$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa File: 3f7623ce-fa12-3190-93d6-daf4bba1752a.roa (raw, json) Hash identifier: TvcXuY2JVbg2pB0JQkOQgcZsGBGWvmApwqj8HDzhIBs= Subject key identifier: FF:71:34:34:99:8B:11:14:0D:65:9F:51:3C:25:B8:11:4D:5D:88:2B Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584B80B7587781150D2E61D81890 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 6505 IP address blocks: 206.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:58:77:81:15:0d:2e:61:d8:18:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=3b5c3368-b7c0-46f6-b24c-014d2b74b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:09:46:be:fb:31:37:17:83:f6:1a:28:54: 7e:52:b2:81:ca:b7:c3:4b:43:dd:46:17:e4:8c:e9: fb:70:72:64:8b:bc:58:22:76:82:d4:61:14:43:5a: f7:64:e2:e9:00:8d:ad:10:a1:57:3d:c5:16:e3:27: 88:af:34:33:c9:ae:be:a2:f0:d7:84:bf:54:a6:e6: 40:49:96:aa:36:96:6c:63:24:bb:7f:a6:1f:55:ec: b5:ab:f9:c9:1c:26:58:f1:3b:9e:96:70:8b:1b:09: 3e:b5:6f:14:fc:b0:99:60:0c:f9:cd:4b:52:18:e3: 5b:b3:f9:b5:8c:48:8d:c7:48:98:dc:6e:7e:02:d8: 4e:e7:c1:14:4e:eb:6b:42:fc:d2:5c:c4:97:06:ce: 7d:6c:7a:2f:88:0c:23:78:d1:54:8d:ca:dd:21:68: 8c:c4:98:03:b8:48:f0:9f:21:80:40:c2:b8:a0:e1: 9b:f0:95:7b:63:9b:29:6b:93:08:7d:81:46:d5:d9: 7d:e6:65:19:b6:a3:07:21:e7:c2:08:2c:ba:43:b6: 9d:9f:ac:e6:48:69:e2:2d:64:27:f5:55:e3:78:a8: d1:b8:47:0d:35:11:ab:59:16:a0:53:f9:8e:f4:d0: 85:23:62:49:7d:7f:f4:50:2f:ae:83:6c:03:6f:06: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:71:34:34:99:8B:11:14:0D:65:9F:51:3C:25:B8:11:4D:5D:88:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 206.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c4:4b:24:cf:5a:4b:52:09:39:50:91:db:f0:37:f4:69:85: 8e:ca:3c:58:61:02:9b:c4:02:ed:52:83:ec:78:8e:c0:9a:0e: 4d:24:4e:75:40:90:7c:34:88:6f:0b:f7:a6:07:65:b5:15:cd: f4:85:e5:c7:37:64:33:9f:ca:14:4a:d3:7a:dd:23:d0:50:89: 75:54:3b:31:2f:25:63:3c:2d:c7:6d:d2:02:5a:b2:d6:75:14: 4f:9f:30:80:a3:af:ba:55:42:9e:ed:cd:c9:85:2f:f3:c6:36: 24:2a:4f:46:9b:8c:75:1d:cc:d8:f4:9a:c5:64:84:7f:4a:62: 96:1b:f4:1b:b4:4f:02:7a:0d:ac:a1:2d:14:43:b8:05:ef:38: 06:ff:68:93:6a:61:d8:15:85:a3:6a:8d:34:90:01:b5:2f:50: be:7c:91:69:5f:3e:29:24:73:a5:74:c8:a5:d0:9d:72:d8:14: 82:9a:6d:fe:38:4c:d0:32:5c:8e:89:69:a0:80:f8:c4:64:64: 2a:6b:53:c5:cf:f1:77:aa:56:9a:f1:c6:60:2b:47:e6:62:75: 9d:20:98:60:f8:ab:3a:fa:08:6a:b7:3e:df:c6:e4:fd:61:0b: ad:63:49:be:f8:27:85:27:e9:5d:2e:f2:3a:71:22:be:16:9b: 43:42:29:a0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuAt1h3gRUNLmHYGJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk M2I1YzMzNjgtYjdjMC00NmY2LWIyNGMtMDE0ZDJiNzRiMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVEJRr77MTcXg/YaKFR+UrKByrfDS0PdRhfk jOn7cHJki7xYInaC1GEUQ1r3ZOLpAI2tEKFXPcUW4yeIrzQzya6+ovDXhL9UpuZA SZaqNpZsYyS7f6YfVey1q/nJHCZY8TuelnCLGwk+tW8U/LCZYAz5zUtSGONbs/m1 jEiNx0iY3G5+AthO58EUTutrQvzSXMSXBs59bHoviAwjeNFUjcrdIWiMxJgDuEjw nyGAQMK4oOGb8JV7Y5spa5MIfYFG1dl95mUZtqMHIefCCCy6Q7adn6zmSGniLWQn 9VXjeKjRuEcNNRGrWRagU/mO9NCFI2JJfX/0UC+ug2wDbwZZqwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP9xNDSZixEUDWWfUTwluBFNXYgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvM2Y3NjIzY2UtZmExMi0z MTkwLTkzZDYtZGFmNGJiYTE3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzjAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHMRLJM9aS1IJOVCR2/A39GmFjso8WGECm8QC7VKD7HiOwJoOTSROdUCQ fDSIbwv3pgdltRXN9IXlxzdkM5/KFErTet0j0FCJdVQ7MS8lYzwtx23SAlqy1nUU T58wgKOvulVCnu3NyYUv88Y2JCpPRpuMdR3M2PSaxWSEf0pilhv0G7RPAnoNrKEt FEO4Be84Bv9ok2ph2BWFo2qNNJABtS9QvnyRaV8+KSRzpXTIpdCdctgUgppt/jhM 0DJcjolpoID4xGRkKmtTxc/xd6pWmvHGYCtH5mJ1nSCYYPirOvoIarc+38bk/WEL rWNJvvgnhSfpXS7yOnEivhabQ0IpoA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:33:09 2025 by rpki-client