$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa File: c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa (raw, json) Hash identifier: fqfIf4p5ZQ7jh+uNwRF3RuDktfjHsMb3VU5Qzs53TDs= Subject key identifier: 12:61:D1:4D:C8:5B:6C:5F:96:22:7F:8A:90:B3:22:03:02:FE:84:01 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B3126EFA4A915B6F685BD9700 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 398420 IP address blocks: 206.71.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:ef:a4:a9:15:b6:f6:85:bd:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=d1ae6b95-7172-4c19-8f53-99a9395a5ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:10:b5:2d:83:4f:f6:31:a2:b3:b2:05:61: 6f:63:81:ba:99:90:81:58:c3:94:15:95:f8:7d:e8: 2e:41:3a:8a:dc:c6:3c:0c:82:56:40:2d:ad:a0:d0: 71:b9:71:75:c8:3d:af:f9:85:6d:56:07:79:4a:f9: 0f:76:c1:f0:33:cb:4a:d3:b2:14:19:80:aa:f5:08: d0:69:14:58:3d:c7:d8:d9:58:33:2b:86:f3:fa:31: c9:6c:3d:aa:52:61:06:72:1e:72:6b:9b:36:3b:d0: 0b:21:3a:97:63:1b:28:40:0d:b4:c7:74:56:88:61: d6:51:d0:93:fb:a1:90:89:29:b9:2f:22:b5:b8:23: cd:47:50:0d:58:66:b4:9e:b5:c8:16:7a:6a:4c:d2: 75:8c:1f:39:09:4b:71:92:b4:a2:58:b6:c6:4e:9d: 05:0a:2e:bb:9b:c7:e6:d7:7b:29:11:c8:2c:ce:f2: c7:a4:eb:20:85:1d:25:23:76:f7:bb:b5:a0:88:b8: 4d:da:a8:72:1f:d0:a3:3b:91:37:65:01:26:cb:5e: fb:e6:39:d6:24:f2:9e:45:12:62:0e:2c:34:3a:4d: 2c:e5:3a:3b:32:89:fc:c3:35:74:79:f0:03:5d:da: 90:26:29:2d:a3:9b:f5:14:d9:78:ce:01:6a:b7:aa: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:61:D1:4D:C8:5B:6C:5F:96:22:7F:8A:90:B3:22:03:02:FE:84:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:9d:e8:ce:15:22:ea:86:2f:c5:55:02:29:62:b0:59:1d:68: 5f:b7:21:84:8a:76:ee:ec:9c:32:b4:9a:2d:99:f6:ff:55:40: 16:a4:1a:68:e0:bc:54:b2:e7:64:be:86:2a:c1:b5:58:1d:fe: 43:38:07:fb:d6:6c:02:55:c1:b7:87:56:f2:d6:71:84:e8:9a: a0:1b:cb:0c:63:44:4f:d9:89:ee:a5:c5:8a:73:47:4b:70:70: 98:12:67:1b:67:10:77:22:08:0e:97:df:d3:ab:ac:1a:06:a7: de:78:ed:a3:39:7e:21:d8:12:4f:dc:1d:79:d9:a5:47:58:1f: d2:b9:dd:83:9f:e4:01:cd:f4:cc:af:b4:2a:79:06:85:03:dd: a9:3f:13:05:9f:82:14:73:de:c9:57:92:01:12:c9:76:de:a4: 2e:df:0b:05:fb:77:3e:98:23:7f:a9:16:45:1d:73:9a:2f:e8: 41:8d:5c:4d:82:9a:b7:87:88:a8:13:ba:68:9d:c1:c7:b4:63: 73:9d:e3:37:41:c3:06:69:dc:1e:5c:b4:fc:c4:fa:9c:ad:02: 6e:8b:fe:ca:48:62:53:0b:cc:52:07:e9:ef:dc:3d:e5:7b:e4: 2b:2f:11:63:e0:aa:61:94:62:e8:47:e0:ec:db:96:2d:b0:f8: 18:f0:37:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJu+kqRW29oW9lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk ZDFhZTZiOTUtNzE3Mi00YzE5LThmNTMtOTlhOTM5NWE1ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltEQtS2DT/YxorOyBWFvY4G6mZCBWMOUFZX4 feguQTqK3MY8DIJWQC2toNBxuXF1yD2v+YVtVgd5SvkPdsHwM8tK07IUGYCq9QjQ aRRYPcfY2VgzK4bz+jHJbD2qUmEGch5ya5s2O9ALITqXYxsoQA20x3RWiGHWUdCT +6GQiSm5LyK1uCPNR1ANWGa0nrXIFnpqTNJ1jB85CUtxkrSiWLbGTp0FCi67m8fm 13spEcgszvLHpOsghR0lI3b3u7WgiLhN2qhyH9CjO5E3ZQEmy1775jnWJPKeRRJi Diw0Ok0s5To7Mon8wzV0efADXdqQJikto5v1FNl4zgFqt6o98QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJh0U3IW2xfliJ/ipCzIgMC/oQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYzUxYWQ0ZGEtOWJkZC0z OTQ4LTg3ODktMWQxOTRiYjlmMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSd6M4VIuqGL8VVAilisFkdaF+3IYSKdu7snDK0mi2Z9v9VQBakGmjg vFSy52S+hirBtVgd/kM4B/vWbAJVwbeHVvLWcYTomqAbywxjRE/Zie6lxYpzR0tw cJgSZxtnEHciCA6X39OrrBoGp9547aM5fiHYEk/cHXnZpUdYH9K53YOf5AHN9Myv tCp5BoUD3ak/EwWfghRz3slXkgESyXbepC7fCwX7dz6YI3+pFkUdc5ov6EGNXE2C mreHiKgTumidwce0Y3Od4zdBwwZp3B5ctPzE+pytAm6L/spIYlMLzFIH6e/cPeV7 5CsvEWPgqmGUYuhH4Ozbli2w+BjwN0M= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:32 2025 by rpki-client