$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa File: 5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa (raw, json) Hash identifier: 9AsZcD6aQn0v1x0I4sfoeXwQmnYyaYXU03Wl0ITzc+E= Subject key identifier: 5F:1D:F1:C2:EB:12:0B:54:7F:C0:27:DA:0C:63:41:31:73:B3:72:02 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B48E1B7F32B7A58750192F4C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 33549 IP address blocks: 204.191.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b7:f3:2b:7a:58:75:01:92:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ce89a397-b5fa-4972-b3a9-f0e5e60f3d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:d6:b3:e9:0f:fc:79:a8:90:8b:6a:42:78: 51:64:c9:43:bc:07:b8:67:02:18:25:61:26:96:71: 44:47:1b:00:88:4f:a1:9a:4f:bb:e8:06:e9:1c:6f: f8:fe:bd:e0:3a:8b:e3:3f:c8:1a:ed:19:15:f1:18: 55:3d:8e:4b:02:0e:31:98:82:68:9c:55:6f:ac:8f: e8:4a:4f:e8:7e:21:f3:d6:3d:f2:89:a9:c9:cc:09: 06:d7:6f:1f:05:86:d6:97:b9:97:31:8d:1a:df:0a: 99:9a:e4:fb:b5:76:2b:4c:28:9c:35:31:2f:e2:f6: 28:d1:db:9b:1a:3c:2c:7f:df:09:0d:6e:02:96:40: 2f:58:d9:75:59:90:ae:95:2f:fc:9c:7b:25:c2:06: 62:33:d2:5c:36:75:44:bf:ce:2d:d7:1f:8f:cf:2b: d0:f8:1e:88:f7:4a:2e:c6:df:f4:7c:64:21:4c:33: 82:06:a3:63:f7:9d:4f:65:36:e5:e8:5c:5f:fb:39: 95:c0:2c:d9:ca:c0:64:8b:77:cb:ea:96:3c:ab:6c: 3b:97:b4:03:ed:f3:d7:4c:94:a9:a8:30:ab:2f:b1: 69:73:76:52:8e:e8:d4:ae:bb:46:12:65:ec:eb:92: c0:59:e9:33:03:f9:8e:d2:94:3a:4e:46:ac:54:15: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:F1:C2:EB:12:0B:54:7F:C0:27:DA:0C:63:41:31:73:B3:72:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fc23c1d-88f0-3461-a9a8-ce8f70984c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.191.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:92:aa:13:a9:ee:be:fe:f5:8e:ea:32:78:ad:02:21:07:c3: 20:c5:06:93:8f:de:6f:44:61:20:df:8c:c6:5a:fb:37:55:a8: b9:d9:48:71:29:20:de:dd:bc:25:a3:6e:c7:5d:32:54:14:7b: 44:12:49:75:79:d6:b0:11:1c:6d:d1:b9:fe:73:39:99:74:28: 7e:65:27:b0:b0:b4:ea:2a:16:a4:39:8d:24:f4:97:ea:c3:d4: 29:60:5d:ec:52:86:85:e5:68:f4:0d:7c:7f:89:bc:7d:dd:02: 62:5b:61:83:1e:80:c6:ec:ac:b2:ae:7c:59:12:0a:fb:26:3a: 7d:08:95:eb:be:8a:7e:8c:af:da:3d:97:07:81:30:9c:10:41: 40:b0:55:b7:5c:da:2d:28:ec:e7:11:a6:64:53:6c:ba:4c:c1: 00:3d:9d:4c:1f:ed:0f:ff:02:53:6e:e4:94:22:6a:31:1f:ed: 9f:8c:55:48:f4:b7:74:90:34:75:44:3d:61:af:44:47:da:5d: 69:07:c1:00:db:8b:77:52:bb:7b:0d:76:12:79:ed:7d:0e:b8: b2:3b:eb:1b:61:e6:2a:58:8d:8b:1c:cb:0a:4f:f2:6b:00:0b: fe:45:53:00:30:cb:fe:8c:2b:26:14:87:2b:1e:da:ae:b1:e9: 6d:8a:f7:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bfzK3pYdQGS9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2U4OWEzOTctYjVmYS00OTcyLWIzYTktZjBlNWU2MGYzZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyufWs+kP/HmokItqQnhRZMlDvAe4ZwIYJWEm lnFERxsAiE+hmk+76AbpHG/4/r3gOovjP8ga7RkV8RhVPY5LAg4xmIJonFVvrI/o Sk/ofiHz1j3yianJzAkG128fBYbWl7mXMY0a3wqZmuT7tXYrTCicNTEv4vYo0dub Gjwsf98JDW4ClkAvWNl1WZCulS/8nHslwgZiM9JcNnVEv84t1x+PzyvQ+B6I90ou xt/0fGQhTDOCBqNj951PZTbl6Fxf+zmVwCzZysBki3fL6pY8q2w7l7QD7fPXTJSp qDCrL7Fpc3ZSjujUrrtGEmXs65LAWekzA/mO0pQ6TkasVBWiiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8d8cLrEgtUf8An2gxjQTFzs3ICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWZjMjNjMWQtODhmMC0z NDYxLWE5YTgtY2U4ZjcwOTg0YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzL/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2SqhOp7r7+9Y7qMnitAiEHwyDFBpOP3m9EYSDfjMZa+zdVqLnZSHEp IN7dvCWjbsddMlQUe0QSSXV51rARHG3Ruf5zOZl0KH5lJ7CwtOoqFqQ5jST0l+rD 1ClgXexShoXlaPQNfH+JvH3dAmJbYYMegMbsrLKufFkSCvsmOn0Ileu+in6Mr9o9 lweBMJwQQUCwVbdc2i0o7OcRpmRTbLpMwQA9nUwf7Q//AlNu5JQiajEf7Z+MVUj0 t3SQNHVEPWGvREfaXWkHwQDbi3dSu3sNdhJ57X0OuLI76xth5ipYjYscywpP8msA C/5FUwAwy/6MKyYUhyse2q6x6W2K99Q= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:01 2025 by rpki-client