$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/6c920a13-fbeb-3e6d-a569-500385a453da.roa File: 6c920a13-fbeb-3e6d-a569-500385a453da.roa (raw, json) Hash identifier: +QQ00BDUzfyhEZ32x2uWWKt3A9IS+3kM7qhWOEMwmdA= Subject key identifier: 12:17:5C:6A:55:3E:E1:7F:C5:6E:F0:22:3C:6E:67:5E:28:0D:71:9A Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584B44B1C42509EE3199C5706DA0 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/6c920a13-fbeb-3e6d-a569-500385a453da.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 399864 IP address blocks: 216.238.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c4:25:09:ee:31:99:c5:70:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=d226bed8-188f-41cc-9da9-488994418673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:4f:5c:d3:40:71:44:7d:c1:08:6a:f0:ee: c6:36:8f:e6:c6:a2:b4:23:8c:38:5b:d1:0e:52:b2: b6:76:b1:2e:9f:39:e5:61:e3:5b:24:05:d6:63:11: 6e:9f:83:55:80:33:b1:80:5f:9b:77:fd:f4:2d:65: 11:f1:2f:2d:35:c8:84:2d:e0:ee:71:24:c4:5e:46: fa:b6:60:23:fa:c5:19:bd:33:7d:bc:3d:de:c0:cf: df:43:c1:58:16:7a:82:5b:0e:09:f0:27:c0:62:80: 92:1b:22:e4:d5:ae:7e:30:39:56:69:24:41:11:c2: 10:30:c9:9a:69:31:f7:d5:1a:47:20:f3:b2:8b:82: a5:90:28:3a:b3:cc:8a:4b:d7:ea:99:64:fc:c1:53: 52:7a:db:05:f1:44:90:37:9e:61:5e:4b:30:bf:b8: 73:7a:70:49:2d:c9:53:52:f7:75:c5:af:8b:da:e0: 04:98:31:5d:47:f0:96:47:02:21:57:71:d5:56:9c: bc:50:33:9b:5a:ca:1a:87:1a:5d:2c:cb:c6:ba:15: 5e:40:4e:58:69:44:1c:f1:39:06:fe:17:22:5a:e1: c3:de:ba:d6:ac:a6:d6:5f:15:2a:58:56:0b:d4:74: dc:9e:e2:df:ae:bb:52:51:cb:b3:57:76:b7:c6:e0: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:5C:6A:55:3E:E1:7F:C5:6E:F0:22:3C:6E:67:5E:28:0D:71:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/6c920a13-fbeb-3e6d-a569-500385a453da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 216.238.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a1:d5:73:dc:60:1a:64:69:cc:17:a2:45:53:a6:79:4f:e9: f4:17:33:60:f2:26:ed:e9:af:74:d1:69:8c:ee:2a:bb:ed:d8: cc:4a:0e:d5:21:18:82:c5:f2:04:42:52:ae:ff:4d:35:c1:3f: 67:ae:3e:f9:20:76:89:51:6b:d3:7c:3d:ac:30:32:01:ee:04: e4:8a:0d:d9:4e:17:ac:cb:db:81:ff:e2:d6:e8:ee:91:9a:55: 72:33:4c:b1:49:3a:d3:1d:34:41:4d:29:8c:41:52:cd:1f:9b: 27:d2:e9:aa:c1:e7:6c:0e:0a:38:78:31:bd:7a:66:a8:7f:2c: 8f:27:0f:55:18:f7:0c:b8:99:cc:51:24:27:b8:03:e9:93:88: e6:43:a7:24:53:c0:48:27:3e:18:70:2b:84:70:6a:4d:10:63: e6:53:9d:1e:dc:3b:50:f1:9c:70:0c:e8:0c:06:bd:bd:15:ad: 87:b4:71:a0:01:92:8d:ab:0a:3c:db:92:94:af:5c:e0:c4:13: bd:af:39:55:2a:f2:6c:6c:98:4e:77:e5:f9:c7:bc:b8:e6:c0: 5a:34:ae:55:60:3c:43:79:be:11:27:01:b5:06:c8:2b:9b:a2: 84:e7:d9:01:2f:92:11:0d:4d:79:de:d0:7a:26:1e:d1:a9:97: fa:7e:ad:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscQlCe4xmcVwbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk ZDIyNmJlZDgtMTg4Zi00MWNjLTlkYTktNDg4OTk0NDE4NjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozVPXNNAcUR9wQhq8O7GNo/mxqK0I4w4W9EO UrK2drEunznlYeNbJAXWYxFun4NVgDOxgF+bd/30LWUR8S8tNciELeDucSTEXkb6 tmAj+sUZvTN9vD3ewM/fQ8FYFnqCWw4J8CfAYoCSGyLk1a5+MDlWaSRBEcIQMMma aTH31RpHIPOyi4KlkCg6s8yKS9fqmWT8wVNSetsF8USQN55hXkswv7hzenBJLclT Uvd1xa+L2uAEmDFdR/CWRwIhV3HVVpy8UDObWsoahxpdLMvGuhVeQE5YaUQc8TkG /hciWuHD3rrWrKbWXxUqWFYL1HTcnuLfrrtSUcuzV3a3xuDpaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIXXGpVPuF/xW7wIjxuZ14oDXGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvNmM5MjBhMTMtZmJlYi0z ZTZkLWE1NjktNTAwMzg1YTQ1M2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2O44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSh1XPcYBpkacwXokVTpnlP6fQXM2DyJu3pr3TRaYzuKrvt2MxKDtUh GILF8gRCUq7/TTXBP2euPvkgdolRa9N8PawwMgHuBOSKDdlOF6zL24H/4tbo7pGa VXIzTLFJOtMdNEFNKYxBUs0fmyfS6arB52wOCjh4Mb16Zqh/LI8nD1UY9wy4mcxR JCe4A+mTiOZDpyRTwEgnPhhwK4Rwak0QY+ZTnR7cO1DxnHAM6AwGvb0VrYe0caAB ko2rCjzbkpSvXODEE72vOVUq8mxsmE535fnHvLjmwFo0rlVgPEN5vhEnAbUGyCub ooTn2QEvkhENTXne0HomHtGpl/p+rUg= -----END CERTIFICATE-----Generated at Tue Oct 21 09:39:55 2025 by rpki-client