$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/f70b4207-9d81-343c-8366-de84e2638a1c.roa File: f70b4207-9d81-343c-8366-de84e2638a1c.roa (raw, json) Hash identifier: blNOGgspXxg0NqfJIrMa5Br1CGG5a9iR+oFb7SfVkuE= Subject key identifier: 80:F7:F3:30:73:39:11:92:4A:02:F4:2F:56:D3:76:4C:76:3E:AC:46 Certificate issuer: /CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea Certificate serial: 010D0C9F4328584B742752929F6CFB379655EF00 Authority key identifier: 24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/f70b4207-9d81-343c-8366-de84e2638a1c.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 210 IP address blocks: 163.6.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:52:92:9f:6c:fb:37:96:55:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=0d76ed43-1ec7-4df1-8c62-d82ed4fd2bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:80:2b:e4:70:bb:f0:99:24:7b:b3:43:ed:5d: 1c:d0:74:41:01:e3:9e:ab:70:9b:3e:b3:33:be:6a: 4e:ca:11:b4:e3:71:ad:06:c0:8c:b4:b2:9d:8f:c1: 98:8d:ce:4d:e3:a0:44:f2:cf:fd:be:75:ed:ca:bd: 29:82:a1:86:65:8c:2a:f6:71:41:65:a1:e9:8e:49: 9a:b3:a0:d4:aa:87:79:a2:d9:48:b9:b8:9f:a7:bd: ef:76:fb:27:3a:f3:83:7d:68:12:2e:b0:7a:c2:60: b6:a0:4b:9e:71:7d:b3:a0:58:74:34:89:c0:09:d7: 7e:4b:e8:4e:77:af:fb:c2:66:61:b4:f4:9f:b4:87: 59:18:d1:28:86:73:4b:27:9c:89:da:76:a3:de:c0: 15:b9:fb:3d:50:f5:9a:36:5b:5d:dc:4f:35:a8:ba: a4:29:60:02:ef:72:e5:02:bf:f7:4a:24:13:68:58: 9a:58:9e:67:9b:01:f0:cc:02:d0:45:97:2b:1f:20: 5d:fa:f4:10:16:57:96:42:6f:a1:5b:33:00:42:ee: 7a:38:9b:f9:27:03:9c:c0:4e:c0:ba:54:9c:a4:63: b7:4d:11:10:ab:04:67:2e:da:61:79:0b:32:15:f3: a5:5a:32:0d:db:e6:01:06:1c:69:fd:a9:4d:4e:40: cd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F7:F3:30:73:39:11:92:4A:02:F4:2F:56:D3:76:4C:76:3E:AC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/f70b4207-9d81-343c-8366-de84e2638a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl X509v3 Authority Key Identifier: keyid:24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer sbgp-ipAddrBlock: critical IPv4: 163.6.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:42:9e:bf:a9:58:71:33:8c:ea:ee:62:a3:0c:87:54:25:31: 4e:9e:d4:c9:e9:02:39:e4:71:6f:04:77:4f:e0:15:4b:6c:83: db:39:11:06:53:fa:3f:6f:dd:b1:b2:1c:a7:67:d1:25:41:a8: 1f:5d:a3:91:0f:ba:f4:41:24:c9:bc:cb:4f:5c:d8:23:98:1b: 92:55:84:d4:c6:10:c8:9c:10:36:2f:07:78:85:ed:9a:57:02: 3e:a6:a3:ba:71:0d:a5:a9:f4:5d:fd:ee:b3:ea:a3:d2:a8:79: 88:63:76:7c:d8:da:d5:d1:cc:c4:39:88:c7:22:ab:0c:09:e6: 25:ec:c7:96:48:e3:18:03:17:b7:03:fa:6c:4f:3d:d5:f4:5e: af:01:79:7a:84:8b:bf:0c:d5:77:50:b3:29:ec:9e:de:1a:4b: 03:09:7b:1b:37:ad:7b:f0:c6:24:47:a2:df:fa:39:3e:e0:76: c0:27:04:08:35:19:70:a8:32:6e:6d:ad:c5:27:6a:8c:8b:59: a8:2a:24:ce:d8:1f:05:e5:be:d2:c1:36:4b:ef:b7:69:72:bd: 21:09:b8:0f:fc:ef:28:a3:56:99:4f:af:a3:4f:c3:8d:0a:d0: cf:c2:b8:c6:3d:40:d3:e8:12:66:59:ce:6a:5d:29:f2:b7:97: 2d:5d:4a:eb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt0J1KSn2z7N5ZV7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJkNDkwZjAtNDRhMC00MGUzLWFmYzItZDlmNDM1MzRk N2VhMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk MGQ3NmVkNDMtMWVjNy00ZGYxLThjNjItZDgyZWQ0ZmQyYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Ar5HC78Jkke7ND7V0c0HRBAeOeq3CbPrMz vmpOyhG043GtBsCMtLKdj8GYjc5N46BE8s/9vnXtyr0pgqGGZYwq9nFBZaHpjkma s6DUqod5otlIubifp73vdvsnOvODfWgSLrB6wmC2oEuecX2zoFh0NInACdd+S+hO d6/7wmZhtPSftIdZGNEohnNLJ5yJ2naj3sAVufs9UPWaNltd3E81qLqkKWAC73Ll Ar/3SiQTaFiaWJ5nmwHwzALQRZcrHyBd+vQQFleWQm+hWzMAQu56OJv5JwOcwE7A ulScpGO3TREQqwRnLtpheQsyFfOlWjIN2+YBBhxp/alNTkDNWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFID38zBzORGSSgL0L1bTdkx2PqxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MmQ0 OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0MzUzNGQ3ZWEvZjcwYjQyMDctOWQ4MS0z NDNjLTgzNjYtZGU4NGUyNjM4YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzJkNDkwZjAtNDRhMC00MGUzLWFm YzItZDlmNDM1MzRkN2VhLzcyZDQ5MGYwLTQ0YTAtNDBlMy1hZmMyLWQ5ZjQzNTM0 ZDdlYS5jcmwwHwYDVR0jBBgwFoAUJOyHuwXBemBfJgqst6u43JKJUaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MmQ0OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0 MzUzNGQ3ZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAowYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXEKev6lYcTOM6u5iowyHVCUxTp7UyekCOeRxbwR3T+AVS2yD2zkRBlP6 P2/dsbIcp2fRJUGoH12jkQ+69EEkybzLT1zYI5gbklWE1MYQyJwQNi8HeIXtmlcC PqajunENpan0Xf3us+qj0qh5iGN2fNja1dHMxDmIxyKrDAnmJezHlkjjGAMXtwP6 bE891fRerwF5eoSLvwzVd1CzKeye3hpLAwl7Gzete/DGJEei3/o5PuB2wCcECDUZ cKgybm2txSdqjItZqCokztgfBeW+0sE2S++3aXK9IQm4D/zvKKNWmU+vo0/DjQrQ z8K4xj1A0+gSZlnOal0p8reXLV1K6w== -----END CERTIFICATE-----Generated at Mon Oct 20 13:23:04 2025 by rpki-client