$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa File: 30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa (raw, json) Hash identifier: FZ2CFGs/N5YK6loYt4QfbGv5/E7D5ILxAm5KHs2ekdQ= Subject key identifier: 32:6E:9E:14:A6:7F:F4:A4:13:BD:AD:EF:87:57:82:61:DE:DB:E0:26 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B95A790807361A661E2ABA200 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 13984 IP address blocks: 209.151.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:90:80:73:61:a6:61:e2:ab:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=946f35c0-c489-4489-8e8a-85b773303de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:af:b0:78:a2:4b:e1:08:7c:42:36:79:96: 31:1f:8b:b5:0b:0d:b2:a5:63:43:c0:b0:05:dc:f3: 9f:c5:d9:12:67:42:73:8f:2b:a8:ca:47:43:dc:a0: 6b:23:1e:5d:77:b1:fb:ee:cc:5a:7a:55:7b:bd:07: c9:6b:4e:e5:34:c6:69:ed:c4:46:e6:92:15:3c:9f: 94:ff:4e:03:5f:0b:6b:07:16:b6:85:d4:55:c6:8a: 8d:a2:97:dd:25:b8:f4:ae:8c:93:22:20:fc:bf:7b: 7f:59:e1:9c:bf:9a:34:b0:f9:e4:d2:4e:a7:d2:58: a9:9a:20:bd:ae:a8:8d:b4:9f:f6:ca:bd:c8:17:55: 78:a2:28:06:93:c0:52:f5:e9:1e:be:19:39:24:7c: 07:b1:f6:8e:73:b1:df:c6:ab:a4:dd:00:82:99:bc: cd:61:35:d1:3c:b4:dd:4f:9a:d3:06:07:21:05:c3: e3:b2:c6:5c:65:2e:33:cb:09:0e:6f:49:be:bb:f1: 5c:8b:f3:1c:e1:b8:d5:aa:6d:23:0b:b8:5f:9c:3c: 8a:4f:e9:30:91:c0:4d:27:9b:aa:be:b2:f5:c2:1b: 55:4a:e1:06:34:f4:6d:fb:d9:a4:f0:2d:2b:23:4a: bb:05:e4:ce:67:0a:5b:53:d8:59:cb:c4:55:59:5f: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6E:9E:14:A6:7F:F4:A4:13:BD:AD:EF:87:57:82:61:DE:DB:E0:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b2:c6:7b:ce:62:6a:22:bf:b0:45:55:2f:f5:5f:3e:c6:b7: 4e:46:52:1f:51:65:f6:1e:f2:80:15:be:9e:89:6f:ce:59:d9: cf:f6:ad:ef:02:ca:3f:af:39:61:89:92:e0:a2:65:0f:32:76: d2:e9:28:17:1d:21:c5:dc:78:2a:6e:be:0f:e7:bb:03:e8:44: 0c:37:87:36:36:9e:fd:c6:41:6b:5a:48:36:ea:81:33:3b:f5: 8e:bb:5b:f1:16:87:50:c3:c5:3e:1a:b2:09:7a:4e:39:d9:41: 34:ca:87:02:ce:3a:71:e7:40:7b:05:e6:4a:2a:16:fb:3b:95: 4e:f0:9c:ce:cf:c8:03:f0:3c:5e:1e:7c:ac:a5:07:87:e4:fd: 5a:72:94:3a:5f:c9:f1:72:fa:05:a2:05:14:1c:44:dc:8f:6d: c4:37:52:4e:53:a6:35:2c:a9:a5:24:84:e4:90:67:6b:51:82: a3:9d:56:21:6b:e1:84:54:9e:ed:6b:ce:1d:5d:71:f9:42:1e: c1:f7:a6:a1:5c:cd:2e:ae:ef:b1:d0:76:ef:21:a4:4b:bd:b6: de:6b:16:a7:ac:32:0f:30:b6:17:9a:b5:93:e8:9d:02:1e:51: 9f:a0:44:6b:90:c8:8c:d1:b1:2a:68:a0:0b:88:40:d1:45:da: a3:3f:68:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5CAc2GmYeKrogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTQ2ZjM1YzAtYzQ4OS00NDg5LThlOGEtODViNzczMzAzZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnSvsHiiS+EIfEI2eZYxH4u1Cw2ypWNDwLAF 3POfxdkSZ0JzjyuoykdD3KBrIx5dd7H77sxaelV7vQfJa07lNMZp7cRG5pIVPJ+U /04DXwtrBxa2hdRVxoqNopfdJbj0royTIiD8v3t/WeGcv5o0sPnk0k6n0lipmiC9 rqiNtJ/2yr3IF1V4oigGk8BS9ekevhk5JHwHsfaOc7Hfxquk3QCCmbzNYTXRPLTd T5rTBgchBcPjssZcZS4zywkOb0m+u/Fci/Mc4bjVqm0jC7hfnDyKT+kwkcBNJ5uq vrL1whtVSuEGNPRt+9mk8C0rI0q7BeTOZwpbU9hZy8RVWV9MtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJunhSmf/SkE72t74dXgmHe2+AmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMzBkY2NjOTAtOGFhMy0z OTg0LTk2N2ItNTFmMTFjOWVlNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKyxnvOYmoiv7BFVS/1Xz7Gt05GUh9RZfYe8oAVvp6Jb85Z2c/2re8C yj+vOWGJkuCiZQ8ydtLpKBcdIcXceCpuvg/nuwPoRAw3hzY2nv3GQWtaSDbqgTM7 9Y67W/EWh1DDxT4asgl6TjnZQTTKhwLOOnHnQHsF5koqFvs7lU7wnM7PyAPwPF4e fKylB4fk/VpylDpfyfFy+gWiBRQcRNyPbcQ3Uk5TpjUsqaUkhOSQZ2tRgqOdViFr 4YRUnu1rzh1dcflCHsH3pqFczS6u77HQdu8hpEu9tt5rFqesMg8wtheatZPonQIe UZ+gRGuQyIzRsSpooAuIQNFF2qM/aMs= -----END CERTIFICATE-----Generated at Mon Nov 3 18:01:41 2025 by rpki-client