$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa File: 89772c28-8eb2-3845-a823-2fc46db1e47d.roa (raw, json) Hash identifier: gHHV+vpcY7M7oYd/n1IEDr1HeJ+zXV0A6bDUm29B1PM= Subject key identifier: 67:EC:9A:94:0F:60:AE:13:79:51:27:1B:22:21:CF:56:71:4F:1C:96 Certificate issuer: /CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0 Certificate serial: 010D0C9F4328584B23319678F05DFB200759FE2C Authority key identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 5056 IP address blocks: 136.242.64.0/20 maxlen: 24 208.90.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:96:78:f0:5d:fb:20:07:59:fe:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=e670453a-a3f1-4f85-a3b0-021ed8feb4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:49:98:2f:19:32:6f:af:a4:84:eb:fd:54: da:77:65:37:c4:81:43:bf:49:1b:ed:3b:40:78:81: 27:1b:26:b7:74:77:2b:01:57:fd:bd:e0:c2:ef:22: 2a:dd:53:01:6b:b6:9a:e9:3a:93:31:1c:73:b9:8c: 35:a7:f9:be:85:28:66:87:f9:34:29:3c:2a:80:0b: b2:01:56:9a:32:f4:47:d2:32:28:43:80:16:9d:80: bc:ec:56:63:ac:88:77:8d:14:d5:16:3b:60:16:ab: 95:ca:c0:d8:f2:88:14:c2:48:1f:e3:70:b9:0a:ac: 3d:9d:63:75:b6:db:87:29:74:2b:c8:76:33:77:1b: 6d:ad:91:77:8e:05:70:1e:11:0f:32:c4:ee:d2:4c: d0:3e:89:b9:f2:1f:f6:46:02:e3:2d:e1:50:e4:5f: 4a:3e:97:5b:59:41:8b:14:d4:9d:2b:81:4c:05:f4: 6c:fb:5a:a9:1f:0e:98:39:e4:08:8e:a1:b3:37:b1: c3:55:18:77:7b:43:0f:49:d2:a5:9e:5e:94:09:98: 8a:1e:8d:97:1f:2d:a5:fd:3d:ba:e3:f3:b7:db:9e: 15:04:69:e2:a8:ae:4c:c0:40:6d:ab:bc:8f:7d:4b: ab:1a:c5:11:f1:60:21:1d:ca:91:c3:db:26:35:04: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EC:9A:94:0F:60:AE:13:79:51:27:1B:22:21:CF:56:71:4F:1C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.crl X509v3 Authority Key Identifier: keyid:ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer sbgp-ipAddrBlock: critical IPv4: 136.242.64.0/20 208.90.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:85:d5:e6:40:ac:78:78:59:c0:e4:54:22:1c:e9:d3:a7:43: 57:5d:ae:93:b0:6d:10:61:9b:7d:7e:93:95:fc:1a:9e:87:05: b5:dc:d1:a8:7b:76:f7:ac:30:f2:26:37:64:32:f0:d9:c6:8b: ce:eb:2c:e3:d0:b4:f6:97:e3:e3:1e:f1:d4:88:92:26:4a:3c: 28:7f:37:cc:d8:46:1d:0b:bf:35:a9:ec:ea:00:72:d4:3b:0f: 08:bb:f9:46:f3:76:8a:90:33:45:2e:14:9b:2f:29:bd:83:fb: e8:c5:de:e0:20:4f:1d:59:b9:70:78:5a:95:6c:24:67:59:c4: 3a:a3:75:af:fe:0b:f9:00:ff:48:db:49:10:56:46:31:b0:65: 2e:ea:13:79:d6:b8:9d:12:a6:d9:3f:cc:f7:1b:5f:7c:0d:a7: ae:75:1d:05:e2:5a:e0:85:0c:0c:c0:46:83:24:be:8c:f0:ca: 24:0a:c3:5e:7f:ba:7f:72:3d:41:51:ea:1c:16:18:ff:53:a1: 88:24:2c:94:50:9f:e5:a3:8d:4c:1b:d1:36:2e:4f:e2:43:32: 29:b4:97:79:a5:44:05:2c:76:f0:75:48:75:53:a2:6b:65:45: c7:dc:af:48:3e:3f:bf:dc:ea:7f:f9:e8:3b:90:fe:42:f1:aa: eb:c3:de:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsjMZZ48F37IAdZ/iwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0MGE1ZTctZGZiYi00YmMwLWFmZDktNjBiZjBjMDc5 ZWIwMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZTY3MDQ1M2EtYTNmMS00Zjg1LWEzYjAtMDIxZWQ4ZmViNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSpJmC8ZMm+vpITr/VTad2U3xIFDv0kb7TtA eIEnGya3dHcrAVf9veDC7yIq3VMBa7aa6TqTMRxzuYw1p/m+hShmh/k0KTwqgAuy AVaaMvRH0jIoQ4AWnYC87FZjrIh3jRTVFjtgFquVysDY8ogUwkgf43C5Cqw9nWN1 ttuHKXQryHYzdxttrZF3jgVwHhEPMsTu0kzQPom58h/2RgLjLeFQ5F9KPpdbWUGL FNSdK4FMBfRs+1qpHw6YOeQIjqGzN7HDVRh3e0MPSdKlnl6UCZiKHo2XHy2l/T26 4/O3254VBGniqK5MwEBtq7yPfUurGsUR8WAhHcqRw9smNQR96wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGfsmpQPYK4TeVEnGyIhz1ZxTxyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85OTQw YTVlNy1kZmJiLTRiYzAtYWZkOS02MGJmMGMwNzllYjAvODk3NzJjMjgtOGViMi0z ODQ1LWE4MjMtMmZjNDZkYjFlNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTk0MGE1ZTctZGZiYi00YmMwLWFm ZDktNjBiZjBjMDc5ZWIwLzk5NDBhNWU3LWRmYmItNGJjMC1hZmQ5LTYwYmYwYzA3 OWViMC5jcmwwHwYDVR0jBBgwFoAU7fvhpSobke/I9qXODcxivCVdFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85OTQwYTVlNy1kZmJiLTRiYzAtYWZkOS02MGJm MGMwNzllYjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEiPJAAwQC 0FrkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADiF1eZArHh4WcDkVCIc6dOnQ1ddrpOwbRBhm31+k5X8Gp6H BbXc0ah7dvesMPImN2Qy8NnGi87rLOPQtPaX4+Me8dSIkiZKPCh/N8zYRh0LvzWp 7OoActQ7Dwi7+UbzdoqQM0UuFJsvKb2D++jF3uAgTx1ZuXB4WpVsJGdZxDqjda/+ C/kA/0jbSRBWRjGwZS7qE3nWuJ0Sptk/zPcbX3wNp651HQXiWuCFDAzARoMkvozw yiQKw15/un9yPUFR6hwWGP9ToYgkLJRQn+WjjUwb0TYuT+JDMim0l3mlRAUsdvB1 SHVTomtlRcfcr0g+P7/c6n/56DuQ/kLxquvD3go= -----END CERTIFICATE-----Generated at Tue Oct 28 12:53:50 2025 by rpki-client