$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa File: 6436fe84-15d0-3af0-956b-b3cb8a063158.roa (raw, json) Hash identifier: 454vTGyHPEwC2aTcrxXLQDvnAKTCkeW6yZk9h7Lm4RQ= Subject key identifier: 13:EA:83:42:36:9C:0E:BF:1E:C1:C3:54:2B:AE:9F:32:85:EA:C9:4D Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B398705C280B34879A5D89A40 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 216.246.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:05:c2:80:b3:48:79:a5:d8:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=418acf40-afdf-4fc5-9d81-abf3d4deea8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:06:6a:7b:09:89:33:53:af:96:aa:62:3f: 36:d4:50:41:09:f8:bd:97:2f:c5:b1:75:3c:ff:67: 43:c2:76:f3:78:cf:ba:17:70:e9:ca:fe:53:e8:96: 80:e0:28:0e:b7:71:60:88:bc:d7:54:b0:d2:f7:35: 5d:f1:e0:19:4c:10:16:5b:3f:ba:d9:40:0c:c2:14: 40:04:14:80:a9:7b:50:8f:8a:1e:cc:99:34:65:b7: 87:e1:f1:aa:5b:4c:46:aa:7a:bd:04:eb:dc:37:88: a9:5c:40:d2:bc:82:af:2f:5f:08:ae:e1:ec:fd:bb: 5f:84:44:49:15:06:e6:71:b0:dc:56:63:33:1b:69: a9:66:fc:67:b1:6b:88:9f:ff:d4:78:55:fc:5c:ad: 85:ee:19:5d:ba:eb:e8:ce:68:e3:00:56:40:fe:d8: 80:53:dd:48:a1:99:a3:d9:07:99:38:92:4b:ba:3b: d6:31:7e:1e:b9:a9:0e:f4:4c:c7:bb:e0:b2:7f:be: d9:30:c0:14:38:e0:c3:1b:31:ee:f1:2f:c4:32:a9: 23:03:cc:32:23:16:59:64:2e:7d:e4:02:22:60:28: ea:47:3e:db:6a:b0:86:bd:95:89:7d:df:84:bb:18: 48:74:a5:f3:cb:0c:71:fa:30:2e:c5:a2:25:65:76: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EA:83:42:36:9C:0E:BF:1E:C1:C3:54:2B:AE:9F:32:85:EA:C9:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:99:ca:46:fc:a1:c2:7b:45:56:c3:39:6c:a0:1b:94:49:2c: 72:86:00:c8:60:4f:22:24:7e:8f:61:72:02:ba:6b:8b:3d:68: 06:d1:0c:bf:60:0a:ce:4f:1d:af:c4:92:6c:69:22:83:83:91: 7b:1c:db:de:35:57:57:d5:f1:a4:57:14:bc:d2:da:85:02:56: 15:4d:62:0f:ac:ae:86:cc:54:0e:d2:7a:76:4b:12:e8:80:48: 3f:46:c5:75:05:e3:6a:06:a3:34:ce:ad:8d:e8:27:90:b1:64: f9:22:2b:a7:8e:3e:c3:65:a0:2d:85:90:e7:7b:4d:5e:35:ac: d2:f6:50:1e:42:f1:02:ea:df:45:89:ca:e2:3e:fe:ae:38:f0: 38:a0:1c:6e:be:7f:e9:14:a3:5e:86:1f:68:2f:f1:1e:7c:5b: d6:a0:8c:34:6a:e1:85:31:fc:2a:a2:e0:e1:a0:88:cc:e7:b8: 2f:38:ca:3b:0f:26:6d:a3:c7:74:97:c0:c3:f0:68:b6:a5:f9: 82:b5:ca:3d:37:38:4a:7d:9d:4c:99:7a:a4:19:5b:41:1e:c1: 10:6c:db:eb:1a:b3:ca:28:cd:85:95:4d:83:19:72:31:4e:bc: 23:4f:d0:4c:e5:33:5c:71:a9:51:74:3a:55:30:67:73:72:de: c2:d8:4f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwXCgLNIeaXYmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NDE4YWNmNDAtYWZkZi00ZmM1LTlkODEtYWJmM2Q0ZGVlYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHkGansJiTNTr5aqYj821FBBCfi9ly/FsXU8 /2dDwnbzeM+6F3Dpyv5T6JaA4CgOt3FgiLzXVLDS9zVd8eAZTBAWWz+62UAMwhRA BBSAqXtQj4oezJk0ZbeH4fGqW0xGqnq9BOvcN4ipXEDSvIKvL18IruHs/btfhERJ FQbmcbDcVmMzG2mpZvxnsWuIn//UeFX8XK2F7hlduuvozmjjAFZA/tiAU91IoZmj 2QeZOJJLujvWMX4euakO9EzHu+Cyf77ZMMAUOODDGzHu8S/EMqkjA8wyIxZZZC59 5AIiYCjqRz7barCGvZWJfd+EuxhIdKXzywxx+jAuxaIlZXaeBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPqg0I2nA6/HsHDVCuunzKF6slNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNjQzNmZlODQtMTVkMC0z YWYwLTk1NmItYjNjYjhhMDYzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+Zykb8ocJ7RVbDOWygG5RJLHKGAMhgTyIkfo9hcgK6a4s9aAbRDL9g Cs5PHa/EkmxpIoODkXsc2941V1fV8aRXFLzS2oUCVhVNYg+srobMVA7SenZLEuiA SD9GxXUF42oGozTOrY3oJ5CxZPkiK6eOPsNloC2FkOd7TV41rNL2UB5C8QLq30WJ yuI+/q448DigHG6+f+kUo16GH2gv8R58W9agjDRq4YUx/Cqi4OGgiMznuC84yjsP Jm2jx3SXwMPwaLal+YK1yj03OEp9nUyZeqQZW0EewRBs2+sas8oozYWVTYMZcjFO vCNP0EzlM1xxqVF0OlUwZ3Ny3sLYTzw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:41 2025 by rpki-client