$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bc24a32-f782-378e-86be-5280b2b9fcf1.roa File: 3bc24a32-f782-378e-86be-5280b2b9fcf1.roa (raw, json) Hash identifier: W18newWRvXqNulcGZs0nM5BudzqBBh8v+SEqGnmhraU= Subject key identifier: D5:59:B6:54:52:84:36:A7:6A:20:32:DF:B2:6B:AA:85:E6:21:1A:E8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B91778059C179E8333E0BAEC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bc24a32-f782-378e-86be-5280b2b9fcf1.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 834 IP address blocks: 68.182.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:80:59:c1:79:e8:33:3e:0b:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=cf53c0be-21c2-4a49-9bd4-532959717bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:38:58:67:b9:74:a1:10:d9:9f:8b:ca:e2:0c: 17:59:a8:80:c7:63:86:98:eb:00:bb:70:cd:bb:d4: e1:1d:3b:76:2b:4e:eb:3e:d6:3f:ec:31:ea:15:cc: 89:d5:5e:e1:87:3e:0f:60:8c:1e:cd:f2:bc:b8:a9: fd:86:41:6d:f7:68:b5:14:14:bd:79:35:64:82:7b: 2c:5b:54:c8:88:8c:85:5a:e3:28:03:39:7b:01:5b: 7c:a7:76:b6:ce:e5:66:84:d0:2a:b7:2f:66:97:07: af:64:6e:0b:00:ab:3c:1d:67:80:93:0d:5f:15:33: db:dd:13:35:9f:47:04:04:bb:c8:c4:dd:cd:c8:fc: 0f:17:33:18:cc:46:b5:2b:ef:f2:66:e6:39:0a:e1: 6d:6b:31:2d:e2:44:c5:ab:2c:ee:19:41:07:cd:ef: f4:a7:e8:90:a1:67:bc:8e:49:70:c6:dc:0e:4c:b7: 03:b5:02:23:dd:77:67:cf:59:6b:fd:f0:96:fb:79: 6e:fe:50:28:26:c8:78:10:a6:dc:92:76:fd:c7:6f: 78:89:e2:42:6c:53:e5:b7:1f:2e:5a:9f:69:c2:60: 68:b0:01:80:2f:a8:57:32:43:7b:85:ca:ff:c4:e6: f7:bb:94:e5:b5:96:7f:f7:b0:c7:d9:ae:d5:1a:3a: 87:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:59:B6:54:52:84:36:A7:6A:20:32:DF:B2:6B:AA:85:E6:21:1A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bc24a32-f782-378e-86be-5280b2b9fcf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ff:67:22:09:b7:de:0a:fc:9a:6b:57:e3:1d:38:b0:38:d1: ec:ae:1e:57:b7:6e:85:cc:9b:66:eb:20:20:58:51:89:97:f6: 83:4d:f0:13:10:1f:d9:53:c0:e0:ef:b0:de:48:43:dc:0b:49: 20:37:f5:ab:1b:b9:79:4d:2e:9a:9d:75:1c:e6:17:06:fd:74: 97:2b:71:31:27:b9:7b:68:9f:00:5f:31:81:87:d8:71:16:12: ee:8a:45:6b:90:8c:ce:c8:64:4e:24:69:40:0b:69:98:46:ca: 2c:8d:f9:44:17:f2:1a:96:68:1b:87:bb:d7:fd:25:e9:e7:ba: 25:7d:a8:0d:17:0f:40:4a:21:6f:26:a1:dd:dd:48:94:51:33: ab:84:40:1d:b1:41:5d:37:14:7c:79:8d:56:a0:74:91:92:69: 3d:a9:63:08:da:3a:68:a6:61:be:4a:eb:c2:4e:03:41:ec:50: 7a:0c:58:7b:4f:a7:85:32:22:28:4a:a5:9d:d8:0a:04:bc:12: e8:eb:56:7b:76:62:5e:89:83:e9:94:4f:9b:d8:be:28:5d:e1: 76:10:5d:18:ab:16:8d:1e:6c:2a:77:3b:c1:86:50:eb:ad:c2: e3:a3:0c:00:f4:77:af:04:3d:2e:5a:4b:af:20:28:be:f3:ff: cc:1d:73:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd4BZwXnoMz4LrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk Y2Y1M2MwYmUtMjFjMi00YTQ5LTliZDQtNTMyOTU5NzE3YmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgThYZ7l0oRDZn4vK4gwXWaiAx2OGmOsAu3DN u9ThHTt2K07rPtY/7DHqFcyJ1V7hhz4PYIwezfK8uKn9hkFt92i1FBS9eTVkgnss W1TIiIyFWuMoAzl7AVt8p3a2zuVmhNAqty9mlwevZG4LAKs8HWeAkw1fFTPb3RM1 n0cEBLvIxN3NyPwPFzMYzEa1K+/yZuY5CuFtazEt4kTFqyzuGUEHze/0p+iQoWe8 jklwxtwOTLcDtQIj3Xdnz1lr/fCW+3lu/lAoJsh4EKbcknb9x294ieJCbFPltx8u Wp9pwmBosAGAL6hXMkN7hcr/xOb3u5TltZZ/97DH2a7VGjqHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVZtlRShDanaiAy37JrqoXmIRroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2JjMjRhMzItZjc4Mi0z NzhlLTg2YmUtNTI4MGIyYjlmY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL/ZyIJt94K/JprV+MdOLA40eyuHle3boXMm2brICBYUYmX9oNN8BMQ H9lTwODvsN5IQ9wLSSA39asbuXlNLpqddRzmFwb9dJcrcTEnuXtonwBfMYGH2HEW Eu6KRWuQjM7IZE4kaUALaZhGyiyN+UQX8hqWaBuHu9f9JennuiV9qA0XD0BKIW8m od3dSJRRM6uEQB2xQV03FHx5jVagdJGSaT2pYwjaOmimYb5K68JOA0HsUHoMWHtP p4UyIihKpZ3YCgS8EujrVnt2Yl6Jg+mUT5vYvihd4XYQXRirFo0ebCp3O8GGUOut wuOjDAD0d68EPS5aS68gKL7z/8wdcyU= -----END CERTIFICATE-----Generated at Sun Oct 19 14:46:13 2025 by rpki-client