$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b24a13b-7699-3314-9e8c-cc84700890eb.roa File: 3b24a13b-7699-3314-9e8c-cc84700890eb.roa (raw, json) Hash identifier: 7ZCuXkvNnn6MPDsI+6X8q1ODgsahNDrJwtgLRh2r40Q= Subject key identifier: 4D:8C:F3:AA:AA:5A:04:98:77:41:21:75:6E:DD:4B:19:5A:EA:83:5E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C4D44A4152890E71BDE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b24a13b-7699-3314-9e8c-cc84700890eb.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 208.181.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c4:d4:4a:41:52:89:0e:71:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=6f4fc10d-bb85-4b07-a261-cc394a3eb844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:26:ca:10:d7:9c:bd:b4:8e:32:52:0e:82:dd: 00:cf:d5:b2:aa:ba:d9:91:27:41:2e:1f:b5:0c:60: b7:75:eb:63:cd:12:e1:d3:fa:af:80:30:31:bc:8f: 5d:88:3e:dd:fa:60:76:02:68:63:5a:24:e0:8a:5a: 2b:3a:40:2a:47:97:29:2c:cb:02:db:02:fe:81:b0: 33:37:df:e3:56:81:1d:95:17:12:94:03:93:bb:7f: 82:86:0d:f4:0f:66:72:59:3c:e9:63:fb:e1:c0:2f: 10:95:65:19:02:7a:32:93:83:6c:7c:f6:6e:ed:04: 48:ca:09:3f:21:60:c4:b9:55:1b:b8:e6:25:7b:75: 85:95:fb:5a:15:44:5f:36:93:db:42:0e:4d:df:2f: e1:72:54:6e:19:25:c0:06:f7:ad:c6:d9:b1:ec:a6: 01:97:c2:f8:b3:8f:c7:e1:71:55:7a:8a:b7:5e:9e: ef:92:a0:ef:73:cc:a6:ce:37:04:26:a8:62:11:6c: 5f:47:f5:e8:0a:43:fd:db:98:6a:57:92:6b:ef:db: 4f:c1:29:a9:85:79:23:6e:69:96:93:ab:a7:64:f5: 62:7a:55:d7:72:aa:33:63:7b:3d:06:8e:74:13:b8: fe:da:3a:a9:76:fd:e0:3c:79:a8:3a:79:14:07:8c: 5b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:F3:AA:AA:5A:04:98:77:41:21:75:6E:DD:4B:19:5A:EA:83:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b24a13b-7699-3314-9e8c-cc84700890eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:69:83:ab:42:0f:72:7d:9e:e3:66:6c:11:34:8b:14:34:1b: 55:ce:92:d7:3a:27:d9:10:65:cb:6c:4c:fe:1a:78:58:50:dd: 58:70:93:f4:0f:48:5d:2c:98:03:ca:e9:e7:6c:3a:b7:a4:37: b1:95:09:9b:37:c2:91:69:d8:3f:83:81:38:d5:ff:99:1f:7f: 26:8a:42:b0:93:92:81:c9:aa:b7:b3:ea:82:55:95:d7:4f:28: d7:16:b5:1a:4f:6b:11:52:7b:08:3c:eb:e5:70:3f:67:e0:aa: 34:88:84:2d:f9:46:c4:20:98:66:01:ac:d9:79:5b:59:15:5b: 1d:3d:a9:47:bf:90:89:3f:e2:09:c1:9f:7e:c4:83:99:35:f2: af:27:21:5e:a0:42:c8:e5:a5:20:f8:f6:64:67:46:81:9f:f9: 70:6a:e7:0a:5c:47:1b:9f:3e:48:90:d0:91:9d:db:88:6b:7e: fc:a8:ef:2d:37:8b:81:d1:1a:f3:f9:32:cc:b1:ac:6c:95:13: 96:b3:1c:5f:6e:81:22:9b:26:d8:f4:75:e0:b0:d4:9a:71:5c: ce:9d:bf:b7:06:44:51:0c:ea:27:53:4c:8d:6e:bf:09:cf:8b: ce:fd:08:75:50:2f:49:38:b7:6d:47:21:cd:2f:a6:5a:49:fc: 08:0f:c9:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcTUSkFSiQ5xveAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NmY0ZmMxMGQtYmI4NS00YjA3LWEyNjEtY2MzOTRhM2ViODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkybKENecvbSOMlIOgt0Az9WyqrrZkSdBLh+1 DGC3detjzRLh0/qvgDAxvI9diD7d+mB2AmhjWiTgilorOkAqR5cpLMsC2wL+gbAz N9/jVoEdlRcSlAOTu3+Chg30D2ZyWTzpY/vhwC8QlWUZAnoyk4NsfPZu7QRIygk/ IWDEuVUbuOYle3WFlftaFURfNpPbQg5N3y/hclRuGSXABvetxtmx7KYBl8L4s4/H 4XFVeoq3Xp7vkqDvc8ymzjcEJqhiEWxfR/XoCkP925hqV5Jr79tPwSmphXkjbmmW k6unZPVielXXcqozY3s9Bo50E7j+2jqpdv3gPHmoOnkUB4xb6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2M86qqWgSYd0EhdW7dSxla6oNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2IyNGExM2ItNzY5OS0z MzE0LTllOGMtY2M4NDcwMDg5MGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHppg6tCD3J9nuNmbBE0ixQ0G1XOktc6J9kQZctsTP4aeFhQ3Vhwk/QP SF0smAPK6edsOrekN7GVCZs3wpFp2D+DgTjV/5kffyaKQrCTkoHJqrez6oJVlddP KNcWtRpPaxFSewg86+VwP2fgqjSIhC35RsQgmGYBrNl5W1kVWx09qUe/kIk/4gnB n37Eg5k18q8nIV6gQsjlpSD49mRnRoGf+XBq5wpcRxufPkiQ0JGd24hrfvyo7y03 i4HRGvP5MsyxrGyVE5azHF9ugSKbJtj0deCw1JpxXM6dv7cGRFEM6idTTI1uvwnP i879CHVQL0k4t21HIc0vplpJ/AgPyWw= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:11 2025 by rpki-client