$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa File: 31f29860-b9a8-3368-b909-343d11150b76.roa (raw, json) Hash identifier: 0fLbihv80uCEBHxsURKxJ7GChq89mg9TdwjOzVOExaE= Subject key identifier: 66:EB:B8:3B:E0:CF:85:2E:44:C7:5B:32:86:90:07:72:F3:68:D1:CD Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584B28C6E2E487D6367347D3DE80 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 401446 IP address blocks: 142.202.82.0/23 maxlen: 23 2602:fd9a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e2:e4:87:d6:36:73:47:d3:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=9d870f96-60b1-4237-aebc-79f4ca30c92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:46:e6:a9:bf:e5:d2:0b:11:f1:7f:92:72: d6:fa:2a:b0:db:80:ad:72:fb:06:12:2d:85:5b:a4: 0f:38:68:8c:15:ba:52:14:24:00:28:3c:da:f9:b3: d2:f2:4d:53:26:26:ab:87:f1:5d:90:9c:83:2f:32: f5:2b:80:f8:af:5c:76:c8:70:37:e9:26:9e:b6:54: ce:12:33:9e:39:92:ef:94:38:12:a4:06:b7:83:70: cb:68:70:89:9b:01:c2:5c:95:59:e6:aa:93:07:e7: 12:df:fd:6a:58:74:c0:d3:40:fe:d1:bc:a4:56:a6: 64:b1:55:0e:3f:cd:0b:eb:42:ea:46:01:d6:25:9d: 22:2f:d5:0b:ad:c0:17:a6:4b:0a:4b:fc:e3:06:fa: 1a:81:fb:68:e6:01:d3:13:fe:82:12:d5:ae:b3:92: 3c:e9:b5:b7:cd:1b:fe:f5:5f:9e:11:7a:a9:f9:93: 7b:53:1b:bd:9e:5e:62:f4:6f:39:b9:d5:bf:c8:0a: d3:ea:0b:ff:05:4f:ed:44:a1:f1:34:7a:8d:e5:ec: b5:83:68:d6:1e:9e:74:ee:f8:32:bc:0e:1b:6e:65: 27:ac:82:69:9f:d4:a9:42:05:d4:e8:b8:e7:74:d7: 8f:b7:8b:15:22:96:22:b7:ef:34:f5:19:c6:58:51: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EB:B8:3B:E0:CF:85:2E:44:C7:5B:32:86:90:07:72:F3:68:D1:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 142.202.82.0/23 IPv6: 2602:fd9a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:55:4a:33:ff:c4:a6:7c:79:18:ce:b6:2a:a2:a5:72:10:4c: 47:c7:36:d3:67:c5:15:3b:1f:88:7f:23:ff:c4:90:1a:af:d0: f0:22:97:31:26:aa:8f:e1:a5:55:e0:59:23:8a:55:c2:1d:e0: ed:7c:d9:58:34:9f:96:1e:10:18:cd:1a:86:70:2a:e5:0d:86: a3:2a:6e:dc:17:6b:36:d2:50:d3:37:79:bf:c8:66:85:b3:df: eb:44:4e:a6:03:a6:8c:17:32:e3:79:24:f9:db:a7:20:71:42: 4e:77:b1:5d:64:1f:d2:c8:50:48:66:45:a4:e2:92:b6:a2:c6: 42:e9:28:53:d2:62:8e:c8:4e:d4:fc:b9:70:5a:43:4e:c2:3a: e1:2d:e6:cc:ad:2b:e4:63:00:16:32:6d:a0:7f:68:c2:a1:f3: e6:86:47:c4:e2:0c:65:f5:ff:b1:dd:e9:b8:9a:f0:33:5c:ac: ef:cf:c4:9d:6a:76:22:eb:1a:e6:d0:9e:9a:a5:9d:33:b4:00: cf:e9:f7:8d:35:f8:6e:da:80:a6:ff:94:14:4c:7b:c2:72:3d: f4:d8:67:d0:4d:8f:8f:0b:d3:3b:90:02:ff:5d:93:1b:3f:1e: bf:f8:29:8d:35:c5:48:7e:2e:c6:a0:13:96:e1:69:26:d7:05: 1f:2e:04:8d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsoxuLkh9Y2c0fT3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk OWQ4NzBmOTYtNjBiMS00MjM3LWFlYmMtNzlmNGNhMzBjOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD9G5qm/5dILEfF/knLW+iqw24CtcvsGEi2F W6QPOGiMFbpSFCQAKDza+bPS8k1TJiarh/FdkJyDLzL1K4D4r1x2yHA36SaetlTO EjOeOZLvlDgSpAa3g3DLaHCJmwHCXJVZ5qqTB+cS3/1qWHTA00D+0bykVqZksVUO P80L60LqRgHWJZ0iL9ULrcAXpksKS/zjBvoagfto5gHTE/6CEtWus5I86bW3zRv+ 9V+eEXqp+ZN7Uxu9nl5i9G85udW/yArT6gv/BU/tRKHxNHqN5ey1g2jWHp507vgy vA4bbmUnrIJpn9SpQgXU6LjndNePt4sVIpYit+809RnGWFHrMQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGbruDvgz4UuRMdbMoaQB3LzaNHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvMzFmMjk4NjAtYjlhOC0z MzY4LWI5MDktMzQzZDExMTUwYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjspSMA4E AgACMAgDBgQmAv2aADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUVUoz/8SmfHkYzrYqoqVyEExHxzbTZ8UV Ox+IfyP/xJAar9DwIpcxJqqP4aVV4FkjilXCHeDtfNlYNJ+WHhAYzRqGcCrlDYaj Km7cF2s20lDTN3m/yGaFs9/rRE6mA6aMFzLjeST526cgcUJOd7FdZB/SyFBIZkWk 4pK2osZC6ShT0mKOyE7U/LlwWkNOwjrhLebMrSvkYwAWMm2gf2jCofPmhkfE4gxl 9f+x3em4mvAzXKzvz8SdanYi6xrm0J6apZ0ztADP6feNNfhu2oCm/5QUTHvCcj30 2GfQTY+PC9M7kAL/XZMbPx6/+CmNNcVIfi7GoBOW4Wkm1wUfLgSN -----END CERTIFICATE-----Generated at Wed Oct 8 17:28:11 2025 by rpki-client