$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: 6IGc8fa9NI/rc0o2+DiPwZV8zjH0RzVaqREyxcHQto8= Subject key identifier: 3E:85:CC:C9:89:74:56:B3:C1:90:05:53:5C:85:1B:35:42:35:4E:F0 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F4328584B48E1B0269FF480C77F218900 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b0:26:9f:f4:80:c7:7f:21:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e630a0e0-8bd5-4252-a965-ced4e15d0abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:a7:48:d6:07:ee:75:f5:c1:03:33:48:76: cc:7a:65:3d:b5:4b:d6:d1:36:15:3c:d3:8d:7b:5c: 32:76:16:8f:10:47:0b:01:25:61:d3:5e:87:18:04: 3b:80:01:7a:46:6e:ae:2a:0c:ea:67:9c:8b:13:76: 11:bf:46:46:98:20:46:df:0d:05:2b:4a:83:0f:3d: 83:e0:dc:9b:f1:ea:36:a3:4e:94:c9:c6:22:6c:2d: 52:27:de:aa:10:18:43:0e:3e:67:2a:02:ad:5e:dc: 7b:cb:83:79:88:8c:0b:fd:02:4b:7a:13:c8:e8:3b: 75:b5:40:2e:00:59:0c:ae:cc:23:42:91:04:c8:fe: 59:4c:8c:ec:8c:f2:69:c9:a8:4d:46:54:8a:b0:9f: 40:79:4e:f5:63:d9:85:92:f3:a6:c5:7d:9c:45:fb: f7:70:d0:f4:10:64:1a:8a:5c:d4:6a:a5:1b:b2:25: 73:be:89:7e:b8:59:69:5d:5f:61:ef:cd:d3:9c:99: e6:3f:23:aa:18:5f:18:47:1b:09:ec:11:20:e2:c2: b4:c3:db:a9:52:d6:f6:ac:80:29:9c:13:a2:e9:3f: ab:3f:2a:22:fa:7d:45:2e:bb:ff:b0:b2:78:3a:b7: fd:b1:5c:a6:38:9d:a5:53:38:75:cf:0a:8b:8f:7f: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:85:CC:C9:89:74:56:B3:C1:90:05:53:5C:85:1B:35:42:35:4E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:16:79:a0:fa:e3:1a:b4:5b:21:c6:35:25:a6:9c:d8:3c:f8: aa:a1:12:c0:c1:99:f1:e7:fc:98:08:6f:bb:31:ed:6d:7e:8d: c6:8b:9f:11:d1:a2:43:70:fa:00:e1:82:b7:44:cc:4e:57:46: 33:06:41:5f:74:27:20:53:da:e2:5d:c3:8b:d7:2b:ae:2d:e3: d5:6c:1e:ff:d3:50:40:73:70:0f:7d:d0:34:22:8a:a1:e5:c7: fb:b8:d2:05:d4:68:cf:b5:a0:58:5d:8a:94:82:02:4d:90:67: a1:4d:c3:85:dd:86:c2:7b:29:96:55:2e:69:47:0e:d2:22:ae: b6:ea:7a:87:7a:40:cd:86:44:a1:c7:9c:e4:f7:73:c0:a2:05: 16:d6:92:2b:16:52:4c:5e:69:03:4b:ce:cc:6e:53:dc:56:4d: 81:61:a4:e2:b8:88:e2:f8:5c:d9:dc:05:d6:0d:e9:46:e3:ee: 35:36:14:3a:6a:39:37:5c:6f:35:58:d6:81:c3:b1:6e:4b:0e: 9d:d8:0a:02:8c:9e:70:04:63:c0:19:a2:b7:0d:36:e3:f8:e6: 51:7b:04:04:32:df:d1:27:14:a6:49:27:aa:68:9d:bb:56:ec: 1f:b2:74:e6:35:3d:67:ca:11:07:86:e4:08:f5:a9:1d:b0:3a: 6d:27:fb:c9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtI4bAmn/SAx38hiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTYzMGEwZTAtOGJkNS00MjUyLWE5NjUtY2VkNGUxNWQwYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQynSNYH7nX1wQMzSHbMemU9tUvW0TYVPNON e1wydhaPEEcLASVh016HGAQ7gAF6Rm6uKgzqZ5yLE3YRv0ZGmCBG3w0FK0qDDz2D 4Nyb8eo2o06UycYibC1SJ96qEBhDDj5nKgKtXtx7y4N5iIwL/QJLehPI6Dt1tUAu AFkMrswjQpEEyP5ZTIzsjPJpyahNRlSKsJ9AeU71Y9mFkvOmxX2cRfv3cND0EGQa ilzUaqUbsiVzvol+uFlpXV9h783TnJnmPyOqGF8YRxsJ7BEg4sK0w9upUtb2rIAp nBOi6T+rPyoi+n1FLrv/sLJ4Orf9sVymOJ2lUzh1zwqLj3/r5QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFD6FzMmJdFazwZAFU1yFGzVCNU7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXFnmg+uMatFshxjUlppzYPPiqoRLAwZnx 5/yYCG+7Me1tfo3Gi58R0aJDcPoA4YK3RMxOV0YzBkFfdCcgU9riXcOL1yuuLePV bB7/01BAc3APfdA0Ioqh5cf7uNIF1GjPtaBYXYqUggJNkGehTcOF3YbCeymWVS5p Rw7SIq626nqHekDNhkShx5zk93PAogUW1pIrFlJMXmkDS87MblPcVk2BYaTiuIji +FzZ3AXWDelG4+41NhQ6ajk3XG81WNaBw7FuSw6d2AoCjJ5wBGPAGaK3DTbj+OZR ewQEMt/RJxSmSSeqaJ27VuwfsnTmNT1nyhEHhuQI9akdsDptJ/vJ -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:07 2025 by rpki-client