$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa File: 49981ea0-1655-3c52-98ab-4de0a45d03b2.roa (raw, json) Hash identifier: 091V3tRkoZwnxGQ7LKi7+17FCPy7w54ByHICubfWsX8= Subject key identifier: 80:24:66:AA:E8:F0:60:80:E1:D7:0A:C5:0B:48:D4:9D:E3:ED:14:7A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C9B54B0E73A79DE74680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 21723 IP address blocks: 208.181.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c9:b5:4b:0e:73:a7:9d:e7:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=17ceba2a-d723-4219-b6ef-640e1f3d4e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:ce:0f:76:4a:f8:54:8c:b9:26:53:f4:8a: 5d:48:55:15:c5:ec:cf:80:c6:56:dd:ca:1d:4d:49: 2f:1e:1c:9b:53:45:8d:c4:2f:95:07:c4:c0:2f:0c: aa:38:8a:e6:d1:28:cc:f4:ad:46:5b:e7:de:07:74: b1:bb:bb:27:4b:a7:61:ed:3d:c6:48:e9:89:7b:28: e3:bf:70:36:58:89:ee:96:dd:d9:d9:1e:71:ab:bb: 3c:e3:e5:ec:33:74:02:27:83:6e:f8:b6:c7:2f:10: 47:56:18:36:c6:ab:28:26:9d:f1:9a:2b:09:87:f5: 83:cb:14:85:d2:c1:90:98:99:b5:a0:a0:d2:eb:97: 3b:4f:b0:10:54:9d:3f:62:de:3a:f7:c0:4b:63:9e: 48:ba:33:02:20:e0:5f:46:cb:4c:5e:a7:eb:36:20: d2:19:0f:16:ca:d4:f0:f2:ca:a1:df:8f:a4:51:72: 73:80:61:7a:ed:bb:82:2f:13:71:10:03:d4:ba:f4: 0a:c9:1f:4c:aa:bc:9d:df:ba:dd:c3:e1:04:c1:7c: 22:fd:48:38:b8:94:41:ff:c6:f3:32:a4:25:9e:aa: ee:15:b5:fc:17:3a:9f:f6:35:22:19:7e:a6:36:ac: 5a:14:49:ea:2a:15:c4:6d:11:23:be:69:a3:16:f2: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:24:66:AA:E8:F0:60:80:E1:D7:0A:C5:0B:48:D4:9D:E3:ED:14:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49981ea0-1655-3c52-98ab-4de0a45d03b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:32:57:90:3b:4c:3b:77:3e:db:5e:53:2d:fa:78:e5:28:5a: da:8d:74:35:d4:85:91:7e:6d:09:f6:0e:fe:9a:b2:fd:e4:60: 66:a8:c1:46:41:66:92:94:34:af:9a:d6:9f:3f:d7:62:81:1b: c6:d3:11:b4:78:5b:f3:34:a1:09:f3:92:76:3f:c7:10:11:29: cb:82:3c:20:eb:4f:2c:99:8a:af:61:89:e7:23:e5:77:3c:87: 7c:92:71:a7:c1:9b:99:d0:9b:f8:89:c2:5a:37:ee:f0:33:ae: fd:80:d8:23:1e:91:80:58:8a:db:91:c5:71:c1:be:57:ee:cc: d6:96:2c:29:0c:cb:a1:71:85:cf:32:21:22:75:5d:3b:77:68: 50:27:57:bb:a9:27:aa:01:2f:21:5b:94:54:54:78:63:56:c7: 25:c6:d8:bd:af:77:58:be:55:6e:c1:bf:02:05:26:76:1a:9c: 65:0a:0f:99:44:d4:51:ec:7a:ec:63:53:b8:da:e2:63:6c:7f: 5e:61:1d:e9:36:38:fe:64:e9:45:f0:92:be:e0:11:ec:88:5e: 17:39:2b:4e:38:82:2f:79:7b:9c:31:8f:a5:24:ca:30:99:24: c5:99:d5:c5:a3:8e:90:74:19:ea:df:67:d4:fe:a9:37:7d:47: 9e:16:ca:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcm1Sw5zp53nRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MTdjZWJhMmEtZDcyMy00MjE5LWI2ZWYtNjQwZTFmM2Q0ZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWjOD3ZK+FSMuSZT9IpdSFUVxezPgMZW3cod TUkvHhybU0WNxC+VB8TALwyqOIrm0SjM9K1GW+feB3Sxu7snS6dh7T3GSOmJeyjj v3A2WInult3Z2R5xq7s84+XsM3QCJ4Nu+LbHLxBHVhg2xqsoJp3xmisJh/WDyxSF 0sGQmJm1oKDS65c7T7AQVJ0/Yt4698BLY55IujMCIOBfRstMXqfrNiDSGQ8WytTw 8sqh34+kUXJzgGF67buCLxNxEAPUuvQKyR9Mqryd37rdw+EEwXwi/Ug4uJRB/8bz MqQlnqruFbX8Fzqf9jUiGX6mNqxaFEnqKhXEbREjvmmjFvKOyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAkZqro8GCA4dcKxQtI1J3j7RR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDk5ODFlYTAtMTY1NS0z YzUyLTk4YWItNGRlMGE0NWQwM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANoyV5A7TDt3PtteUy36eOUoWtqNdDXUhZF+bQn2Dv6asv3kYGaowUZB ZpKUNK+a1p8/12KBG8bTEbR4W/M0oQnzknY/xxARKcuCPCDrTyyZiq9hiecj5Xc8 h3yScafBm5nQm/iJwlo37vAzrv2A2CMekYBYituRxXHBvlfuzNaWLCkMy6Fxhc8y ISJ1XTt3aFAnV7upJ6oBLyFblFRUeGNWxyXG2L2vd1i+VW7BvwIFJnYanGUKD5lE 1FHseuxjU7ja4mNsf15hHek2OP5k6UXwkr7gEeyIXhc5K044gi95e5wxj6UkyjCZ JMWZ1cWjjpB0GerfZ9T+qTd9R54WyuI= -----END CERTIFICATE-----Generated at Sun Oct 19 22:45:44 2025 by rpki-client