$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09411eae-c6c6-3afd-ac8a-7339c44cca35.roa File: 09411eae-c6c6-3afd-ac8a-7339c44cca35.roa (raw, json) Hash identifier: VB5NtG9ZepQtbYr1QCOc6gzeaTcnUz2GvGal2fC/lgo= Subject key identifier: CB:6B:93:1D:13:AA:54:67:58:3C:93:80:22:4C:C6:9A:26:60:39:A2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B48E1B12BE20D51857966E990 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09411eae-c6c6-3afd-ac8a-7339c44cca35.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 30633 IP address blocks: 206.75.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b1:2b:e2:0d:51:85:79:66:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2abe853e-3b4c-46d6-a023-551addb393d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:10:70:b0:fc:8c:f5:68:d5:39:d3:cb:e8: cc:b0:9e:af:a5:b2:5c:75:56:49:46:f1:5b:67:41: 64:e4:d9:b9:94:11:d1:c9:c1:d2:bb:67:b3:b1:eb: af:fd:0c:74:4d:28:87:c1:90:bf:17:0e:d3:6c:ee: 79:e4:00:b4:23:4e:38:f9:f5:2e:6c:59:f5:99:82: b4:e6:01:59:43:8c:77:53:4e:2a:fc:60:22:4f:26: 7a:b2:9f:59:c0:55:9b:cc:5b:26:ee:4d:b4:94:b7: 82:18:fd:20:99:72:4f:dc:78:51:e5:5b:75:93:95: 4c:e9:f7:ed:d8:23:3d:0c:f3:fc:24:40:23:28:99: 2a:a3:35:fc:cc:28:37:ee:46:4f:3f:cc:2e:44:d8: 70:39:6a:a7:41:37:7d:11:33:bd:e3:6e:66:fa:db: a6:51:9d:0a:ed:f9:51:33:74:e9:ec:cb:76:fb:3c: 72:24:c0:ed:69:58:21:16:36:b9:9f:b3:00:24:04: ca:1b:2f:36:f4:8a:fe:d6:ca:17:9a:ae:d8:4d:59: da:09:fb:bf:be:fc:66:07:24:62:0e:d4:67:09:d2: 19:bf:20:7b:67:39:96:9a:c2:47:46:66:a6:ed:65: a8:16:d1:d7:ed:9b:76:5b:44:48:8e:a0:bb:6c:b4: 6d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6B:93:1D:13:AA:54:67:58:3C:93:80:22:4C:C6:9A:26:60:39:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09411eae-c6c6-3afd-ac8a-7339c44cca35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.75.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d5:2c:e2:46:92:9f:7e:ca:50:f2:25:d9:a7:a6:cb:4c:6e: 0c:d0:91:12:5f:da:4f:d3:ef:3e:92:4e:5d:9c:3d:3b:67:89: 7e:db:c2:0e:51:de:0d:b7:e5:c8:26:76:cd:0a:a6:6e:6d:52: 2b:f5:c2:0d:4c:51:e5:31:0e:aa:45:d0:b3:fd:75:39:2b:23: b5:e9:8c:cb:b8:01:d1:4c:cb:fe:27:0d:41:0e:7e:ba:44:d3: c9:52:9f:2c:c7:e6:3d:61:76:fd:63:b9:a4:71:f3:d0:19:b7: e0:9a:27:f4:81:17:c1:f3:b7:a5:46:21:8c:5d:12:a9:e2:3d: cd:15:fa:8f:bc:f7:5f:9e:50:4d:cb:5e:e4:58:bd:9d:12:ae: c8:17:cd:ba:41:15:21:2f:ca:73:84:94:98:f1:cd:8a:20:01: bd:a4:63:5a:6e:b7:88:e5:2e:db:c2:91:40:ee:83:28:80:95: 0b:2a:dc:9a:ff:27:6f:5b:93:ed:88:40:44:04:16:f1:ff:a1: 98:cc:64:ad:19:57:3e:61:0d:ef:31:a3:be:38:0e:44:db:4d: 0f:11:b6:69:db:36:cf:2c:f2:34:a6:1e:80:1c:7d:9c:d2:3a: c8:77:0f:05:db:f6:69:2e:03:84:28:5e:01:72:bc:aa:bb:b2: 15:5d:26:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bEr4g1RhXlm6ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmFiZTg1M2UtM2I0Yy00NmQ2LWEwMjMtNTUxYWRkYjM5M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp4QcLD8jPVo1TnTy+jMsJ6vpbJcdVZJRvFb Z0Fk5Nm5lBHRycHSu2ezseuv/Qx0TSiHwZC/Fw7TbO555AC0I044+fUubFn1mYK0 5gFZQ4x3U04q/GAiTyZ6sp9ZwFWbzFsm7k20lLeCGP0gmXJP3HhR5Vt1k5VM6fft 2CM9DPP8JEAjKJkqozX8zCg37kZPP8wuRNhwOWqnQTd9ETO9425m+tumUZ0K7flR M3Tp7Mt2+zxyJMDtaVghFja5n7MAJATKGy829Ir+1soXmq7YTVnaCfu/vvxmByRi DtRnCdIZvyB7ZzmWmsJHRmam7WWoFtHX7Zt2W0RIjqC7bLRtJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtrkx0TqlRnWDyTgCJMxpomYDmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDk0MTFlYWUtYzZjNi0z YWZkLWFjOGEtNzMzOWM0NGNjYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzktyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITVLOJGkp9+ylDyJdmnpstMbgzQkRJf2k/T7z6STl2cPTtniX7bwg5R 3g235cgmds0Kpm5tUiv1wg1MUeUxDqpF0LP9dTkrI7XpjMu4AdFMy/4nDUEOfrpE 08lSnyzH5j1hdv1juaRx89AZt+CaJ/SBF8Hzt6VGIYxdEqniPc0V+o+891+eUE3L XuRYvZ0SrsgXzbpBFSEvynOElJjxzYogAb2kY1put4jlLtvCkUDugyiAlQsq3Jr/ J29bk+2IQEQEFvH/oZjMZK0ZVz5hDe8xo744DkTbTQ8RtmnbNs8s8jSmHoAcfZzS Osh3DwXb9mkuA4QoXgFyvKq7shVdJkk= -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:29 2025 by rpki-client