$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa File: 3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa (raw, json) Hash identifier: thqXf/0bt0AY9qRbVOww9/ooy40cXE69ZDryzsP9RH4= Subject key identifier: 18:7D:6D:7B:DB:0A:6B:0B:F4:F5:14:C2:6D:BA:DA:5D:E4:09:EF:B9 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B4081CD01A9FE2C1F931E6C40 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 208.72.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:cd:01:a9:fe:2c:1f:93:1e:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=a42eb92d-ca61-440b-b3a9-6f899ca08bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:d6:0c:32:01:82:28:dc:81:b5:9f:d0:71: bd:cf:75:d3:cd:2d:f4:cc:17:01:68:c9:01:58:56: 7a:03:06:d4:92:1b:71:8f:e0:3e:70:65:cc:73:a1: 31:0c:44:1b:fc:ca:00:14:c4:2a:dd:47:16:3f:81: 52:8a:dd:33:18:43:0d:98:e7:3f:ff:0e:ae:15:bd: 61:61:81:d8:18:18:f5:95:af:e2:87:bc:91:46:6c: 08:21:67:0e:61:65:f3:ea:23:eb:52:8d:23:b8:fe: 2c:8e:41:08:c6:39:72:87:92:2e:1f:12:56:3e:e9: b7:49:7e:8d:46:70:37:2c:52:e5:ec:f8:00:39:59: a0:d1:87:ee:81:c6:9a:26:54:61:b5:2b:31:aa:db: 16:36:4c:53:42:a4:6c:42:7f:fd:4d:dc:73:ba:ef: c0:5c:31:ea:47:92:9a:b4:f7:dd:ec:4e:ec:f6:30: 7f:ed:2a:8f:dc:c6:82:f2:3a:d6:cb:1b:fa:a2:1d: e0:1b:77:ca:2d:4f:18:90:fd:56:d1:1e:6a:ee:93: 4d:51:67:84:58:db:50:3d:c2:15:8a:33:02:f4:14: 8b:de:55:45:4e:6c:dd:17:6d:86:22:1f:f5:6a:8c: 8b:c8:01:d0:db:64:cc:40:c7:71:50:2a:b0:86:09: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7D:6D:7B:DB:0A:6B:0B:F4:F5:14:C2:6D:BA:DA:5D:E4:09:EF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.72.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d2:99:f4:ed:4e:fb:57:2d:93:91:23:a8:bd:e5:0d:86:1b: 58:f7:0b:7d:7b:23:af:28:d1:cb:f2:04:68:d6:53:c9:5f:b3: 5c:cc:14:25:73:e6:2a:6a:9e:b9:13:4e:9a:cb:32:a8:e2:9f: 67:9f:cd:32:6e:c4:5f:c3:2b:a7:50:db:ec:7d:3f:8c:a1:ae: c1:ee:13:d4:e8:90:86:37:d6:2f:65:f8:93:69:b8:93:eb:be: 58:2e:db:11:d3:70:2a:65:7d:55:38:d2:e2:00:90:ac:91:d2: c1:6a:7c:58:a9:62:d1:c7:fc:d9:39:4a:8b:46:7e:3f:4a:f6: be:82:4e:4b:41:8d:e4:57:8d:e2:8c:3b:53:68:e6:63:5c:a6: 2c:41:8c:ac:e4:05:98:a3:a8:35:e2:42:bc:fc:6a:5c:1f:d4: 16:2c:2f:8a:49:37:4c:72:08:92:29:24:d9:71:17:92:88:c2: 83:e8:dc:e1:46:93:b2:54:b3:b4:22:7b:12:f4:57:ad:c2:b1: 23:08:9c:a1:84:1f:85:52:84:71:3c:5c:cb:91:33:b2:be:52: 2a:60:ae:c9:5d:24:ae:1b:58:d4:9d:a9:9a:10:fb:be:aa:15: cb:79:cc:03:cf:30:41:8c:15:50:ee:c7:b7:bd:bd:f4:0a:b6: 06:dd:f3:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgc0Bqf4sH5MebEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YTQyZWI5MmQtY2E2MS00NDBiLWIzYTktNmY4OTljYTA4YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+nWDDIBgijcgbWf0HG9z3XTzS30zBcBaMkB WFZ6AwbUkhtxj+A+cGXMc6ExDEQb/MoAFMQq3UcWP4FSit0zGEMNmOc//w6uFb1h YYHYGBj1la/ih7yRRmwIIWcOYWXz6iPrUo0juP4sjkEIxjlyh5IuHxJWPum3SX6N RnA3LFLl7PgAOVmg0YfugcaaJlRhtSsxqtsWNkxTQqRsQn/9Tdxzuu/AXDHqR5Ka tPfd7E7s9jB/7SqP3MaC8jrWyxv6oh3gG3fKLU8YkP1W0R5q7pNNUWeEWNtQPcIV ijMC9BSL3lVFTmzdF22GIh/1aoyLyAHQ22TMQMdxUCqwhgkN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh9bXvbCmsL9PUUwm262l3kCe+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvM2UxOGI0ZmUtYmU1MS0z MGY3LWEwOGMtNmY5M2E2M2M0NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPSmfTtTvtXLZORI6i95Q2GG1j3C317I68o0cvyBGjWU8lfs1zMFCVz 5ipqnrkTTprLMqjin2efzTJuxF/DK6dQ2+x9P4yhrsHuE9TokIY31i9l+JNpuJPr vlgu2xHTcCplfVU40uIAkKyR0sFqfFipYtHH/Nk5SotGfj9K9r6CTktBjeRXjeKM O1No5mNcpixBjKzkBZijqDXiQrz8alwf1BYsL4pJN0xyCJIpJNlxF5KIwoPo3OFG k7JUs7QiexL0V63CsSMInKGEH4VShHE8XMuRM7K+UipgrsldJK4bWNSdqZoQ+76q Fct5zAPPMEGMFVDux7e9vfQKtgbd8wc= -----END CERTIFICATE-----Generated at Tue Oct 21 16:23:04 2025 by rpki-client