$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bfcd6a6-ab4d-30cf-a91e-217e5117d34a.roa File: 3bfcd6a6-ab4d-30cf-a91e-217e5117d34a.roa (raw, json) Hash identifier: XByE0dhfEQxTo0HeKhB9KDhSc0Kl0Yu/YdNFsaYlfw8= Subject key identifier: 14:62:DD:23:63:43:23:03:F4:E1:E2:0F:73:93:FC:4A:C0:6F:B5:42 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCF4B24A3E5AE417E54400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bfcd6a6-ab4d-30cf-a91e-217e5117d34a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 75.106.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:f4:b2:4a:3e:5a:e4:17:e5:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=66a564b8-f393-41be-896b-1bfb40af5984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:4d:f3:dc:36:fc:70:d4:39:72:22:06:06: 1b:bc:c0:f5:f0:d4:33:a8:55:b6:11:d9:da:cf:90: c1:94:03:7c:d0:dc:e9:40:d3:25:5f:7e:f6:94:95: 69:33:dd:19:54:d3:c4:32:63:77:e1:ec:83:6a:87: 43:cf:b0:bd:d6:19:c7:0f:ce:38:b2:4e:82:05:0c: dd:2b:e3:83:34:27:0e:cf:b2:97:a0:8d:67:cd:88: bf:83:4e:22:36:4c:8d:50:b3:0b:0f:0b:6d:18:e6: dd:b1:22:6e:ce:b9:6f:a8:97:c0:2d:db:62:9b:ca: 19:c3:ba:9c:eb:43:25:a8:c0:ec:13:44:37:4d:ff: 49:e8:66:b4:7f:59:3a:c6:29:13:16:b9:9f:35:b5: d1:47:8a:39:f7:27:68:dd:35:d9:95:c5:01:97:9d: 39:e0:fe:42:82:5e:55:65:15:48:48:22:fe:5c:bc: 7c:6c:08:a7:f6:82:ef:8c:be:fb:f9:6c:d5:12:0c: 3c:c7:8c:a7:19:73:f1:48:f2:7f:8e:a0:37:13:8b: fe:e2:1c:a7:bd:a5:84:49:f5:4e:dc:b4:1c:4e:9f: 23:47:4f:80:e5:41:81:be:f9:aa:62:98:1a:a7:db: d7:e4:c7:19:82:8c:22:65:bf:84:c1:a4:80:4a:03: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:62:DD:23:63:43:23:03:F4:E1:E2:0F:73:93:FC:4A:C0:6F:B5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bfcd6a6-ab4d-30cf-a91e-217e5117d34a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.106.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6a:af:71:6b:c9:c1:16:40:82:a5:bf:93:f1:8d:79:b2:46: 61:52:e2:f6:80:2f:2e:b0:67:d9:c5:83:6e:3c:5a:a1:c8:f9: ea:56:4d:e0:50:90:cf:d1:cb:d5:79:1a:1d:20:75:59:91:ab: 4a:a9:2b:53:59:65:c3:12:b2:75:d5:2e:d5:19:99:67:0e:82: 09:1e:16:8f:1c:bb:c7:d7:01:65:1e:ca:23:5d:5f:42:b0:3c: 32:0b:74:27:31:f4:c0:8c:9d:90:dd:80:86:b0:1b:a8:1f:ff: 56:e6:19:b2:e2:ef:b7:5f:b9:45:8c:d7:df:6f:76:ff:b1:b9: e4:73:ca:7e:52:97:a5:6f:6e:e2:47:7f:6c:e0:b9:f6:28:74: d8:30:3f:ce:46:19:fa:8d:10:31:4d:f6:73:f9:18:e0:bf:48: 3e:85:f2:15:d2:bd:c6:4d:8c:64:38:a0:d6:9e:42:a4:38:fa: ea:5d:bd:92:c6:8e:49:12:59:4c:63:eb:89:39:e5:ad:03:fb: d4:c7:80:04:d2:19:af:e2:75:5a:07:9b:11:71:d6:cf:24:17: 5a:7b:50:57:f9:b7:5e:27:38:7a:8b:7c:e9:f9:07:b1:bd:c1: f9:55:91:9d:17:8f:d4:92:92:0d:d1:ac:ea:25:16:aa:7b:1c: 43:71:8f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzPSySj5a5BflRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjZhNTY0YjgtZjM5My00MWJlLTg5NmItMWJmYjQwYWY1OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1VN89w2/HDUOXIiBgYbvMD18NQzqFW2Edna z5DBlAN80NzpQNMlX372lJVpM90ZVNPEMmN34eyDaodDz7C91hnHD844sk6CBQzd K+ODNCcOz7KXoI1nzYi/g04iNkyNULMLDwttGObdsSJuzrlvqJfALdtim8oZw7qc 60MlqMDsE0Q3Tf9J6Ga0f1k6xikTFrmfNbXRR4o59ydo3TXZlcUBl5054P5Cgl5V ZRVISCL+XLx8bAin9oLvjL77+WzVEgw8x4ynGXPxSPJ/jqA3E4v+4hynvaWESfVO 3LQcTp8jR0+A5UGBvvmqYpgap9vX5McZgowiZb+EwaSASgP0/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRi3SNjQyMD9OHiD3OT/ErAb7VCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2JmY2Q2YTYtYWI0ZC0z MGNmLWE5MWUtMjE3ZTUxMTdkMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2rYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5qr3FrycEWQIKlv5PxjXmyRmFS4vaALy6wZ9nFg248WqHI+epWTeBQ kM/Ry9V5Gh0gdVmRq0qpK1NZZcMSsnXVLtUZmWcOggkeFo8cu8fXAWUeyiNdX0Kw PDILdCcx9MCMnZDdgIawG6gf/1bmGbLi77dfuUWM199vdv+xueRzyn5Sl6VvbuJH f2zgufYodNgwP85GGfqNEDFN9nP5GOC/SD6F8hXSvcZNjGQ4oNaeQqQ4+updvZLG jkkSWUxj64k55a0D+9THgATSGa/idVoHmxFx1s8kF1p7UFf5t14nOHqLfOn5B7G9 wflVkZ0Xj9SSkg3RrOolFqp7HENxj1g= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:52 2025 by rpki-client