$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa File: b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa (raw, json) Hash identifier: 9j8V9vMCE0CTjVUVZH2+3T4s6nUEiX4gBV+MumWb/KE= Subject key identifier: 3E:34:2E:A3:E9:C3:DF:CA:F6:D1:A2:3E:80:E0:01:D7:6A:74:01:2B Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F4328584B13D6B25765F1D982F5CF5380 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 20055 IP address blocks: 204.11.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b2:57:65:f1:d9:82:f5:cf:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=2235d4e8-fe0d-4e8d-a69f-3b41706d5ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:72:3c:57:30:f1:f0:42:46:77:b7:d5:48: 2c:77:2d:da:d4:79:49:c2:82:0b:fc:62:bb:b2:66: f3:df:60:5c:6f:06:cf:9b:a8:f8:68:f1:22:32:22: e2:6b:fb:9e:0f:87:5d:23:2f:55:b2:89:18:ab:03: 5b:f8:8a:09:95:26:0e:7c:93:fa:98:b7:24:e1:8e: a3:bc:c7:eb:eb:11:60:0b:cf:c6:f2:1c:0e:2c:27: 45:a7:04:79:4f:c1:c7:a0:7f:ac:ca:9c:73:6f:89: 3c:b9:ac:86:5c:72:fe:cf:ac:eb:64:84:a6:dc:b5: 0c:35:be:1a:a9:35:32:46:af:43:7f:8e:ad:47:05: dc:bd:9c:4b:0c:60:cf:4f:6f:85:ca:fb:06:06:ba: 7f:ff:6c:fb:d8:31:25:15:86:7f:54:a1:c1:35:6e: a9:9d:6f:ee:17:07:dc:2e:fe:24:a9:fe:7d:d3:22: 21:02:9b:e6:1f:e5:c8:91:37:5b:b4:ca:4d:04:70: 7f:e5:bb:34:5c:0a:57:2b:95:0d:7c:19:f6:c9:ca: 73:a8:3d:5b:02:e9:5b:ec:1a:59:65:72:eb:fb:03: 0d:b0:f2:00:cf:be:68:e5:42:33:bc:cd:28:ce:fb: 27:86:e4:d0:51:36:be:e8:26:45:ee:c5:04:63:dc: 36:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:34:2E:A3:E9:C3:DF:CA:F6:D1:A2:3E:80:E0:01:D7:6A:74:01:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 204.11.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:66:7a:f7:de:17:89:c5:22:e3:c9:08:e0:83:f5:c7:8d:42: b4:cd:e9:8f:07:4d:aa:e6:45:3a:8f:65:07:c4:26:ea:ca:e0: 09:30:42:23:4c:cc:32:3e:45:45:e5:82:42:40:6d:9c:d6:eb: 7c:1b:29:9d:a0:3d:01:f5:1f:cb:f7:80:68:5d:4a:49:d4:5d: 11:46:93:56:ba:87:5a:42:ca:98:10:71:e0:f3:27:db:49:1f: 1d:e5:60:b0:20:ca:08:aa:40:e3:3a:9c:03:1b:d4:ef:b8:41: b6:72:c5:e0:2b:80:bc:9c:f8:15:ba:f7:01:e4:05:e8:47:98: 3c:58:c9:69:79:45:20:75:63:e6:09:ac:61:92:82:e0:9e:55: 2a:fd:06:6a:ce:23:81:02:c0:2e:04:ef:21:fa:e9:0e:fd:3c: 0b:f8:ef:f2:45:ae:b9:aa:3e:d3:84:18:ec:c3:a0:bd:ba:76: f9:3e:80:59:c6:0b:a0:44:73:a6:fa:97:e2:22:6f:e3:84:63: af:b6:34:b0:3c:5f:15:40:36:12:9b:4a:2c:b8:00:18:33:f7: 44:df:50:ab:d1:ea:32:f7:89:91:bc:70:30:d0:2a:65:a6:8e: c0:7a:7f:50:cb:d6:3f:7e:d3:f4:c1:0b:48:9c:f0:85:50:03: 25:ac:8c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rJXZfHZgvXPU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MjIzNWQ0ZTgtZmUwZC00ZThkLWE2OWYtM2I0MTcwNmQ1Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFpyPFcw8fBCRne31Ugsdy3a1HlJwoIL/GK7 smbz32BcbwbPm6j4aPEiMiLia/ueD4ddIy9VsokYqwNb+IoJlSYOfJP6mLck4Y6j vMfr6xFgC8/G8hwOLCdFpwR5T8HHoH+sypxzb4k8uayGXHL+z6zrZISm3LUMNb4a qTUyRq9Df46tRwXcvZxLDGDPT2+FyvsGBrp//2z72DElFYZ/VKHBNW6pnW/uFwfc Lv4kqf590yIhApvmH+XIkTdbtMpNBHB/5bs0XApXK5UNfBn2ycpzqD1bAulb7BpZ ZXLr+wMNsPIAz75o5UIzvM0ozvsnhuTQUTa+6CZF7sUEY9w2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD40LqPpw9/K9tGiPoDgAddqdAErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvYjI3MDhhY2YtZjU5Yy0z YjRmLTlmMTEtMDFiYWFhNmI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRmevfeF4nFIuPJCOCD9ceNQrTN6Y8HTarmRTqPZQfEJurK4AkwQiNM zDI+RUXlgkJAbZzW63wbKZ2gPQH1H8v3gGhdSknUXRFGk1a6h1pCypgQceDzJ9tJ Hx3lYLAgygiqQOM6nAMb1O+4QbZyxeArgLyc+BW69wHkBehHmDxYyWl5RSB1Y+YJ rGGSguCeVSr9BmrOI4ECwC4E7yH66Q79PAv47/JFrrmqPtOEGOzDoL26dvk+gFnG C6BEc6b6l+Iib+OEY6+2NLA8XxVANhKbSiy4ABgz90TfUKvR6jL3iZG8cDDQKmWm jsB6f1DL1j9+0/TBC0ic8IVQAyWsjIw= -----END CERTIFICATE-----Generated at Fri Sep 19 17:42:03 2025 by rpki-client