$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49e5ed18-02b7-3309-88b9-c65a360f7c17.roa File: 49e5ed18-02b7-3309-88b9-c65a360f7c17.roa (raw, json) Hash identifier: 7K1WJ55lIMld3o/1mN2Z6qjQVaHvFg987JCO/XlOU2Y= Subject key identifier: B9:3D:CE:93:40:0B:C4:05:70:61:C2:19:AA:D5:CB:41:F5:87:46:82 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B072EC5FAFDB8C061C73200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49e5ed18-02b7-3309-88b9-c65a360f7c17.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 207.228.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2e:c5:fa:fd:b8:c0:61:c7:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=5becfc44-4220-4146-8b16-3197ee2754b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:61:dc:ba:2b:26:68:dd:0f:3f:60:e4:bf:e6: 13:60:90:7b:8b:74:50:49:45:a5:ae:2c:d2:1b:b4: 38:26:c3:99:48:d0:91:93:af:12:6f:bc:83:f6:96: 30:f3:9f:8d:25:24:14:76:53:16:ab:22:ab:a4:1c: 2c:d8:4b:04:5f:c6:76:ee:fe:4e:e9:3b:57:a8:15: 40:6f:d1:18:6e:ad:39:4e:fa:1d:eb:82:99:fb:af: 53:d8:1e:7b:64:07:e0:4b:72:d8:83:9c:c9:a1:32: 6f:8c:0e:27:93:57:4b:be:41:2c:c5:98:15:ad:7b: 90:78:e6:ba:f3:e9:46:f9:b5:3e:d4:b3:08:33:0d: a3:6e:97:f2:11:6c:8e:14:94:98:52:79:9a:ed:20: 93:ae:57:f6:8e:07:b2:9b:46:b6:e0:98:3f:e6:b5: c8:9a:a7:7a:7c:f3:84:de:fc:10:10:24:13:3c:c3: cd:a8:e1:1b:12:66:bf:f9:68:12:da:61:cc:52:0a: 03:4a:07:2d:08:f7:33:bd:b5:23:2c:02:b3:f4:ae: a9:2b:55:14:cf:39:f5:60:b0:db:f3:b7:de:e0:df: 2e:ac:39:e5:d9:3d:34:b8:f9:29:62:a4:d0:63:36: c5:78:77:ac:21:53:ed:11:68:0b:41:fb:d0:61:59: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3D:CE:93:40:0B:C4:05:70:61:C2:19:AA:D5:CB:41:F5:87:46:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49e5ed18-02b7-3309-88b9-c65a360f7c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.228.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0e:8a:ae:a2:27:65:81:23:d2:e3:93:26:40:b8:1e:62:05: dc:49:c9:01:17:c0:d5:65:87:48:5b:e7:2e:6b:1c:ef:a9:45: 49:2a:2d:a0:34:2c:c4:e2:15:4c:e5:01:9c:3d:78:df:fe:53: af:92:f1:94:a1:e1:f3:88:68:ba:80:38:e1:1f:d2:5d:97:15: 29:3c:e2:0b:18:14:26:38:bf:4d:89:43:33:bc:75:7f:d9:90: 6c:67:db:91:1e:87:fc:78:38:59:fe:d1:f2:fe:1d:ad:f4:7d: ff:94:30:f1:51:b7:02:90:a2:82:a0:26:21:24:48:ba:c8:3e: df:78:6c:0b:44:71:9d:38:d5:0c:e7:5f:06:a9:62:a8:73:74: a3:61:95:d7:03:64:92:bf:df:a7:82:c5:ca:1e:d8:1f:d7:db: 8d:29:75:e8:e7:6c:7d:0f:66:bb:ec:ee:55:82:ad:b1:a5:4d: 70:8f:81:b1:2f:2c:0b:cf:b0:ef:a0:e3:10:8a:a4:9e:ac:40: ad:f2:34:83:73:4b:48:87:e3:6f:9a:67:1a:28:0f:9d:94:13: 64:ad:86:b0:ec:1b:c2:05:43:61:c8:0e:d9:a5:09:52:3d:32: 0a:49:c1:8f:d6:41:2f:c7:fd:7b:d5:d6:60:c1:73:28:51:21: f0:14:bf:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBy7F+v24wGHHMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NWJlY2ZjNDQtNDIyMC00MTQ2LThiMTYtMzE5N2VlMjc1NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmHcuismaN0PP2Dkv+YTYJB7i3RQSUWlrizS G7Q4JsOZSNCRk68Sb7yD9pYw85+NJSQUdlMWqyKrpBws2EsEX8Z27v5O6TtXqBVA b9EYbq05Tvod64KZ+69T2B57ZAfgS3LYg5zJoTJvjA4nk1dLvkEsxZgVrXuQeOa6 8+lG+bU+1LMIMw2jbpfyEWyOFJSYUnma7SCTrlf2jgeym0a24Jg/5rXImqd6fPOE 3vwQECQTPMPNqOEbEma/+WgS2mHMUgoDSgctCPczvbUjLAKz9K6pK1UUzzn1YLDb 87fe4N8urDnl2T00uPkpYqTQYzbFeHesIVPtEWgLQfvQYVks5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk9zpNAC8QFcGHCGarVy0H1h0aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDllNWVkMTgtMDJiNy0z MzA5LTg4YjktYzY1YTM2MGY3YzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz+RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoOiq6iJ2WBI9LjkyZAuB5iBdxJyQEXwNVlh0hb5y5rHO+pRUkqLaA0 LMTiFUzlAZw9eN/+U6+S8ZSh4fOIaLqAOOEf0l2XFSk84gsYFCY4v02JQzO8dX/Z kGxn25Eeh/x4OFn+0fL+Ha30ff+UMPFRtwKQooKgJiEkSLrIPt94bAtEcZ041Qzn XwapYqhzdKNhldcDZJK/36eCxcoe2B/X240pdejnbH0PZrvs7lWCrbGlTXCPgbEv LAvPsO+g4xCKpJ6sQK3yNINzS0iH42+aZxooD52UE2SthrDsG8IFQ2HIDtmlCVI9 MgpJwY/WQS/H/XvV1mDBcyhRIfAUv4E= -----END CERTIFICATE-----Generated at Mon Oct 20 03:41:25 2025 by rpki-client