$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa File: b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa (raw, json) Hash identifier: uU3uR0E8rEFGalQK0u3AkA9lddyaPIY4Z0YDXtreQyU= Subject key identifier: B8:F8:E9:B4:25:D8:22:46:1A:B8:2F:67:6F:CA:87:44:C4:D4:E8:8F Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Certificate serial: 010D0C9F4328584B7B21F72938BC2DC0C5867400 Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 60171 IP address blocks: 206.168.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f7:29:38:bc:2d:c0:c5:86:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=71c7a71d-1308-490c-a3fa-b3e8d749c043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e1:31:dc:34:87:fd:94:e5:e7:05:1b:4d:bb: 98:0f:82:6a:c1:73:42:b9:bc:de:de:b7:d7:d7:b1: 6a:3b:cb:b7:ed:1b:4d:6e:62:4b:ae:bd:7b:1c:84: c6:ff:e5:bb:48:54:d4:fb:52:81:f0:aa:12:d9:2f: bc:2a:46:9d:9b:23:91:4c:52:2f:e3:82:51:e7:5e: a6:66:49:f4:62:90:e3:aa:3b:d4:9d:47:2a:c4:e1: 33:e1:d8:61:b4:07:d4:ef:a9:8b:7a:c5:3a:93:14: 20:d0:84:d3:a9:b0:f4:05:36:0a:2b:2e:89:1b:e3: c1:0d:4c:fc:09:22:8f:d2:e6:a6:45:eb:7a:2d:f8: 64:ca:d3:53:ce:5a:2b:c9:0a:84:69:f7:74:ec:d7: f9:d2:82:fb:0a:bc:c7:d6:92:94:38:49:88:e6:e3: 74:05:30:27:2e:2c:5f:81:f3:e8:82:8e:21:78:b0: fd:a0:36:87:a2:1d:b2:e1:b4:7d:d7:66:87:b7:72: d4:1e:49:f4:d1:48:c6:dd:09:12:29:a6:55:4c:9f: 47:95:f8:50:a5:82:1f:fd:06:ff:e4:f7:33:6f:9b: da:a5:ba:3f:23:f4:e6:b6:15:9a:bc:c5:cc:ec:03: c2:86:5d:82:ca:47:60:28:13:3c:ab:fa:f7:9b:48: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F8:E9:B4:25:D8:22:46:1A:B8:2F:67:6F:CA:87:44:C4:D4:E8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl X509v3 Authority Key Identifier: keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer sbgp-ipAddrBlock: critical IPv4: 206.168.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ce:7f:40:2c:c8:e4:91:15:9a:b5:e2:36:97:f9:59:5c:d8: 17:dc:34:4d:ff:d3:c0:88:6e:3a:3f:c3:d0:66:7c:19:eb:16: f6:89:e3:27:41:a7:62:7a:76:36:a1:f1:91:53:a2:f1:08:b0: 00:fe:07:5f:a3:de:6c:a4:c8:40:48:1e:e2:28:3c:69:27:6f: bb:6e:51:47:c8:ac:1e:d4:0b:52:11:91:ff:60:18:6a:78:e5: a6:46:f6:b5:f8:ff:6d:6d:1c:99:ac:38:b6:ae:60:35:7b:fe: cc:9c:ec:a9:f6:3c:c7:54:f8:a0:d1:38:dd:f9:2d:37:81:b3: ed:98:c9:90:b8:ce:7a:93:cf:a2:e6:d5:bd:35:26:8f:d9:b2: 05:e7:50:07:a1:22:58:6f:65:88:2e:d2:61:f7:47:7d:3b:c5: 34:00:55:4b:1d:44:3e:79:5c:ac:d8:a3:45:cf:4b:84:53:95: 50:ed:ae:9a:d0:36:16:7d:7c:be:9f:1d:22:0d:3b:79:06:5d: 8d:1f:65:2f:dc:f7:8b:0c:8d:87:fc:df:aa:02:17:d7:9d:a5: 35:8f:52:c3:62:65:96:63:30:a0:8a:f6:37:87:73:7f:9d:55: c1:de:e2:75:9e:be:d9:54:9b:f2:17:b1:f5:e3:4d:cb:09:7c: 4a:3d:aa:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfcpOLwtwMWGdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiZjZhYTItN2I3Zi00NmI0LWJkZjItZGQ0ZDA3NWUy NjZmMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NzFjN2E3MWQtMTMwOC00OTBjLWEzZmEtYjNlOGQ3NDljMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOEx3DSH/ZTl5wUbTbuYD4JqwXNCubze3rfX 17FqO8u37RtNbmJLrr17HITG/+W7SFTU+1KB8KoS2S+8KkadmyORTFIv44JR516m Zkn0YpDjqjvUnUcqxOEz4dhhtAfU76mLesU6kxQg0ITTqbD0BTYKKy6JG+PBDUz8 CSKP0uamRet6LfhkytNTzloryQqEafd07Nf50oL7CrzH1pKUOEmI5uN0BTAnLixf gfPogo4heLD9oDaHoh2y4bR912aHt3LUHkn00UjG3QkSKaZVTJ9HlfhQpYIf/Qb/ 5Pczb5vapbo/I/TmthWavMXM7APChl2CykdgKBM8q/r3m0htjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj46bQl2CJGGrgvZ2/Kh0TE1OiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jm NmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRkMDc1ZTI2NmYvYjMxY2E1MmUtMGQwNy0z ZWRmLWE3Y2MtOWNiOTAwYTNmYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiZjZhYTItN2I3Zi00NmI0LWJk ZjItZGQ0ZDA3NWUyNjZmL2YzYmY2YWEyLTdiN2YtNDZiNC1iZGYyLWRkNGQwNzVl MjY2Zi5jcmwwHwYDVR0jBBgwFoAUoAvAWaLOXCsgeuKQi8raTgSC9UkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JmNmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRk MDc1ZTI2NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbOf0AsyOSRFZq14jaX+Vlc2BfcNE3/08CIbjo/w9BmfBnrFvaJ4ydB p2J6djah8ZFTovEIsAD+B1+j3mykyEBIHuIoPGknb7tuUUfIrB7UC1IRkf9gGGp4 5aZG9rX4/21tHJmsOLauYDV7/syc7Kn2PMdU+KDRON35LTeBs+2YyZC4znqTz6Lm 1b01Jo/ZsgXnUAehIlhvZYgu0mH3R307xTQAVUsdRD55XKzYo0XPS4RTlVDtrprQ NhZ9fL6fHSINO3kGXY0fZS/c94sMjYf836oCF9edpTWPUsNiZZZjMKCK9jeHc3+d VcHe4nWevtlUm/IXsfXjTcsJfEo9qlg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:24 2025 by rpki-client