$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d2bad11-9069-3f93-8a1f-83d1d6e15922.roa File: 4d2bad11-9069-3f93-8a1f-83d1d6e15922.roa (raw, json) Hash identifier: h2yerS/1iM8/nvanXQBnRwxpIenI/uoxwsH/LwUCm2U= Subject key identifier: 4A:72:4B:7F:85:E3:CA:3A:CA:AD:44:7A:D4:CC:1D:7E:12:5D:2B:27 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B073528F9C85D68AF4E4280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d2bad11-9069-3f93-8a1f-83d1d6e15922.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 173.182.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:35:28:f9:c8:5d:68:af:4e:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=65db3215-7165-422a-b1ae-bf104311b4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:81:cd:b5:3c:25:a9:f4:ae:8a:01:45:54: 7a:3c:be:1f:6a:e1:cf:3b:80:ad:29:bf:32:0d:9a: 1e:ed:66:87:da:ea:24:3d:7d:fd:2e:9e:5d:47:46: 5f:9b:f3:05:f2:52:88:8c:5f:b2:20:d5:38:01:a8: 3c:c9:d2:f0:2d:f4:2a:fb:79:55:73:9c:c2:6a:c5: 12:63:87:c0:d3:ad:63:dd:04:78:f2:56:4b:77:f8: b6:0d:ee:82:3e:b6:69:b5:7a:48:95:86:d9:6f:a5: ad:c9:a9:05:97:ca:f9:1b:1c:af:5e:14:93:58:77: 8f:0f:cd:76:ce:f3:10:d2:e6:7a:21:74:43:17:d2: f4:af:eb:f6:5c:7c:cd:19:f6:f4:9a:4e:37:4d:47: 22:4f:b1:9e:f5:b6:3a:0f:ce:19:5b:4b:80:0c:ed: e7:63:6d:54:93:98:2f:c0:d9:6e:20:dc:bf:30:13: 08:4f:e8:72:43:3a:63:82:62:07:e8:80:05:52:85: 24:85:6d:b5:1d:4c:89:d0:67:02:01:72:9e:9c:d0: 6b:e5:74:be:c6:50:06:95:e4:8c:64:9e:df:c4:50: ef:b6:17:91:59:9e:8d:e6:5c:8d:86:fe:55:4b:65: 28:6c:c1:0e:3d:bd:78:d0:f0:ce:0b:39:d2:76:7b: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:72:4B:7F:85:E3:CA:3A:CA:AD:44:7A:D4:CC:1D:7E:12:5D:2B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d2bad11-9069-3f93-8a1f-83d1d6e15922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.182.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f3:3f:21:c9:85:e8:20:b6:0e:e4:ab:51:c2:20:ed:0c:2e:54: c7:ed:a4:5a:42:91:a9:a5:35:85:bf:98:9e:cd:2c:e2:35:73: de:0b:b8:bf:d0:f5:33:98:9c:4d:69:15:52:59:31:6c:81:95: 9c:69:aa:eb:17:a0:ed:af:97:cb:a2:75:2a:08:ed:2d:c0:a7: cc:c1:5f:ef:45:a2:ff:6f:46:1c:b3:83:46:6a:7d:52:60:d5: f2:97:48:10:d9:43:10:d8:66:44:31:1c:32:29:55:db:42:2a: 49:54:10:a8:2f:5a:1e:46:46:43:dd:e7:0d:48:7b:f0:98:e6: a9:db:1e:5c:96:d9:78:b6:95:5a:76:07:94:87:fb:fb:98:89: d9:63:e7:17:cd:39:97:ed:4a:b8:6d:e7:69:70:94:9c:13:0b: dd:dc:c5:ce:70:22:23:f3:50:9b:c0:99:11:92:fc:4c:b1:0b: f8:d0:14:08:85:2b:25:55:a0:5c:be:12:30:86:af:fc:d1:2f: e0:1f:37:c0:f7:10:e7:20:0c:d5:de:4f:22:a5:09:64:c1:ac: e8:24:e4:4d:f3:7c:db:59:be:42:ef:7a:60:32:56:32:7b:04: 0a:ef:33:a4:5d:f4:94:59:3b:0e:74:d9:5d:56:9d:3f:1a:d7: f3:63:13:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzUo+chdaK9OQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NjVkYjMyMTUtNzE2NS00MjJhLWIxYWUtYmYxMDQzMTFiNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeGBzbU8Jan0rooBRVR6PL4fauHPO4CtKb8y DZoe7WaH2uokPX39Lp5dR0Zfm/MF8lKIjF+yINU4Aag8ydLwLfQq+3lVc5zCasUS Y4fA061j3QR48lZLd/i2De6CPrZptXpIlYbZb6WtyakFl8r5GxyvXhSTWHePD812 zvMQ0uZ6IXRDF9L0r+v2XHzNGfb0mk43TUciT7Ge9bY6D84ZW0uADO3nY21Uk5gv wNluINy/MBMIT+hyQzpjgmIH6IAFUoUkhW21HUyJ0GcCAXKenNBr5XS+xlAGleSM ZJ7fxFDvtheRWZ6N5lyNhv5VS2UobMEOPb140PDOCznSdntJGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpyS3+F48o6yq1EetTMHX4SXSsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGQyYmFkMTEtOTA2OS0z ZjkzLThhMWYtODNkMWQ2ZTE1OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPM/IcmF6CC2DuSrUcIg7QwuVMftpFpCkamlNYW/mJ7NLOI1c94LuL/Q 9TOYnE1pFVJZMWyBlZxpqusXoO2vl8uidSoI7S3Ap8zBX+9Fov9vRhyzg0ZqfVJg 1fKXSBDZQxDYZkQxHDIpVdtCKklUEKgvWh5GRkPd5w1Ie/CY5qnbHlyW2Xi2lVp2 B5SH+/uYidlj5xfNOZftSrht52lwlJwTC93cxc5wIiPzUJvAmRGS/EyxC/jQFAiF KyVVoFy+EjCGr/zRL+AfN8D3EOcgDNXeTyKlCWTBrOgk5E3zfNtZvkLvemAyVjJ7 BArvM6Rd9JRZOw502V1WnT8a1/NjE08= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:02 2025 by rpki-client