$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa File: 3dd79d95-e88c-33a9-b588-25baeab78a4c.roa (raw, json) Hash identifier: QjfjWZNJwC+pFHCUmmVo32SHiwk87oxeaetSyyXVICs= Subject key identifier: DA:8A:B4:AF:AF:5E:88:33:D6:70:7A:2D:C6:48:B7:A0:E0:0E:D1:88 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B9E07AC016701FA138251CB80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 198148 IP address blocks: 205.252.8.0/22 maxlen: 24 205.252.40.0/22 maxlen: 24 205.252.92.0/22 maxlen: 24 205.252.216.0/21 maxlen: 24 205.252.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ac:01:67:01:fa:13:82:51:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3b47f939-094c-4166-a0f6-23140a6d7f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:ba:e9:6b:54:54:c7:e0:7f:90:14:d2:db: 8c:51:aa:70:2b:87:86:7f:60:47:df:a4:1a:41:af: 96:13:77:93:ab:d8:53:8a:7f:df:e2:eb:d9:2b:1b: 23:d5:cd:fb:3b:7a:fa:ae:61:6d:2c:d7:99:c5:dc: c3:84:e9:46:1b:38:27:34:bf:16:17:38:a9:8e:fb: 11:ee:47:f3:70:34:a4:ed:f8:e1:6a:c6:e5:15:6d: d0:d3:22:eb:cd:fe:5e:c6:c7:67:47:e9:b2:87:d2: 9e:79:92:71:83:f7:3d:2b:d2:6b:13:b3:7f:41:30: eb:df:6f:14:80:4a:19:0b:ea:78:5d:e8:75:a2:75: 10:0c:71:f6:46:1d:f1:51:2b:65:9f:e6:2b:78:96: bd:8f:af:aa:7f:f3:40:f4:9f:57:21:c6:3e:46:db: 67:5f:97:e5:42:5a:3b:62:44:cd:31:6b:ed:62:a1: 0a:45:6e:bc:7e:3a:63:79:d9:12:6c:50:43:d2:b3: c7:4a:60:bc:03:33:e5:a7:42:bb:ea:93:93:87:e5: e2:20:05:8c:9f:2e:2e:ce:17:76:0e:0c:62:88:9b: bb:fe:28:e7:15:c7:d5:0a:a3:81:bb:d9:fa:f8:b2: 58:6a:a3:1c:f8:93:48:2b:a2:6d:23:7b:ab:55:aa: 95:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8A:B4:AF:AF:5E:88:33:D6:70:7A:2D:C6:48:B7:A0:E0:0E:D1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 205.252.8.0/22 205.252.40.0/22 205.252.92.0/22 205.252.216.0/21 205.252.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1c:15:d8:bd:03:9f:5d:14:67:bf:17:b9:37:17:55:a9:d8: 89:75:9e:be:e1:ac:30:cc:bc:8a:41:a2:ba:32:79:7c:a0:81: d8:b7:a6:e3:c1:a1:29:e8:35:63:40:99:a0:d7:85:8d:09:ed: 58:5c:cc:82:fb:2d:75:5b:8f:85:83:14:eb:73:97:fb:b3:91: 45:3e:6f:c8:5c:da:c8:8d:55:57:f9:5f:bb:a5:45:6e:22:01: 27:b0:6c:c4:d2:63:f3:56:c1:0e:6c:79:91:10:00:ae:18:9e: a5:fd:52:c4:fd:bc:5f:71:80:93:6b:9a:8f:96:be:7d:31:9d: cb:78:41:18:47:9c:a1:b7:57:63:05:a4:f8:95:74:d6:60:2d: 33:2c:db:28:45:79:b1:22:8b:6e:50:11:56:2a:e3:67:af:00: 18:d7:e6:9b:d2:21:0e:5d:88:c5:15:70:ca:3e:84:4f:72:3b: 0e:24:55:12:8d:28:7a:71:34:9b:e5:67:30:8e:58:32:ae:ce: 96:0f:fa:b2:16:86:cd:78:ed:32:16:be:b6:a5:7e:24:7f:0b: f6:37:89:d6:65:48:a2:1f:4b:75:c6:da:ac:e6:26:03:79:e3: b5:6d:d7:f0:30:39:da:3b:48:47:c5:ed:3d:5b:59:4f:32:13: 36:81:21:75 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEueB6wBZwH6E4JRy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2I0N2Y5MzktMDk0Yy00MTY2LWEwZjYtMjMxNDBhNmQ3ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqK66WtUVMfgf5AU0tuMUapwK4eGf2BH36Qa Qa+WE3eTq9hTin/f4uvZKxsj1c37O3r6rmFtLNeZxdzDhOlGGzgnNL8WFzipjvsR 7kfzcDSk7fjhasblFW3Q0yLrzf5exsdnR+myh9KeeZJxg/c9K9JrE7N/QTDr328U gEoZC+p4Xeh1onUQDHH2Rh3xUStln+YreJa9j6+qf/NA9J9XIcY+RttnX5flQlo7 YkTNMWvtYqEKRW68fjpjedkSbFBD0rPHSmC8AzPlp0K76pOTh+XiIAWMny4uzhd2 DgxiiJu7/ijnFcfVCqOBu9n6+LJYaqMc+JNIK6JtI3urVaqVDQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFNqKtK+vXogz1nB6LcZIt6DgDtGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2RkNzlkOTUtZTg4Yy0z M2E5LWI1ODgtMjViYWVhYjc4YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCzfwIAwQC zfwoAwQCzfxcAwQDzfzYAwQDzfzoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABccFdi9A59dFGe/F7k3F1Wp 2Il1nr7hrDDMvIpBoroyeXyggdi3puPBoSnoNWNAmaDXhY0J7VhczIL7LXVbj4WD FOtzl/uzkUU+b8hc2siNVVf5X7ulRW4iASewbMTSY/NWwQ5seZEQAK4YnqX9UsT9 vF9xgJNrmo+Wvn0xnct4QRhHnKG3V2MFpPiVdNZgLTMs2yhFebEii25QEVYq42ev ABjX5pvSIQ5diMUVcMo+hE9yOw4kVRKNKHpxNJvlZzCOWDKuzpYP+rIWhs147TIW vralfiR/C/Y3idZlSKIfS3XG2qzmJgN547Vt1/AwOdo7SEfF7T1bWU8yEzaBIXU= -----END CERTIFICATE-----Generated at Sat Oct 25 13:33:44 2025 by rpki-client