$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa File: 33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa (raw, json) Hash identifier: 1rCsMPspMmZPS3kx3UJLDvOkNfWY1AUzieBqj7LffZY= Subject key identifier: CC:41:39:38:21:FD:D4:71:0E:44:0A:AE:49:28:3E:6B:6D:B5:9C:89 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B072D380ED0B986CFCEE4E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 199.212.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2d:38:0e:d0:b9:86:cf:ce:e4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=d02d51bc-3622-4b17-b50f-f0d7578c7190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:03:fe:90:4f:08:98:50:8e:03:a4:3f:54: 7b:bc:67:11:3d:1c:ac:4a:4f:ce:90:61:92:46:b6: 51:14:5a:e5:f7:95:53:1d:ac:ef:04:4b:f5:90:51: f2:18:23:29:9b:13:13:b8:e5:cb:bb:d7:ed:23:d9: 3e:c9:a0:29:fd:9b:c3:b8:fa:a7:d4:8f:63:e0:21: ec:fa:f2:66:18:e5:e7:9a:a0:fc:27:9e:3c:15:2c: 1e:77:12:20:e2:af:64:f7:08:97:05:32:92:19:62: ca:91:57:2a:c5:d2:c8:25:6f:ea:a8:2e:cf:6f:e6: 53:86:b9:90:a6:5e:47:49:fe:79:4f:46:cb:b4:7f: ad:3b:7d:52:37:e8:5e:d1:b6:1e:8e:c0:09:71:07: f2:c5:c9:2e:30:85:92:34:ec:2d:87:83:20:4c:b3: ef:1e:20:6f:60:ee:e4:22:90:ea:f7:2c:0e:87:0b: 81:d5:e4:f2:d6:c1:33:3b:38:c8:a1:5f:9a:7d:b9: 0c:28:4e:11:d9:f6:d3:84:2a:43:08:6f:97:0d:cd: 19:40:77:1b:e6:6d:51:e5:0c:59:b8:ea:75:23:6f: 90:b2:47:f4:48:44:d9:3e:3a:98:16:d7:6f:3c:1e: 53:4e:25:a6:11:92:05:1d:12:7b:21:da:ab:3f:a9: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:39:38:21:FD:D4:71:0E:44:0A:AE:49:28:3E:6B:6D:B5:9C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.212.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:7e:ba:e0:07:32:2e:08:3a:66:0e:19:78:c6:f3:e5:75:c9: 66:de:c8:f4:9f:f9:6f:80:c8:92:e1:9a:fb:6b:2a:57:5a:0a: 9b:ae:7f:1d:8b:74:b6:9e:96:9d:03:ce:fa:af:f4:50:8f:69: 67:d3:e0:60:b3:fd:a1:bc:f6:2d:08:f2:fb:ad:ae:92:df:e6: d8:53:13:e8:b2:ac:10:78:ac:9f:0b:1b:32:5e:0c:e3:fd:7b: 3f:64:aa:a3:42:12:47:30:3c:34:6a:23:48:91:17:3c:d9:77: 19:9b:cd:30:14:5e:fc:3d:60:05:05:79:b6:40:7d:2c:ef:b3: 6d:a4:db:92:1e:2b:3d:d1:fb:9b:61:54:a5:97:7d:6d:37:59: 23:84:f1:a8:8a:86:49:0b:ad:56:b3:ac:29:c0:8f:ae:70:74: 92:8f:91:35:c2:a6:68:db:f1:22:7e:c8:b6:50:53:16:be:cf: 2e:17:83:c8:39:62:bb:d8:2a:98:98:be:80:48:8d:fd:93:d4: c4:10:8c:d7:23:4b:f5:f3:b5:4f:64:bb:0a:56:ca:0c:47:df: 4c:1a:f3:f4:62:e0:02:13:6e:76:49:ba:ef:ea:c3:20:ed:39: 69:71:0c:2c:8d:e7:87:d3:b8:00:0f:5f:65:db:2f:52:92:9b: 48:49:3e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBy04DtC5hs/O5OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDAyZDUxYmMtMzYyMi00YjE3LWI1MGYtZjBkNzU3OGM3MTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4YD/pBPCJhQjgOkP1R7vGcRPRysSk/OkGGS RrZRFFrl95VTHazvBEv1kFHyGCMpmxMTuOXLu9ftI9k+yaAp/ZvDuPqn1I9j4CHs +vJmGOXnmqD8J548FSwedxIg4q9k9wiXBTKSGWLKkVcqxdLIJW/qqC7Pb+ZThrmQ pl5HSf55T0bLtH+tO31SN+he0bYejsAJcQfyxckuMIWSNOwth4MgTLPvHiBvYO7k IpDq9ywOhwuB1eTy1sEzOzjIoV+afbkMKE4R2fbThCpDCG+XDc0ZQHcb5m1R5QxZ uOp1I2+Qskf0SETZPjqYFtdvPB5TTiWmEZIFHRJ7IdqrP6mClQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxBOTgh/dRxDkQKrkkoPmtttZyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzNjMWMwMTAtY2QwMy0z MDEwLTliOWEtN2ZiMmZkMTIzNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx9SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOB+uuAHMi4IOmYOGXjG8+V1yWbeyPSf+W+AyJLhmvtrKldaCpuufx2L dLaelp0Dzvqv9FCPaWfT4GCz/aG89i0I8vutrpLf5thTE+iyrBB4rJ8LGzJeDOP9 ez9kqqNCEkcwPDRqI0iRFzzZdxmbzTAUXvw9YAUFebZAfSzvs22k25IeKz3R+5th VKWXfW03WSOE8aiKhkkLrVazrCnAj65wdJKPkTXCpmjb8SJ+yLZQUxa+zy4Xg8g5 YrvYKpiYvoBIjf2T1MQQjNcjS/XztU9kuwpWygxH30wa8/Ri4AITbnZJuu/qwyDt OWlxDCyN54fTuAAPX2XbL1KSm0hJPl4= -----END CERTIFICATE-----Generated at Sun Oct 19 22:49:19 2025 by rpki-client