmVKv9Kg9tuB3ILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0oH0l5W3whn99sQlrmwzLs9mmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvMzdiNWJiY2ItZjdjMS0z YWRhLTg2NmQtODkxOTkwYjVhZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERa2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhI0SYEFsP+09X7MvZXDlck+HKYaxfc8LHYhugwz5pP+Mh01epOaf3c R9MmBS2KDU8P689SdAFRGtvkuvkL9rzqh24jJdUy6t/1nqGGv3Ms9T/GdSbstMw2 1BsUZBiHwid68WTuZj4lN1HrTFmOY7GJ/6hsFYa0oZaeNBXZJGIdchKByOh3vvUZ s70OnF8ZqUlZj1Nt3D4ZDdN+FCCjKRjStXRSKnwW1pmJwU+wzK+HAWv+4O6zCXGc FaZJ5E9D+rFSk0e6XYCrgbq8joFdbQ1Fh3YhuWkTcZx68fwwZbDoBjkhJ341vXXY qA3lIe0A+TyBOBSEDSxXiBo7Dk2X2YQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:13 2025 by rpki-client