$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa File: 0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa (raw, json) Hash identifier: MpbdWmEeAonqEb3XFo8o6fnzn2mTkuJ8ymiDMcUr/K4= Subject key identifier: 69:75:49:66:7C:B7:04:C6:79:13:1D:84:8E:6A:C1:66:1B:35:08:66 Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Certificate serial: 010D0C9F4328584B4D11DD89901CF43FC8E48080 Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 208889 IP address blocks: 206.168.135.0/24 maxlen: 24 2602:fbd9:ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:dd:89:90:1c:f4:3f:c8:e4:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=986d2dd6-f918-49ed-9779-e66d61133f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:6c:cf:cf:f2:df:9b:47:67:0f:cc:e8:49: 99:ae:b6:4c:e2:fb:9f:54:c1:90:25:60:0d:d8:fa: 43:fd:a2:a9:b3:40:3e:01:f4:b7:24:c0:d9:eb:19: ea:02:20:9c:f4:d2:30:eb:ce:5b:47:ae:3a:d0:c3: be:ed:3d:2c:e0:1c:b1:0c:9b:7e:3e:67:c7:34:53: 21:a9:1f:41:0c:30:98:0a:79:56:d2:b2:48:54:c1: 1c:1f:a1:15:50:67:e4:6a:6c:c3:79:69:3e:eb:f1: a1:26:63:0f:20:ef:9d:e8:db:ed:aa:c3:31:9e:34: 2b:a9:0c:ad:f4:50:ec:3a:db:d6:cf:90:40:1f:e5: 0d:37:c9:a7:4f:20:32:e3:91:75:2e:35:69:15:02: 3c:6d:68:d7:77:36:18:16:f3:f8:c3:44:d9:5f:e5: a0:b4:0d:9c:d2:5a:81:ad:1a:27:bc:f9:7d:6d:a8: a8:ca:65:68:74:8e:d9:fe:af:c2:7e:fe:b4:86:c4: dd:bd:24:3d:31:68:b4:5c:12:dc:50:b8:68:ed:e9: 58:9f:5a:63:2f:2b:07:d6:4e:43:12:49:62:68:f3: 5e:ae:e4:74:d9:83:31:55:ac:93:5b:6e:e5:53:86: c3:d3:03:23:b3:c8:73:3e:d7:0f:a4:4b:05:fb:bc: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:75:49:66:7C:B7:04:C6:79:13:1D:84:8E:6A:C1:66:1B:35:08:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl X509v3 Authority Key Identifier: keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer sbgp-ipAddrBlock: critical IPv4: 206.168.135.0/24 IPv6: 2602:fbd9:ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b5:86:a6:b7:f6:b1:b1:25:ab:c3:9a:be:65:f5:f4:dc:37: 11:c5:53:d4:92:98:0a:3e:f5:f0:36:97:10:a2:2a:89:2e:9d: 00:62:c7:53:57:8d:f0:ab:81:28:76:14:63:c3:58:8b:16:67: 66:bf:64:f0:26:ec:9c:4d:68:12:61:8a:bb:b8:75:49:19:42: 19:36:8e:60:dd:20:89:bd:9e:be:b9:12:d5:f2:5e:3d:bf:12: 69:ce:48:7a:5d:7f:0c:a6:27:57:6e:c8:83:ea:28:b7:90:de: 02:18:ca:c5:30:b0:58:c1:28:81:4e:a6:52:de:69:ba:ee:88: 47:97:81:3b:08:85:24:e2:e6:76:3e:23:dd:2f:ef:83:ed:cb: bf:d9:7e:64:d7:12:1b:78:a3:cc:79:8d:af:f2:0c:3b:a9:4d: bb:87:dc:26:8b:7e:8d:e2:3a:bf:be:f6:9e:52:2e:09:97:32: 12:d5:b4:21:23:b5:3f:0e:c1:36:a7:6e:34:67:ea:5b:c7:65: 54:15:0a:a4:aa:f8:55:24:00:8b:fd:9b:e0:bb:e8:10:67:e4: 8e:06:46:58:5a:dd:1a:32:c8:04:d0:5e:ad:2a:ba:3f:e9:ce: 8f:54:f7:dd:5c:ad:49:06:07:d8:fc:49:44:b4:61:0d:3b:5d: 5f:dc:fc:ba -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtNEd2JkBz0P8jkgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl Njc2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OTg2ZDJkZDYtZjkxOC00OWVkLTk3NzktZTY2ZDYxMTMzZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH9sz8/y35tHZw/M6EmZrrZM4vufVMGQJWAN 2PpD/aKps0A+AfS3JMDZ6xnqAiCc9NIw685bR6460MO+7T0s4ByxDJt+PmfHNFMh qR9BDDCYCnlW0rJIVMEcH6EVUGfkamzDeWk+6/GhJmMPIO+d6NvtqsMxnjQrqQyt 9FDsOtvWz5BAH+UNN8mnTyAy45F1LjVpFQI8bWjXdzYYFvP4w0TZX+WgtA2c0lqB rRonvPl9baioymVodI7Z/q/Cfv60hsTdvSQ9MWi0XBLcULho7elYn1pjLysH1k5D EkliaPNeruR02YMxVayTW27lU4bD0wMjs8hzPtcPpEsF+7znPQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGl1SWZ8twTGeRMdhI5qwWYbNQhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvMGQ4ZTY3ZjAtYjI5Yi0z YmM5LTk2NzEtOGYzYTE3OTU1NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2 YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqiHMA8E AgACMAkDBwQmAvvZD/AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhrWGprf2sbElq8OavmX19Nw3EcVT1JKY Cj718DaXEKIqiS6dAGLHU1eN8KuBKHYUY8NYixZnZr9k8CbsnE1oEmGKu7h1SRlC GTaOYN0gib2evrkS1fJePb8Sac5Iel1/DKYnV27Ig+oot5DeAhjKxTCwWMEogU6m Ut5puu6IR5eBOwiFJOLmdj4j3S/vg+3Lv9l+ZNcSG3ijzHmNr/IMO6lNu4fcJot+ jeI6v772nlIuCZcyEtW0ISO1Pw7BNqduNGfqW8dlVBUKpKr4VSQAi/2b4LvoEGfk jgZGWFrdGjLIBNBerSq6P+nOj1T33VytSQYH2PxJRLRhDTtdX9z8ug== -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:36 2025 by rpki-client