$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa File: 4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa (raw, json) Hash identifier: lDOIuhd5vfXJG3V88LpoadJfufjmDtQah+EjKz3IC40= Subject key identifier: FC:BB:3D:6E:C4:D0:61:A4:B3:B9:C1:AF:A0:29:6F:14:C9:F0:6A:19 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B92DCF8991B73F07A9112FF80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 852 IP address blocks: 68.182.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f8:99:1b:73:f0:7a:91:12:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=15578f8f-44a7-4f50-825e-85cd0b0a2b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:eb:ed:77:97:61:64:a4:89:3b:d4:62:d3: a5:ef:70:90:c9:22:c6:99:68:e4:65:ca:8f:1b:b9: 57:e1:be:d8:fb:03:36:17:07:9e:df:69:e3:09:16: 9b:a3:82:f6:b1:b8:c9:69:ee:12:8b:65:84:16:b8: 1f:6d:52:01:8c:da:44:23:fa:c9:ef:7b:17:6a:43: 13:fc:d5:ce:7c:ba:ff:ad:b8:50:49:1c:09:5a:29: 90:99:05:ba:91:6a:7a:8a:f3:5a:09:af:fa:6c:21: ce:6b:ad:b0:5c:92:87:3f:df:18:0b:60:a2:3f:51: a7:7c:55:ab:b9:5c:64:9d:aa:9d:4c:df:0c:c6:94: 01:19:e3:9d:fe:0c:5e:a6:be:08:69:43:6b:ba:d2: b3:ff:fe:24:4c:ae:e3:12:0e:cc:aa:65:dc:ab:f8: 38:38:28:df:47:33:82:4c:75:4c:14:05:f4:89:21: b8:6b:80:b4:e3:16:e8:72:e3:12:cd:5d:6a:4b:3e: fd:ee:02:e4:90:3a:5a:37:47:69:35:a4:8f:6e:b1: 0f:e9:23:03:37:1b:a2:5a:b7:34:d9:b4:44:56:15: 1d:25:2c:0d:9c:c4:ca:3a:ad:fb:d6:c7:20:1b:dc: b8:42:8a:40:ad:03:79:04:6d:f2:63:91:19:04:0e: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BB:3D:6E:C4:D0:61:A4:B3:B9:C1:AF:A0:29:6F:14:C9:F0:6A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ec:dd:4b:50:75:80:26:9c:a0:44:11:10:93:b2:9b:1d:2c:0a: 28:32:38:19:0e:f4:ff:91:c3:79:ce:e1:a9:2c:51:2c:bc:21: 22:1c:88:5e:c7:3b:14:b7:8e:33:ff:dc:bb:02:7a:9e:73:69: 5e:8f:60:ed:c6:f7:fb:15:c6:68:a7:c2:69:ad:1c:d1:7d:c7: 85:b1:9c:40:80:9a:0f:9f:f3:16:82:fa:d2:9f:f1:28:dc:09: 7e:ab:7d:fb:84:c1:6a:6c:ad:a8:6c:77:48:b9:a5:3d:50:dd: ba:d5:8f:32:ec:1b:f9:af:ac:11:f0:30:b6:66:8f:2b:6c:2c: bb:b1:5b:75:31:4a:cd:39:54:ef:5a:92:9c:85:2a:7e:21:38: 84:a8:fa:d6:6d:ad:15:2c:fa:55:7a:68:88:7b:e2:a9:bd:21: bc:58:1b:e3:96:94:75:47:55:17:8e:bc:ed:f9:19:e8:c7:fa: 83:c8:e7:0a:a9:2f:05:63:ce:c7:07:73:27:a0:16:ea:04:1f: df:44:47:34:99:b1:90:74:f0:b5:36:6e:e2:37:9c:1c:72:e3: ad:46:37:3a:34:e6:5a:e6:82:c0:f4:ec:4a:aa:ea:0b:69:7b: 80:bb:2e:71:fd:be:47:bc:0f:19:1e:bf:46:0f:bc:68:bf:ef: 7a:84:af:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PiZG3PwepES/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MTU1NzhmOGYtNDRhNy00ZjUwLTgyNWUtODVjZDBiMGEyYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv/r7XeXYWSkiTvUYtOl73CQySLGmWjkZcqP G7lX4b7Y+wM2Fwee32njCRabo4L2sbjJae4Si2WEFrgfbVIBjNpEI/rJ73sXakMT /NXOfLr/rbhQSRwJWimQmQW6kWp6ivNaCa/6bCHOa62wXJKHP98YC2CiP1GnfFWr uVxknaqdTN8MxpQBGeOd/gxepr4IaUNrutKz//4kTK7jEg7MqmXcq/g4OCjfRzOC THVMFAX0iSG4a4C04xbocuMSzV1qSz797gLkkDpaN0dpNaSPbrEP6SMDNxuiWrc0 2bREVhUdJSwNnMTKOq371scgG9y4QopArQN5BG3yY5EZBA72RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPy7PW7E0GGks7nBr6ApbxTJ8GoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGIxZDYyMDktYWYyZC0z N2E2LWI5MjAtZjRiZGFiOGNhNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOzdS1B1gCacoEQREJOymx0sCigyOBkO9P+Rw3nO4aksUSy8ISIciF7H OxS3jjP/3LsCep5zaV6PYO3G9/sVxminwmmtHNF9x4WxnECAmg+f8xaC+tKf8Sjc CX6rffuEwWpsrahsd0i5pT1Q3brVjzLsG/mvrBHwMLZmjytsLLuxW3UxSs05VO9a kpyFKn4hOISo+tZtrRUs+lV6aIh74qm9IbxYG+OWlHVHVReOvO35GejH+oPI5wqp LwVjzscHcyegFuoEH99ERzSZsZB08LU2buI3nBxy461GNzo05lrmgsD07Eqq6gtp e4C7LnH9vke8Dxkev0YPvGi/73qEr6k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:04:11 2025 by rpki-client