$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa File: 661e319d-f202-3bc1-bec8-797d7d57a136.roa (raw, json) Hash identifier: AkDOWwMw00ryh1FHTsJCBrSqJTENoLQE8fXL8GOhsXE= Subject key identifier: FE:86:04:DD:C1:48:3B:28:4E:2F:6B:3B:02:59:34:6C:E6:0A:6C:A5 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584B891766F6E595A63D3D904340 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 62707 IP address blocks: 173.243.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:66:f6:e5:95:a6:3d:3d:90:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=bfd414c3-0019-495e-b35b-f4438d8c2cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:94:83:83:a5:61:ee:78:fa:a1:4a:75:a3:e2: 50:cc:15:fd:9c:a6:ff:69:ee:e9:4b:0a:d1:59:17: 17:f8:25:8e:0d:85:35:7b:71:23:09:71:95:6c:9c: fe:ef:87:ec:e2:37:39:0b:c4:1a:81:e9:ac:dc:ba: 87:0e:34:f2:cf:08:d1:c4:3d:46:fe:23:5f:eb:4e: 47:d4:00:c8:78:37:5c:15:53:ef:ad:f1:01:31:92: 99:15:58:dc:6c:e0:a8:5e:c3:12:a3:dc:09:bf:23: a2:10:ee:24:0a:83:b3:b3:f5:42:eb:e2:63:61:f0: f8:71:96:73:81:6c:8f:ad:41:62:5e:2a:97:d9:38: be:0e:cb:49:b9:8a:da:97:74:ab:70:40:66:26:48: 3e:31:2e:c8:9d:51:ea:a4:13:f1:75:2e:41:f7:a7: f9:f6:22:a6:6b:23:96:8e:aa:82:9c:5e:d7:71:60: b4:da:91:bc:84:08:ca:89:7b:10:63:86:63:9a:e6: 53:39:c1:e5:6d:24:c6:09:e8:63:ad:e3:ac:11:08: 28:03:c3:6b:47:65:04:04:95:99:c5:3d:e5:c2:c7: 39:dc:c7:99:52:42:44:a3:23:59:13:3e:47:66:83: 84:e0:bd:dc:31:14:37:63:77:e2:76:e8:d7:4e:83: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:86:04:DD:C1:48:3B:28:4E:2F:6B:3B:02:59:34:6C:E6:0A:6C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 173.243.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:36:57:b7:9b:b6:b3:5e:72:a0:50:3e:81:9c:da:ff:8d:0b: 6f:0e:44:66:fb:73:9c:cb:e3:65:16:6e:a5:81:c8:80:6a:a6: 2b:4e:1a:cb:58:a8:83:7b:2f:85:ee:1e:f5:1e:0d:24:06:b2: f0:2d:3a:87:2f:eb:e9:26:f0:e2:80:da:4e:44:e7:8c:5c:9e: c5:e8:6b:ae:2b:f3:c1:0c:ed:37:a7:45:98:d6:fd:23:1a:51: 2f:fc:48:94:f3:2b:77:84:08:5f:0d:9b:3f:4a:6d:e4:15:58: 3e:03:b8:77:2b:e7:87:92:5d:0b:4b:06:90:c2:1a:62:50:44: e0:bb:7d:bf:0b:4a:d6:ea:e5:a0:d7:5b:1c:dd:73:77:66:7a: 7a:16:34:6c:fd:fa:97:52:4e:5c:db:9d:61:2c:83:ff:4c:14: 4c:a9:8f:10:35:22:a8:f4:42:2d:d7:17:26:a1:6e:6e:eb:70: 21:5d:c5:32:3c:bd:dd:c2:ae:e9:e4:b7:54:04:9f:8b:11:92: 7e:34:ca:4d:f0:0c:3f:23:cc:fd:ba:79:f3:3d:2a:e0:90:15: 93:44:28:8b:4c:b6:6c:8b:45:7f:e3:f3:83:34:46:77:be:0d: 70:7a:31:f2:3f:98:b8:de:28:f1:62:38:ae:38:34:ae:21:52: 62:5f:48:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2b25ZWmPT2QQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YmZkNDE0YzMtMDAxOS00OTVlLWIzNWItZjQ0MzhkOGMyY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JSDg6Vh7nj6oUp1o+JQzBX9nKb/ae7pSwrR WRcX+CWODYU1e3EjCXGVbJz+74fs4jc5C8Qagems3LqHDjTyzwjRxD1G/iNf605H 1ADIeDdcFVPvrfEBMZKZFVjcbOCoXsMSo9wJvyOiEO4kCoOzs/VC6+JjYfD4cZZz gWyPrUFiXiqX2Ti+DstJuYral3SrcEBmJkg+MS7InVHqpBPxdS5B96f59iKmayOW jqqCnF7XcWC02pG8hAjKiXsQY4ZjmuZTOcHlbSTGCehjreOsEQgoA8NrR2UEBJWZ xT3lwsc53MeZUkJEoyNZEz5HZoOE4L3cMRQ3Y3fidujXToPFGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6GBN3BSDsoTi9rOwJZNGzmCmylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvNjYxZTMxOWQtZjIwMi0z YmMxLWJlYzgtNzk3ZDdkNTdhMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL42V7ebtrNecqBQPoGc2v+NC28ORGb7c5zL42UWbqWByIBqpitOGstY qIN7L4XuHvUeDSQGsvAtOocv6+km8OKA2k5E54xcnsXoa64r88EM7TenRZjW/SMa US/8SJTzK3eECF8Nmz9KbeQVWD4DuHcr54eSXQtLBpDCGmJQROC7fb8LStbq5aDX Wxzdc3dmenoWNGz9+pdSTlzbnWEsg/9MFEypjxA1Iqj0Qi3XFyahbm7rcCFdxTI8 vd3Crunkt1QEn4sRkn40yk3wDD8jzP26efM9KuCQFZNEKItMtmyLRX/j84M0Rne+ DXB6MfI/mLjeKPFiOK44NK4hUmJfSDc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:47 2025 by rpki-client